caffettiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:03:de:0b:cd:9a:5b:88:f9:ea:6e:6e:55:7a:80:61:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=caffettiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:03:de:0b:cd:9a:5b:88:f9:ea:6e:6e:55:7a:80:61:3f
Serial Number (int): 264404539710855185896600924612975763939647
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:4c:b8:0e:7b:c5:f4:59:b7:78:91:09:3f:60:81:39:66:f2:60:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:5a:14:9d:45:30:e5:84:cc:2a:dc:f4:d0:65:59:96:32:08:99:19
Fingerprint (sha256): e9:43:05:ab:4b:62:2c:10:15:5e:0f:c9:c8:f4:0f:b8:fc:11:e1:87:b5:0c:66:5a:2a:26:03:5c:aa:af:1d:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate caffettiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caffettiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caffettiera.com

Other certificates including the domain name caffettiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for caffettiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvrjv00CQjk8mN79ZSjVv
qFDcLb3hX7Hb30N/RAY6Qv1WhTyyyj/kzSoa762Y3a9YRYPMe4FI/NlKKdKoSLWZ
uW7TfEDV25OIRVc+F4kmt9uBtPsnVvyqd69mYA2+/Rk6M7K1mHI3rWX1hvRlIWVt
wxcZzeSoV5jtL7DSi3gW4CJ9jGFhEP96l9v5Gs5TEe/42yO0rCY2F4pH3CFl92rx
8KulgEeE7mNPjh3Leeo2i5i0SVPycKdefysHJ8EV2CMKb/5H0mBIxN+icyseKWzV
EBJo1xJzgqw0bIfBPq3LwfepXxpBp7vkhd44oqQT4AHYQPc1UOYSJi4nE78frlLU
LowH3AtA4TSArv7CY2b7jX8BNIA3f5KXXaqb3ehdqlD4/OJ9nYSAjTXVfEVtjs2b
Mo0VAuEyLJ9hVHKHr1eWhFyGCPS+8LEQrc85Za4P/CRRwkb0W07nSbRvwo+ztRoS
a7Hl9mBXxmu0Dg9pO0Uc++dwNWZTiBm9+hLxrhmMBy97LINOZy3EscX9sJPh79e0
WM8trvE6jZKJPuXtvRj9vkEVQFyPr0iZrcIvQRl89zFPlJnTnBMfhp5ixu7hljKU
A/CPTgo6HpdOj58+Ddzi7M86bfNQFQWb1hG4UU8QJj17H0LOHs9QmKN1RgVYmBGV
ycfHIabff+yhrn9Sp2STy+8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264404539710855185896600924612975763939647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 21:00:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 21:00:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caffettiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778079546319371451359351312737863637457715905086039423934395354233470989778637632140175344069794607933558179266240949484825486950836860128988564956630397437944619380193599302234862064380286339401791688744017320571824140595404052788346672358248345676586330480866657151103338067222260070120207720448646109329200003871377079619909523606866797967000977488865774790997373751372290346512246867620771337826146986281960757907114605603087285162273808423703998900377233300352663610207874368303770138009815012796544650054208890900842931801253626332368867753891151941770467798842432403646727119325150879210713240339179961149379621250697072531893329104689737052810289701690191938099677135215054402542369624075991694582883591876839942740512179211648703414833351836541616104886599903350162221613756649447214154420549938419830385950611541320199670468193426778708999095227482382644940962116318290007970958717451335792259458975783588300642618660604966473548515962645129947679608413342841761185363680434436432395855150905291174540670687403148793057181211075161629357829316151264572275316118076333390103859902392657802231075431489605423298408788044443738435643598274577112878448442778560618164940712544132292581910269494039956874065757505789256304675823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e94cb80e7bc5f459b77891093f60813966f260c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffettiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afb4f3d9c0000040300483046022100f6490c61ff6b69d3f343fe83799c271fdfbf86e0f2028d5f350172db44b8ed0a022100f2b89ae2b93e058ecce8d7aa681411c88ceb808dec0d33e4eacf47cf23fa0523007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afb4f3bcb0000040300483046022100a176198aaa4f146bb612d74bd5b28c0566c0c7ef4fdd2a203ee88a6e425888840221009eceb71958fb523d51748c9f666d9b5f96a4b3b3584c5d896acdd985231dfcca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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