www.rchicken.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:14:f5:f5:0f:d2:53:a6:78:41:a5:24:6f:41:c3:06:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rchicken.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:14:f5:f5:0f:d2:53:a6:78:41:a5:24:6f:41:c3:06:c6
Serial Number (int): 296073520864306370874772879660328176256710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:66:56:6e:0d:8d:95:69:f9:f2:77:db:87:b6:89:c8:8d:0b:58:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:e2:3f:59:6d:4c:e8:73:1a:b8:f3:ea:ef:01:99:8e:0d:d1:98:3c
Fingerprint (sha256): ea:8a:47:c5:3a:b6:8b:52:8c:2f:07:77:21:20:68:7e:f7:c1:0d:2e:28:c2:11:65:5c:08:1e:e6:93:8a:c5:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rchicken.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rchicken.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rchicken.com

Other certificates including the domain name rchicken.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rchicken.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296073520864306370874772879660328176256710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 12:50:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:50:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rchicken.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762349124932200022894001708682290376309581976024074906850653918027415466588079908513349486957046557356788132441581879040020137873261941946725870244164995583043381516388742839686345444845965809260072117916889683325787127842756384188895888414051309675321012812354830212943771064228925111502165405565344924408382722443660398548710590626893080373652122392642672113323520183980882115555116565899575553294864056084413299885321904488763454794640584772066058414253965352606862326141373896994546643394042674610378167472637450395074550859610086929619105591718845774713859014001775719273017684081435167821665150903335981065530305257056901850724129431666512293200755725513215255087301684221392454843279111472929732852069990255314893135100458250081267287246723996340449969274439476971211991241950574880724718936269412771956431585171920331481129732687040273501629717336826950833697477165544457766234769963176782709192799438259035561456358632834580454043738919936406750835840142278874670581265578011505450523286935487456355276616600621193044728947308792897184882960967997936297007218894377749404755507620050243972635754188778962286451228468207141953705141370828726459583515076231752534398259306072755607610538968753441917378943260510823904189995749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d066566e0d8d9569f9f277db87b689c88d0b5873
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rchicken.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001704e437c9a0000040300473045022100a5ada684c64162efcf27bcc0c0d431402903408ed7a00bd4ffa450d0642283a7022004fca09993a9425bf266b8de69c908671977beb4c0f5feef9e9bd7d48395494500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704e437cf20000040300473045022100c1c14010a848beccbd2bd23606bbadc768d9fee637feb4cbd322d19b5c17f3120220726c3c9d351f612f750c27e181b6dcd04e70b3671aee2dbc7b64f3fbd478a25d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e37bed93c82ec90c649355b342967c5474b3b8e13c25ccfaaa1db7388f74b08daec79eefbfafae9e4b83a9ccb9ad2a63985963affd40c80956e8113b1fb79750ff8ce333f4fffca6d5bdbb081cc2348454570bbe0ddaacb578d51e78b622e60c0b2b36a4f430de9d652e7e2d560839ce7d3be929be4154b8ba38b359da54af284ea0a5d7583e271b05c2aa61b895dc63874e639df5f5fc651c30f35a0e542f491e93d420d86b35e6c508dfab55ff1ad3b77514d2fde8f1c42e3deb5478e97e66a7d074f26a03c5ff6762e7f945476505e6e9d1e2a71faea117088a9bb29b14da0ae758f5d405bce8cabf63672c0071d27a140348aa0c4640474cbd951e462ba