capture-it.com

Issued by R3

About this certificate

This digital certificate with serial number 03:87:25:fc:01:a8:47:92:81:ef:72:d6:c3:c7:0f:fd:8b:be was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=capture-it.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:25:fc:01:a8:47:92:81:ef:72:d6:c3:c7:0f:fd:8b:be
Serial Number (int): 307325467257874716629804482573019522108350
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:d8:7c:c9:87:0d:eb:48:1d:11:84:e6:8b:c5:2f:54:60:3d:1b:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:f2:d9:f5:3a:fa:8b:3d:0f:4a:38:0a:b3:4c:1c:20:dd:0f:15:87
Fingerprint (sha256): de:f6:f4:7b:8a:b9:f5:7e:02:e2:48:bd:40:d3:9b:10:78:09:d3:52:91:f3:e4:11:89:f8:41:74:69:19:8e:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate capture-it.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capture-it.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capture-it.com

Other certificates including the domain name capture-it.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for capture-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwd/WyZSotqI2D8s8BFhN
R9U0PMCl+Twlw8zi7MrIIkz2E3wYlSHn6JUXgCF8jBLNYboWhzIy41Dd/E5i1trm
WaEu//bbwJcSC2Nfmaq9i8IF8j7x4XrKFjcMJW0/sQ8cYi2pNt2DSdG9duT2esXO
YO2HTT2f3mtVEuHixT++IceoPupJFjMl6yT9oz8Mh04cU7ovaGujzAEFtpSOwrfB
W/+OTXLxmTwhW6FtJbIPTzOxpzH6AcYrOtZCg1gGduZFxDrehcjqysvhXwp/fSNu
02iV30+n/s+xHeyV0VaK/btoyPgMuoarBA0GSw1xQPFqEqE+uSCXD0Q9nRRUI+1M
VwTnlw5G9zCsue+ohNEKqxwSUAKQJUdbrB5gWLF1qJ755d/mUaRuPrZprqvveVpT
pGq9Wgv4ZmCzPtQuyz3S7dl++o1BriYjig3aMv8f13+9OOn0nCcv9M51MCzoqiVn
vK7AQOxrUaReSiNODpMr4xjGSP/OkDXwcFa/xl8tIp0A6hAJp/S1dBLihvp7avmy
1S0SvEoQMXFYQo7grGjM6JeQkKZaohnyPAv5PK9NoIpiaZ7hF+HUCyPdjwiVpKMU
XdRdJpmcHisq2o9M7fjFovfr1hEg3/HCKbb5utHoXGvSKpnZmYewr3/PIk+FGxml
oWkAaUEiZrJtJXqgEq3UB3kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307325467257874716629804482573019522108350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 07:50:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 07:50:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capture-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790938428186933210072688695453941489292300637036648886838944056221416577879436002032112049668120441631265688957503782247707068903803535954378947094355236658587408119709037970911271267649450209222295428052737400556056028141897852990403057208571847565764169726171783183964149511335213600213953479252945612699258053234095424910083154769343520541367691675550606551498863626129718611659603009571033363770285493620237611619464552268665397414779613706413729029193834423774574561388779320708705267792988887434866474659842202814545866274277638913816407701659176586311432868436351605836219580655624853300045993363982981176788233910082953550863094230751447279215988985950404939942438855239520285241096772064373545862596502156838707137065601220242591869514904978645197797956049119475200059292454532046325251400376813149283778509816060222274815483155975421688784212286955744928171341645200173923230693007939496733971338041556645548972318734474957471842120367620394866218617431631774732953717160138401022492821794102241386355600263344947160315769259655973184990338292725397525160297894873519355579826212179119176337856772604698470565156968259071467875203393545057682305280236223864860682407601502676132348783965063058771161120008861442602538633081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ad87cc9870deb481d1184e68bc52f54603d1bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capture-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac13bda640000040300463044022053034c20c0377c941221c9fb2b38c37dde36b56a23edaf9e2257f57069e2143802204f645bf4b33f1a1bd80cb8b792eb8994542eac478efb5192e69728d56dc1c3dd007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac13bda9c000004030047304502200d33a829012226280eab5e8e45d8e51915d86a3bca69edf9c018d40740006e90022100b6c5e55488def7cfb33d8c1f88390a3d0d050b401100f5ca0967ee965788bf28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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