chuft.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:9d:2d:f0:d4:2b:e6:ef:14:cf:23:c0:70:0c:b4:e0:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chuft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:9d:2d:f0:d4:2b:e6:ef:14:cf:23:c0:70:0c:b4:e0:3a
Serial Number (int): 320754916972809160808603282573858373427258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:d5:d5:6a:1c:cf:6e:32:ec:9e:aa:dc:ac:c2:73:ed:59:a8:e9:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:41:15:d1:55:ec:72:7c:5f:d8:19:c5:d5:93:8c:01:6b:7a:96:5f
Fingerprint (sha256): c3:55:88:9d:ab:0a:bc:a8:97:32:7d:c2:7c:ab:37:26:b6:54:db:91:81:f5:95:69:09:29:85:3c:17:87:bc:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chuft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chuft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chuft.com

Other certificates including the domain name chuft.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chuft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320754916972809160808603282573858373427258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 12:36:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 12:36:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chuft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754554794544441413388591484060658955919424530970885625311947455226909439036398783551872202823021573570242418587599897514396960823979005897026164934979572107022841007061249048879750139457758772930955232953831462052320542996093480143476587049612317350407182969820002012053861136924855444694912105034382332560436973564173421350269074374030471002458904426566748955360042232656449913848874468023370862240551194901290809580067261394726941604652611667328865170130486888901874983195627974704197484026919027196295259533875109156158685508747878469753431963285114452455444513905280105234081706655310729419192539880692603697242203513357120042919218682908653091548578744487931810841617183380596148690446825887820965030295422287961556767335886974906238637494158218095509895335261829083729295246294624967452217295547081335096483159554328650253863770849513848207061188393237837996767007369315629607656083876948028300610138991402314028285644555466773875636683288133668434908000857495381058375342984867420588701970239005685399714618545598917453803436456571682357390115879923996696353406681648746051038309238689575733655636318437117219794774205950439439471747899814022200315909829095598533963472371150728406692413841150956733447160259073986473677295543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74d5d56a1ccf6e32ec9eaadcacc273ed59a8e958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017043ea09bf0000040300473045022011c8dfe70a8cb3a4481d83b509413efb7bed6748bb4331740f17124cfddb12e0022100cfe445b4b7c29cb368e65ab5918563febdf46a729c5e827de0876e2f99558e130076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017043ea09f30000040300473045022100ef08588c40a4c4aea26289fb6b4303491f3788a3f266595e69c4a489f03686ad02205b1da3e35b14fb136665f93cd47ef15c607babfb431ca529b7df2197a29a6db6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0041631310e5d7032a148c365cf8118a5e0baf4ab829c1d14ec7503a114af2514045f27e4c1563fdafba375f6fe72239287c7fd89709020693299dfdcaf14a946beb2c48cf0709774bc9819f4514d7d083747caadbd840de963bc119170f981d05272e9eea55ab0b5bf72d59144cd279cb4dc95f3b3c687cafd6d1d8f82ce2c74581f04cc2df70c58798c1698e8d43c0cfca46b560b29468e0129dc66d0519d062d01d481aea582662985e06418214beb9c8298409858bc344ab0079366edcd053c82b6c1e7eb04eebc59836b4bd3f1818eec51becc2fa789d8fa377d4bb10933b3b055b432a62eba8c71e719924e5177e495cfc50c3a7496f9b596b1a23160eae