www.foodstart.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:a0:7a:4c:5a:d7:ad:06:76:26:36:23:18:80:b5:a9:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.foodstart.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:a0:7a:4c:5a:d7:ad:06:76:26:36:23:18:80:b5:a9:00
Serial Number (int): 292175582306367942395813496275413178362112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:ba:ec:15:74:4d:43:0a:67:a5:82:48:a9:69:61:ce:f9:d9:93:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:cc:7d:9f:bc:11:fb:d4:67:41:36:87:4b:d1:da:a6:67:2a:e5:6f
Fingerprint (sha256): e7:e1:91:fc:ec:c6:04:64:96:a0:65:f8:89:40:f2:f2:ec:6d:0b:ef:42:0b:bf:4d:05:f4:bd:aa:d1:13:0c:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.foodstart.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.foodstart.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.foodstart.org

Other certificates including the domain name foodstart.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.foodstart.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA1qgekxa160GdiY2IxiAtakAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjYwOTU0MjRaFw0y
MDA2MjQwOTU0MjRaMBwxGjAYBgNVBAMTEXd3dy5mb29kc3RhcnQub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9F0pmCCXVv/wujmQDpTN3rEmhxtv
0BSG2QD32i+VWbKRsd1gvOUP89aoi8eN3qK8ZIXUKZZUY0bVXyHjzcKG3QJ3/lW4
+RDS2FIkmrUufkjBEP2+FjobY479jXiscUDPQT5wxgyFDJhAxQ4tAt9lv5NXBrAk
GECHcyB8FsHQDWFhbokgxL4BW6vpUuZ0OJqJPfy0zJaaMyb6CYIj1bYMaQoex0u1
U4ZGtscs6QyaxTWjvugx0Bw/V8zWA2SlbTpZeIJM1t5RdL/xl+mYvi68tyBP2aao
VpbCLc/GIoflZ5xsZjc8sMlqwXxahs/E3c752XzGlVTGDEbgzp8J2yMSxcSnn08t
tzrZ8KWTuPS3pcoghaJNk/NXpd/PpIocE/IZ54Iby2V1psHkoFpm7YTD0/Wv4lHn
V/NHeUjLF43FPcNMJPALBUvQE2Os8YToH2jr3ldp3bRekCSuLtMb3V4ebqu91JOP
3OH5jnDMNALHLR4W5gN+ETaDrP61kSDKgMO+LYHxYoFrjQzpclXhy+cpAHaFYr5/
L2D/C4l+IRTJvInlxqlZE3jq2EJ8pCfIeA82P8REMBBwsUMqLOhepObV2EXL18Iv
lV89KZfxUbOjshg3WOXvww3e564bSwiOxuOveGdkSmRK97K/uO5WYoJpcUnDFOkx
FNzMzmvuieYtRD8CAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
u7rsFXRNQwpnpYJIqWlhzvnZk24wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cuZm9vZHN0YXJ0
Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB
cRZ6k/cAAAQDAEYwRAIgMQm3L7jwXI37DkhopB7VVhSgVljvLR19bPVGQfXYEs8C
ICs7SVx7lI6mTjoyUe7xrWdvkiFWmzAcSc0iuFBGw8hpAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxFnqUSAAABAMARzBFAiAnKkAAfVNAhGuk
S2g/lbq1goTliNdOvrjgbnjlsJphPgIhAIAW8KPD/FonJDlL/ZDrOjNbHr1sGCk9
u28WU2qU/XrEMA0GCSqGSIb3DQEBCwUAA4IBAQBl+wBa5kyL8ispGxct06mpaLzE
uRNri2+AGT87NntQyETsXQlZssBVRao9SEfl0tVCXzMzn6Jmi4FLwi+zm0TtEV1r
gGeZ5NzwiQdbLN0i2620y4cJWYUdQu/hOzDa4tWkOaNGtMC+vVxhGcfv71HpCCbn
m2hqaBBTksBOgfIPnx8n9JGK9Mc6/bmUKSRMFg6vQcSY3bC5gtdfxIkbzI8Oj2tw
4g4LjF9osmOUPcI1jDslJ006oo1EwjvnpSFjZIshQCEDPt7fHDOGKMOlnAn4FIUL
L5LaLuILyb7HSZ2DqVQVSz5El/SPHc9Hs1AOB5ahhNhEltk9zvUrf4j9oZse
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292175582306367942395813496275413178362112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 09:54:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 09:54:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.foodstart.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996917800053205107766001456892979067164057486178560963113296230188148209820347896468150034714938554722140375367441516185954437771524362350328069664363585245312356658459556742442937976180989487977890822426473201494169527261293743660826942190757300460244060444214487248411829483508200777192150555470054813800778183664166646346662958264760564340533181988291721766074917978761359681639022905532621544661015718535342551979472493447490982527177260592775351824104888794619538253119941470767566942019280063425506335411949675330848759021615119990375468290597457904515692953453944198727751607845964385080690105288344457510809387641501831399181462587666283172993235093850574508455751919113755666551269396440471621319731339657215881204893603715741235740784042055257374113260364568806737764329190670620191858186043518107510130473624192462653169742111358209225885071642033897046921929066945532913962771418475239669217440579548167226946531396946491795278397072583591940002765917620353544026926146561412124827611998071568372564348495962562190985004689085131104800654327673856985807095946488189016166750687082643039964784371923106697250874027204767193161717597674949860081441258927715045079623869510036308334063833634654394966621171774792162796717119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbbaec15744d430a67a58248a96961cef9d9936e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodstart.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000171167a93f7000004030046304402203109b72fb8f05c8dfb0e4868a41ed55614a05658ef2d1d7d6cf54641f5d812cf02202b3b495c7b948ea64e3a3251eef1ad676f9221569b301c49cd22b85046c3c86900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171167a944800000403004730450220272a40007d5340846ba44b683f95bab58284e588d74ebeb8e06e78e5b09a613e0221008016f0a3c3fc5a2724394bfd90eb3a335b1ebd6c18293dbb6f16536a94fd7ac4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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