tightleaf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:fa:55:07:23:56:bf:db:3f:67:a7:3a:fd:b9:95:02:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tightleaf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:fa:55:07:23:56:bf:db:3f:67:a7:3a:fd:b9:95:02:09
Serial Number (int): 332108056236870906869969619585184008831497
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:41:0f:2a:6a:b9:1a:b2:77:30:76:86:7e:b3:bc:02:6c:69:2f:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:e5:4f:4b:eb:33:fd:d9:04:18:a8:b0:b1:db:b7:9e:94:b9:5e:f8
Fingerprint (sha256): e9:12:56:b3:87:9e:2b:70:d5:2c:96:73:98:19:a4:3b:89:c0:fa:04:ea:8f:b9:07:4b:d8:04:31:2a:f0:55:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tightleaf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tightleaf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tightleaf.com

Other certificates including the domain name tightleaf.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tightleaf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332108056236870906869969619585184008831497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 08:39:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 08:39:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tightleaf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838235978800157870818112552761510654084434576739218155816695708037989414336174701068141218103195428099951486115591903944056946328684832239243428892497234067100066112871664795857906497001807683984022358613896677625574230293986903861475826908295261461763141902453427992462679739901730819910522270152013291246621363709773028390906455474280604376352199516390426125799747104349010287999863085222906595963255021347703819927889499557682494089376945715230996724638504174707825237063549653073984621431520865082185874739198354161084353061487485122639173619093630368747811874967844588453932427647393872787633169280337431383303318239347594146199093541475947861743257087515361573280781816494516972620846397910122521957323750239187521165821846780535227973414995482582037073737162769516175556369030520157097135223640551677341769838496317189899870022722877435923986342064504259890884027516252057576449206713497800933910850544852840789721255240736974171063161128543627247013465636563949308129559129857483856703151062941808670490885195637607932998678201048180811629277513971355002647511462900958578409973024083741533704085562063956183607148361726211683256293018017523702929752271470348827811301170525263432888185790833606336370311865140369192824604611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52410f2a6ab91ab2773076867eb3bc026c692fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tightleaf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e2b61e0c000004030046304402205f85c23b44f697fbf160f23af7b6781d0575184ed24a3a6c1a2e37fd1a197f46022061d7960a59081d9e57a5d829071f0c483f1eb23b8a38999d4d47c4feefe1b56c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e2b61e5d0000040300473045022100896dbe2645973b3480dd590aa9a45de693c868416c9309cad6d26c30da99b72002203df66d238390c31ec69a0a45f4468644e3a17e892b86b91c8e27e2595143498f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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