cafeneto.com

Issued by R3

About this certificate

This digital certificate with serial number 03:26:0d:3f:12:43:64:90:db:d6:a5:b5:f3:95:69:64:13:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cafeneto.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:0d:3f:12:43:64:90:db:d6:a5:b5:f3:95:69:64:13:08
Serial Number (int): 274285195187346476530612021464385399821064
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:91:f3:b6:72:3d:fb:7f:5a:7f:53:df:81:e8:94:34:ca:b1:a2:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:28:27:53:7c:cb:9d:c7:35:6b:cd:61:97:76:f3:cc:d6:18:f2:ef
Fingerprint (sha256): c7:ed:df:1d:ba:a3:aa:ff:3b:05:52:50:a1:4a:1b:00:31:e8:f7:be:36:bf:91:a3:e9:40:cc:7a:b1:f8:2c:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cafeneto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cafeneto.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cafeneto.com

Other certificates including the domain name cafeneto.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cafeneto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAyYNPxJDZJDb1qW185VpZBMIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjAxODQyMjJaFw0yNDAyMTgxODQyMjFaMBcxFTATBgNVBAMT
DGNhZmVuZXRvLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKBA
fOSQkID9IwKaw5o1L8y1+F7OtzbEGLo4hNETIH1Vy/fZdYTdFGJ6Yx6sIbV9LlPu
pMlnsbF277qbMIpvDipcT2+F3QTxVvDXXOcdr1gD5ZKDG/CqxU8ME8DJhgxR7Eet
8vhVCvuxI3subqEm64TMbqc8op2wHE6n3iFh9AcLUuN2OICyghRsZPrluSlN2Dg0
L662yst7rAzNDVC05W6sqCTWrVJat86wMj0Cb9NLeEZPeKFayEHyHhd4Ril7if0s
xJXMJy1Wx77RwKYKTyzMb6lQ/rto215qh+Rodf9TtbBrCNW1eW2RiEP9DI8ZI4gX
2SPD3UHFf2GqF9V4DVBGF7pUy+wEpd2k+g4psy4rr68CCXcULpdffmH5MR/tj0S8
QiNHkDhR3zFVKx5Risyvq7wYL8HyoKlGCa40Dyt0FH6XJFMmTGHE5gGj82AZIcyp
R/QXpqx9LBcTgZi7/4OE1EFaiBV1YRzpfn7k9CM/KaAneoNkKJc1DNkmHmlsrVuS
kVdAaAG9I4uJhZIC8ojn/PNQTo/xPEOBpE/o6E7GGvZm7TgvZ3+jTVcVRlfaqe3s
93aKl4INvuAFlPE+a8wuWiqBDhKtnsWHz8lWoDqItC5ezyXk/ahyyBEr8L9gN4cq
t4QO89p0wRPBfP8FNfLc8XTzZk23Bc6w6k6T8JrPAgMBAAGjggIPMIICCzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFByR87ZyPft/Wn9T34HolDTKsaJDMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGNhZmVuZXRvLmNvbTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi+5BW2QAAAQDAEcwRQIhAKL/pJgv
rBg5xZKUefcho+gLLfYOsidn/3EM0/gIm9WKAiBdaeqd2La8ZhWGX6JVG/4K2xR2
eWbRI8OacIMMFf1VfQB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABi+5BW5kAAAQDAEgwRgIhAMoa+6qTZn9PxfWMuHTT9sdxNgf0HxpIqv2qsYoG
/PN2AiEA+/nF20QwFffeHDZWbsmyhlxf5a7adiuigFBJpKQXWz8wDQYJKoZIhvcN
AQELBQADggEBACA0FlSCJy2XoA6LFhPNz1XxU6hdTxGwOpTaZaPAkX5mEuNUTXAI
Ez7GpT1YK1rsC8D3B4TjpebI0gslrZnQsZJCj9lRcuj1UeroHZAIYbGs5ONzc491
dUhbCD2KDKGRBO3wA6gJ4+b87GB/TsdNqytvYdvIyxsZIz0FXeO98rgAImxb2hXI
A0Lh/lPSUAoXGyCUEWhXcrhcfBbARCR7faLhZ1pUQzMHpKfJOGenr7K8ARTBpbRh
zEraN5Mv3SbK8lnGa00gvLAmClSLU9rx7XvE/pSd2q91Yyt6ffP3XBNjjl3rNLA4
YULixnHwtWt4Tz/3r0fizZfDR6ytHlekTuo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoEB85JCQgP0jAprDmjUv
zLX4Xs63NsQYujiE0RMgfVXL99l1hN0UYnpjHqwhtX0uU+6kyWexsXbvupswim8O
KlxPb4XdBPFW8Ndc5x2vWAPlkoMb8KrFTwwTwMmGDFHsR63y+FUK+7Ejey5uoSbr
hMxupzyinbAcTqfeIWH0BwtS43Y4gLKCFGxk+uW5KU3YODQvrrbKy3usDM0NULTl
bqyoJNatUlq3zrAyPQJv00t4Rk94oVrIQfIeF3hGKXuJ/SzElcwnLVbHvtHApgpP
LMxvqVD+u2jbXmqH5Gh1/1O1sGsI1bV5bZGIQ/0MjxkjiBfZI8PdQcV/YaoX1XgN
UEYXulTL7ASl3aT6DimzLiuvrwIJdxQul19+YfkxH+2PRLxCI0eQOFHfMVUrHlGK
zK+rvBgvwfKgqUYJrjQPK3QUfpckUyZMYcTmAaPzYBkhzKlH9BemrH0sFxOBmLv/
g4TUQVqIFXVhHOl+fuT0Iz8poCd6g2QolzUM2SYeaWytW5KRV0BoAb0ji4mFkgLy
iOf881BOj/E8Q4GkT+joTsYa9mbtOC9nf6NNVxVGV9qp7ez3doqXgg2+4AWU8T5r
zC5aKoEOEq2exYfPyVagOoi0Ll7PJeT9qHLIESvwv2A3hyq3hA7z2nTBE8F8/wU1
8tzxdPNmTbcFzrDqTpPwms8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274285195187346476530612021464385399821064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 18:42:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 18:42:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cafeneto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653770736532437150140519745747523436653685988156538585360697183739074118561155659383004597719924579754187327007561464294213833046842842082404727931595103817799573884459403371355142535968905368539411292005448400838419803479048354691310078870116842058672188641187805300189040650416186367936123275925647047987633287152619777922299740873313758837957860780606485716587405554475146977850514395351213986602085190166074367317553176126872110595971939063664905578791502984322759481459566302831471923638722138726870734541521753473496304231192021316413325028965798080910395253711346940694001975060213512497399907940462369501824489570856705080959548410320114955125160501841274910089795145673387010881201118401976229553994052047756370986716221109204329349267184139393701601708265940447961479067999182936646412427345183790279428126583012935266983610170118477271962864583177009785570795037620389675377348015750110737812862739906732918584900034301486171636540916421194935217494689179156730510073500894873036143658757023097315934755628819809776295551851887058240493470817097457081871774012140961636616161590509568830193431729821678171290449699017123018120367254011529602881861345378093218909548615030595614422442781658607785439916890411231117627661007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c91f3b6723dfb7f5a7f53df81e89434cab1a243
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeneto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bee415b640000040300473045022100a2ffa4982fac1839c5929479f721a3e80b2df60eb22767ff710cd3f8089bd58a02205d69ea9dd8b6bc6615865fa2551bfe0adb14767966d123c39a70830c15fd557d0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bee415b990000040300483046022100ca1afbaa93667f4fc5f58cb874d3f6c7713607f41f1a48aafdaab18a06fcf376022100fbf9c5db443015f7de1c36566ec9b2865c5fe5aeda762ba2805049a4a4175b3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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