www.estofal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:73:df:25:dd:d8:fd:96:dc:ba:dd:38:97:d9:ab:0e:10:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.estofal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:df:25:dd:d8:fd:96:dc:ba:dd:38:97:d9:ab:0e:10:ce
Serial Number (int): 387878230380596999511889146863776428855502
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:7c:c9:83:8c:96:9b:99:b5:8e:c5:5b:06:75:34:65:4b:c6:9e:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:5f:00:98:34:f2:6d:97:1f:c0:74:e1:15:87:40:ca:dc:79:c8:e5
Fingerprint (sha256): c0:02:b3:e2:34:81:40:cd:16:38:c5:eb:bb:0b:2e:e7:05:48:45:f8:7b:2c:42:42:ef:4e:42:d5:19:41:7a:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.estofal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.estofal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.estofal.com

Other certificates including the domain name estofal.com

(limited to 100 certificates)
www.estofal.com
estofal.com
estofal.com
estofal.com
estofal.com
www.iijco.com
estofal.com
www.nicolenewman.com
www.durafon.com
osservatori.com
nadiakhan.com
www.estofal.com
ijumprsa.co.za
palagonia.org
www.usautocars.com
fleshtunnel.com
www.estofal.com

Certificate

The complete raw certificate details for www.estofal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsnivV6KLszbRmTXjT/09
32Vc1wUFC8PFu+0dase0/lll2NC4VueYr1/0kf6jSN795QC6EzxI5G4oaH0QUyiM
cEJIk+FfgyvlsEgSiuJNjBMghdxbABKod5t9tAZrly581AOPY3s8Pq94ck5QAU0f
g/tFZq6xkibEbGIlYf51UAGhSdIsXAfRcaXgQ+xVTK4R/9ecNGqqF7uztbDkVahR
RzdRXe+CPYgBL8BYFbMVcKA/QOjslj5yQ900bFbSt0ja5EtdH01/k8MbrzWAJoyt
tZACjXQ8AgCTXc2I/miQ38N8EeKdEVDAiLb7b50Mp+52ca2oNhtqycXchJuhjysN
yp0Ato2W27dBkC6z6B8cmNMr9dGqon7HfRIm5Ak6QbLar8Cxgvq4hZhgJ7/ArnkC
Fq9LYlhERTDnicc+zOXrKxA7eZ76gUtS+QRu4BRpb/8WDV++U/rUdO0ozyW01rFs
WFpIdfREcK8hW9OQ89/JaLBNA7m0ZYbGtRAX8E19XmqXdxLSDVgl3+C2wr2iaire
R+QX51l222kV6YA31yfmdz/QXclK6C2BgLIpy5tqDp0qWUixHX0AdhCGZiYXq8De
9UPcQi2kgPiCEqeyzZs93o1PDzEy+k4BO4gkaUV89IRLZrBZ9sFpbgw1Po87IHdx
9e6QGtyRUY+oDaouxvJ6N8kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387878230380596999511889146863776428855502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 21:49:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 21:49:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.estofal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728099892399232385831469190072369687105924373932335209922290615109987827103430289611560163341901467405888431091183830443237839567107150054082917177662091576303803027986978510385518157617502290531606628344003345257611170297023820245952229019317106716816232889910308874569053518590310202269564828351809318808406501515675468175987748987414091427998503231448405813867116069213379645731747873781228473873633509638958684968755701150459840519088013848668590770908047392317070813745804429006740275786861405177946751059275908748901719673681537966305310603061887451732134524811294408246887930240329320176768150751549403718893335534970371710987040037983454975776256799042092875240613583979050083695689414960802652344376986338727373181160253350135427077642959450090512267940770108186464287618284411252949123336806166338688693013861078241479245250743158098738292459986073834058332017779385186713547360632340217415262288303443416488467314968691276565129298925199188986263983496441183478615513961498512796749449369640238815821242765657806191632920667106810189740761178643805551221564900527490906678596004741393629472752966179986765127713474066569386271199560325620202783268573367704562872038034127319644886709586198949251128013564212798564068898761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							377cc9838c969b99b58ec55b067534654bc69ee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estofal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170743df78b0000040300473045022100ed969184e7c114275d47af7a569e2bef96554a3af0b689344888ec024eace25c02201a32d2db7dafb6f7ee7ccd74f1d4f641c8dd61bb8aaaa306dc89b16c7f1b19170076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170743df7c3000004030047304502207d37a74bda383c24ccb0c6ff9a15adf644bd787bf05e387fd7f53ba8ac323ec6022100e901bb812d46794e4478c315ec8618ea46d23a9cf5bc438a6ab9c31a78c0cf8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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