smart.menu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:69:db:ef:68:7a:e4:98:48:34:f4:bc:af:f5:5a:ab:4d was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smart.menu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:69:db:ef:68:7a:e4:98:48:34:f4:bc:af:f5:5a:ab:4d
Serial Number (int): 315242182677132110160639919920542155189069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:ae:71:eb:a1:8d:55:9b:fe:4a:6f:12:f7:70:48:6b:49:c0:26:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:47:87:4f:d4:31:39:b8:4c:6c:ee:d2:40:9e:32:ea:e5:b7:a4:d2
Fingerprint (sha256): ce:03:38:4b:a7:a6:fc:64:d1:8b:38:4d:97:a2:6a:b6:e7:08:13:b6:9e:76:88:e3:61:dd:f7:bb:af:b6:75:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate smart.menu

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smart.menu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

london.menu
sacramento.menu
smart.menu
www.chicago.menu
www.london.menu
www.losangeles.menu
www.nashville.menu
www.sacramento.menu
www.smart.menu

Other certificates including the domain name smart.menu

(limited to 100 certificates)

Certificate

The complete raw certificate details for smart.menu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315242182677132110160639919920542155189069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 04:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 04:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smart.menu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709372566467752150144608913643715814204455903877087859688152145307920409328285024967379412812591208690126193572162172113248082251168445220056814266098758995622742151283585310659347959079536310628971615040938855386095046397130706542020479113248696691349680201998415177595907453851582183385960130391300899596063945080769523318321243734982945465110215702790212529069345773627016738073912145943786932800868206872320501411810525664295493426046458887735550939380860269469954393060565765752197140844215116219744288839836430000037427497325477899681366078766410013148430536424574391354587427119943191199524477523753810150702499208708378280688704636083137219178056943004457455063709925655461093608902213299748472265539682102356733304976259479060540699707608396159557911147883807489202063272061568338306326813138813595730804345866537488759116605855876156892948253467523547185103111452174835265011069933059870576366397013189037275269728236986405527362804440509441035757760885876913769208110519560055320553641475441387977010224189916711289117922356165695009908559360732128040955727037799506590391279676396111241739890858568463294027995608385231470046116952769135426099968309519367398272787606886824929174623520684887030853863434410173394897842307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cae71eba18d559bfe4a6f12f770486b49c026bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramento.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicago.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.london.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losangeles.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nashville.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacramento.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart.menu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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