librari.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:e1:4b:2c:17:d3:71:bb:c2:dc:67:1a:45:84:01:98:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=librari.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:e1:4b:2c:17:d3:71:bb:c2:dc:67:1a:45:84:01:98:86
Serial Number (int): 326970538859730630239183700529633613158534
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:94:e3:38:b1:49:7c:5f:96:4e:08:fe:1b:ea:cb:c5:86:a9:29:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:43:8b:ba:c4:a2:19:7d:55:91:7d:47:92:34:09:34:82:21:71:07
Fingerprint (sha256): c5:a9:0e:2a:6b:95:77:4f:53:08:14:50:02:dc:e6:f4:33:7c:29:52:25:13:3f:41:6b:20:dd:88:f4:f2:4a:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate librari.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for librari.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

librari.com

Other certificates including the domain name librari.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for librari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326970538859730630239183700529633613158534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 01:18:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 01:18:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'librari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840927803217162518255203940163921120625221234104560761505643734141418185455420975937041150168556822127946245957768659975562772041480162357673197330563686598067610738992667851938802563654249220528870983986918617715064213139283070988963269736186303452793802652227509100667206525158833812998439309626649737015388648902130331288770983466333164419418817350893173009983296104883622801104547171718448868558525963520652559426204272298328404010871984812180710168278214148380975772661700110142030525220734137877698327005497501366868233028579265806946958481187242530414839056024668504053879876342154540784434198777860849808930897680416204430656788618896432982793986242921912337467209815302872125826365852704469756305844928207419124518312703810738485090621375703467008977366653360718520231288217027469713416204695121856755905630047405219503832664760907662359315555691052897023633789008508661501099265423356226864708178359213638337596092873992685419446070212294020925383067758073019641249179253882320186311954133518795734195300224473835719151469337918607705935299695240054160569032871633369381901884821508819368028766474446150654521255847746832679078838124564751145379655162051311497531738658751936819817150153961438960513758287355118833488429827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b94e338b1497c5f964e08fe1beacbc586a92913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librari.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001695b185ed0000004030046304402203e73dafeb78fbbb3e2d7b0de4cf93acf0ca45dcc4ee768cd4132f172f98f9b1202206afdc422ff4a38eeb862bb1ab9b539a598ce071199642ff9223ffe6bf1de1bf0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695b185f260000040300473045022100c3a0e218d2509947d7908f59bac9335a29802b613d9ae22cb10676d1c7b9787702203d1ca277caef24260a74edeb4cd3b421bed63ceb14b45eddeca81029eab68597
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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