info.calif.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:68:99:89:aa:01:35:86:c2:ec:54:fa:8c:22:f6:83:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=info.calif.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:68:99:89:aa:01:35:86:c2:ec:54:fa:8c:22:f6:83:6a
Serial Number (int): 285635942771807635447355309693954833154922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:24:e0:58:38:8e:a5:be:86:cb:af:19:49:c9:e9:d6:15:f5:4d:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:28:7f:0c:50:96:63:a0:25:fe:f5:77:87:b1:1a:8f:d0:c8:a9:9a
Fingerprint (sha256): cc:7a:b4:47:8a:77:97:a2:2d:6b:22:ef:d4:f1:43:ed:6b:7c:e4:6c:20:c5:41:1d:14:d1:2e:8d:52:64:2b:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate info.calif.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info.calif.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.calif.life

Other certificates including the domain name calif.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for info.calif.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285635942771807635447355309693954833154922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-16 11:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-14 11:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info.calif.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730801954511830719108255408080507032147537507470588296643019272844322219389171293951803616365740782547449723195390769084604728410880060071266476393406888173551789509251164155667956574847671686313354028264164896818640424042810192905632919679033639883211770564739460396658858297472936072660042824792010863820772354446240813740112097004725666824750936553119473054518557915067568545860131229743248166324324703639561076129268981973877061740008081765004670092235601628215234419894990112842646406524389449971199518266319184365751159844004612114992832271290243974869865564648553790374922964230745688209263368618387800054783403107193914195415921473477912412120655556306379920817838234544482209801812737063903410853156896348068327337607083230046821626719084064704956707704759467307124616611427907841051173346626516915287449268371732154805269121129157921418331537308356347029925139160432388299766687385904558176358978418113835521608170855610723423606047338885033548265413488688402827801234016811911402690260919545896332844271367358802957988328722822612282112377746611468998339560658460846684645761417118256748141757713301277124371426692459653394820799139601544535688053858504479451482506336520902630835341159530955366244402421031685399340654957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1324e058388ea5be86cbaf1949c9e9d615f54d09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.calif.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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