acoperim.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:c2:30:61:ab:23:10:d6:fa:da:70:26:b5:d1:2c:0a:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acoperim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:c2:30:61:ab:23:10:d6:fa:da:70:26:b5:d1:2c:0a:49
Serial Number (int): 345644723867136623443916681815405940705865
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:18:53:1b:cc:a3:4d:50:22:b6:a3:c9:5b:99:e5:86:36:17:e0:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:c7:ce:7a:ac:22:cc:9a:f9:a8:65:d8:37:97:34:0a:56:a2:09:60
Fingerprint (sha256): cb:1a:f7:7c:0b:20:22:21:dc:58:ef:d6:4b:cf:84:77:1a:e4:2e:60:76:40:80:44:fd:eb:c1:2e:e9:30:e1:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acoperim.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acoperim.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acoperim.com
www.acoperim.com

Other certificates including the domain name acoperim.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for acoperim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy981uZC5DqAyFR0IjHw8
IieQH3A3vJbevMjJSaqfUFWEffgA9DW/BbVZ+JDZsZYFgwOtiW4jc+22N9hU+ceq
FrB9p3fPgafoCNtrsi38r4NSXvNbfU6ItvN0Bxn06dx3KOShAqYZ/ClXrAFOSQQ0
pqb1yd/V7/skhI+dIulbtiDjG+jbKgCn8wTcffEu1VkbJ/N0Sa0WqfjrcRYaR8AT
IPQnUxWYwqb+i2zeTF1j3n6J+YWPSNoqSl1Q4Tu2+6ItFpSyhLjGx6p2Cxr8y4U8
MOPqFxzx49kXutZ0ZENv9eN+QFuhs2+6X3DqMEJHN1h/lS/M7VKCrH8/yqaHR9y6
cT7e5z6ueYLMJSvLZJVboHWzuyolMarnsz0Xe16pTibf58VQatnoBjAb6S8KmxHY
iKKfWQliKIYYrGozX7G6wym6p7bFdznF2yDJLiarPEiIy+K2fRDEaLJfLFJU5WhZ
6d7erLD2yrIUBvXRgsgXy4TGpaFcqI4IJLkDQ9Vr7hlYYQ/t9Q15SNFPu2WWEucU
EbyZiNiHtYg1rg4PQWNN9QCdfHw7ZsckRZ48Hql0vzIj0+bLyRZ9SYirsmt3ogj3
dpbahLJovLEuo5wHYQXIt1Io/1n4fS+tucADsui/vauxlfhMm8okBKPL7Zs+lVPC
SksXBtRdyqcAam7K91a2ZY0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345644723867136623443916681815405940705865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 01:36:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 01:36:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acoperim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831724842653790165712399912493620201380183330814070511655520313221633963531726513744162878587340662987207383131248426948279165268528441794935175141840693499439278004541536501276538014054308439543038679602999187896655990544164223998532033779897037673044326950489910253668479521844233644262489648966200561154208958733194469001999299611647661631874250969178986667684634789078985006626220632233587549028783393358082724273479359745178383898680781881709448456389379271359226901838529143119284718352034140134535972003723487890072085904664291122395043225204644834030442954881947393682248521202873296541432987109220618501434322927618750685567755207759920251510818581925218177219008644067368946589395235553757785546080557539525146340028046529989835269153494116623303866086079475878722538858817699913857177205835664171960049826224831094625278388381040977739685873371483732925622823069006269009088681562634714298595092062390390025512151318461982397316451726202897901032433281243050514483721751397209188377601006790978057000361661422909109142042196440967619327791612515956458874425803515787680041952577326063085315447169345460777282618288423114155528657709012676862713748897944326885378552464374151552805250889128100284716444798608609943003489677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a18531bcca34d5022b6a3c95b99e5863617e003
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acoperim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acoperim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc2f9a9ac0000040300473045022100aaabbf1e3dd44141f71e70e4c4de5d344d47e8635a1a3c89bda001dc7835691a0220315bd4d7265ae386d5c301527fc2f5e42eebff78b89288883ba6cb27df741ac90076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc2f9abaa000004030047304502207fe7b68cd57a3159eadd3a483e42519d19880ff9691e3ac460ba3f1391101248022100c92720faa28c1e9310ca16a32a53bfddee11029b44f966780e0600a152174c26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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