thermalcoffeemaker.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e7:4c:d8:38:64:23:a7:b0:24:b3:84:60:eb:6a:cb:95:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thermalcoffeemaker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:4c:d8:38:64:23:a7:b0:24:b3:84:60:eb:6a:cb:95:6b
Serial Number (int): 427156514493327657529332703813840575108459
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:ef:48:b4:bf:7a:aa:a8:72:90:7d:a7:30:8b:6d:f0:af:06:83:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:9c:b3:30:07:95:e4:91:ad:d5:9b:66:05:33:b3:b7:b9:0e:1d:98
Fingerprint (sha256): d5:96:1a:34:3e:b4:c2:84:79:ab:a8:f3:61:b0:b2:d4:f6:17:96:b5:2a:e5:0a:39:54:4b:57:22:22:e9:2d:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thermalcoffeemaker.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thermalcoffeemaker.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thermalcoffeemaker.com

Other certificates including the domain name thermalcoffeemaker.com

(limited to 100 certificates)
austriainvest.org
www.thermalcoffeemaker.com
www.thermalcoffeemaker.com
www.ihimi.com
thermalcoffeemaker.com
thermalcoffeemaker.com
www.thermalcoffeemaker.com
thermalcoffeemaker.com
thermalcoffeemaker.com
thermalcoffeemaker.com

Certificate

The complete raw certificate details for thermalcoffeemaker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427156514493327657529332703813840575108459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 02:05:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 02:05:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermalcoffeemaker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865119534005085096734585366444781260534550962862752651179756091426408937940906543618087578027221030241628040398839275918581277612092166870902428509041805777582566127265559499186537054295318737908874150216500753066482484526673179770436054577725061188343107563171818595685340550731158578851515600999998616757261790768410600261028174578203169363079406396946532889508141364694958726180439645838357779301020701689183685223961480040765859156852540265640442997157744026850953337613985573830796075374695161146840745020080875771977651255021485469367671751911355481709460394069654780508023031313861056611259021777499609980974981991546270977960160124529880915716949668906199515376909327248756124086439406143466073729048491220571808382562338376208204885393099663700968503379019482013917874295720934289070563403152466230051377329297510009995979202068918292133262643840664330623192703200405629387648594265444144826282770624575740827771790583456209628546604272707912315758488967116654702213168690377970382734224029661054018913267610335005860914901096311513568766847264136001723047021888482385857080637107150361992815358411270131075629463469680756365574324431989459137178047456399234400082189024714718304243446615262240778938113741145791259830260471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcef48b4bf7aaaa872907da7308b6df0af0683e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermalcoffeemaker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167afd3b9f80000040300483046022100d89c7e5c8c689f7dc42e0c9dc12997b59a505dc5aebf253550756de5112fc2d7022100a8680c196f917743810dbac5eda55595c31324aaa2cd3269bf406df5457bb98a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167afd3b7fa000004030046304402203e1a8404b3da81868d89bcc1552ee26230e0c15e1aab74ff969869a61087254d02200d7be78d758783bfbadb55b79d9ba6b66028066e7edf32c782fc62a66d17396c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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