acoperim.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f7:c2:30:61:ab:23:10:d6:fa:da:70:26:b5:d1:2c:0a:49 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=acoperim.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:c2:30:61:ab:23:10:d6:fa:da:70:26:b5:d1:2c:0a:49Serial Number (int): 345644723867136623443916681815405940705865
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7a:18:53:1b:cc:a3:4d:50:22:b6:a3:c9:5b:99:e5:86:36:17:e0:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5e:c7:ce:7a:ac:22:cc:9a:f9:a8:65:d8:37:97:34:0a:56:a2:09:60
Fingerprint (sha256): cb:1a:f7:7c:0b:20:22:21:dc:58:ef:d6:4b:cf:84:77:1a:e4:2e:60:76:40:80:44:fd:eb:c1:2e:e9:30:e1:9e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate acoperim.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for acoperim.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acoperim.com
www.acoperim.com
www.acoperim.com
Other certificates including the domain name acoperim.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for acoperim.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA/fCMGGrIxDW+tpwJrXRLApJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwMTM2NDRaFw0y MDAxMTEwMTM2NDRaMBcxFTATBgNVBAMTDGFjb3BlcmltLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMvfNbmQuQ6gMhUdCIx8PCInkB9wN7yW3rzI yUmqn1BVhH34APQ1vwW1WfiQ2bGWBYMDrYluI3PttjfYVPnHqhawfad3z4Gn6Ajb a7It/K+DUl7zW31OiLbzdAcZ9OncdyjkoQKmGfwpV6wBTkkENKam9cnf1e/7JISP nSLpW7Yg4xvo2yoAp/ME3H3xLtVZGyfzdEmtFqn463EWGkfAEyD0J1MVmMKm/ots 3kxdY95+ifmFj0jaKkpdUOE7tvuiLRaUsoS4xseqdgsa/MuFPDDj6hcc8ePZF7rW dGRDb/XjfkBbobNvul9w6jBCRzdYf5UvzO1Sgqx/P8qmh0fcunE+3uc+rnmCzCUr y2SVW6B1s7sqJTGq57M9F3teqU4m3+fFUGrZ6AYwG+kvCpsR2Iiin1kJYiiGGKxq M1+xusMpuqe2xXc5xdsgyS4mqzxIiMvitn0QxGiyXyxSVOVoWene3qyw9sqyFAb1 0YLIF8uExqWhXKiOCCS5A0PVa+4ZWGEP7fUNeUjRT7tllhLnFBG8mYjYh7WINa4O D0FjTfUAnXx8O2bHJEWePB6pdL8yI9Pmy8kWfUmIq7Jrd6II93aW2oSyaLyxLqOc B2EFyLdSKP9Z+H0vrbnAA7Lov72rsZX4TJvKJASjy+2bPpVTwkpLFwbUXcqnAGpu yvdWtmWNAgMBAAGjggJzMIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHoYUxvM o01QIrajyVuZ5YY2F+ADMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMYWNvcGVyaW0uY29tghB3d3cu YWNvcGVyaW0uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFtwvmprAAABAMARzBFAiEAqqu/Hj3UQUH3HnDkxN5dNE1H6GNaGjyJ vaAB3Hg1aRoCIDFb1NcmWuOG1cMBUn/C9eQu6/94uJKIiDumyyffdBrJAHYAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtwvmrqgAABAMARzBFAiB/ 57aM1XoxWerdOkg+QlGdGYgP+WkeOsRguj8TkRASSAIhAMknIPqijB6TEMoWoypT v93uEQKbRPlmeA4GAKFSF0wmMA0GCSqGSIb3DQEBCwUAA4IBAQCGerqoeDbBr2bA QRwaJ9hf1nV08xg6VUzJm9amgsCH0XKjJ3Gm16eEqe4wTwSQbnSapSrBn7iBr1D1 yxHY0byojT8nrpHNW+wUerowkGoOdk4u0eY2tnVHDuIUYwXwVk6o8xQAiam6EMmO 3zI5Ab5EP5MwRB9X0f+2w3CJiwO1b4EL2K6e5pL3yir575fYWEpULbuZZohPNRF+ L2H2siHiZzPInKMm0VSjkARl8UAxbgln78sTGaOGQqjQdeONMghi+oMvQXBs5raf B8oig7pF6HkDZTQGzXDxFxcbkiVmec999Y7pV6DyDLDsM/hdeS1bXdG6/+TlnV7b LXJHTcAV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy981uZC5DqAyFR0IjHw8 IieQH3A3vJbevMjJSaqfUFWEffgA9DW/BbVZ+JDZsZYFgwOtiW4jc+22N9hU+ceq FrB9p3fPgafoCNtrsi38r4NSXvNbfU6ItvN0Bxn06dx3KOShAqYZ/ClXrAFOSQQ0 pqb1yd/V7/skhI+dIulbtiDjG+jbKgCn8wTcffEu1VkbJ/N0Sa0WqfjrcRYaR8AT IPQnUxWYwqb+i2zeTF1j3n6J+YWPSNoqSl1Q4Tu2+6ItFpSyhLjGx6p2Cxr8y4U8 MOPqFxzx49kXutZ0ZENv9eN+QFuhs2+6X3DqMEJHN1h/lS/M7VKCrH8/yqaHR9y6 cT7e5z6ueYLMJSvLZJVboHWzuyolMarnsz0Xe16pTibf58VQatnoBjAb6S8KmxHY iKKfWQliKIYYrGozX7G6wym6p7bFdznF2yDJLiarPEiIy+K2fRDEaLJfLFJU5WhZ 6d7erLD2yrIUBvXRgsgXy4TGpaFcqI4IJLkDQ9Vr7hlYYQ/t9Q15SNFPu2WWEucU EbyZiNiHtYg1rg4PQWNN9QCdfHw7ZsckRZ48Hql0vzIj0+bLyRZ9SYirsmt3ogj3 dpbahLJovLEuo5wHYQXIt1Io/1n4fS+tucADsui/vauxlfhMm8okBKPL7Zs+lVPC SksXBtRdyqcAam7K91a2ZY0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345644723867136623443916681815405940705865 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 01:36:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 01:36:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acoperim.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831724842653790165712399912493620201380183330814070511655520313221633963531726513744162878587340662987207383131248426948279165268528441794935175141840693499439278004541536501276538014054308439543038679602999187896655990544164223998532033779897037673044326950489910253668479521844233644262489648966200561154208958733194469001999299611647661631874250969178986667684634789078985006626220632233587549028783393358082724273479359745178383898680781881709448456389379271359226901838529143119284718352034140134535972003723487890072085904664291122395043225204644834030442954881947393682248521202873296541432987109220618501434322927618750685567755207759920251510818581925218177219008644067368946589395235553757785546080557539525146340028046529989835269153494116623303866086079475878722538858817699913857177205835664171960049826224831094625278388381040977739685873371483732925622823069006269009088681562634714298595092062390390025512151318461982397316451726202897901032433281243050514483721751397209188377601006790978057000361661422909109142042196440967619327791612515956458874425803515787680041952577326063085315447169345460777282618288423114155528657709012676862713748897944326885378552464374151552805250889128100284716444798608609943003489677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7a18531bcca34d5022b6a3c95b99e5863617e003 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acoperim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acoperim.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc2f9a9ac0000040300473045022100aaabbf1e3dd44141f71e70e4c4de5d344d47e8635a1a3c89bda001dc7835691a0220315bd4d7265ae386d5c301527fc2f5e42eebff78b89288883ba6cb27df741ac90076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc2f9abaa000004030047304502207fe7b68cd57a3159eadd3a483e42519d19880ff9691e3ac460ba3f1391101248022100c92720faa28c1e9310ca16a32a53bfddee11029b44f966780e0600a152174c26 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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