codicature.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:a1:22:e0:7b:37:4b:5a:6f:9c:18:9e:cb:6a:06:a5:a7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=codicature.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b4:a1:22:e0:7b:37:4b:5a:6f:9c:18:9e:cb:6a:06:a5:a7
Serial Number (int): 322801870639486152982233164348170434946471
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:07:f2:67:a2:eb:98:5a:5b:27:2f:b4:3f:43:99:5a:ec:10:53:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:ea:ca:68:bf:ff:f2:fc:8c:89:4a:4f:ce:82:e7:8f:5f:b9:96:54
Fingerprint (sha256): f3:89:4e:7f:5e:2a:a5:37:4a:b0:a6:0e:cf:00:d0:dc:97:f3:af:23:02:19:8e:9a:29:1e:6f:4f:67:07:1a:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate codicature.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codicature.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

codicature.com
www.codicature.com

Other certificates including the domain name codicature.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for codicature.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322801870639486152982233164348170434946471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 19:05:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-02 19:05:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codicature.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832724194498446865149387321349179401223096297424756197064395451666937501759831718459947567212280461698090555997361730422699904447842169505976212995604812676835948554820737208929461221799342891548369121083798546878913995412953729754637939630772416414806591353836912889403500758428697249993026935824990566735051819224805567237412478259761269343861450739196498804431271324763335974228270412709850639634866756682093403132662935184158925717557953499075478150882561729129558219786425249692380504610482657640132882300920020434995419705338427928797036081242292424907586774989682832054912110111432564847812626551868146300875852234937714752050622918450585962253942905866816838147945978521209247386984998156713518022295989996972077327896864506008352650794270794874396991767639949948021442982565320210675263079042278674618701990550324213366872991151151222866426383348608688329037085009762100198943457113927125161309233476794788977184365420281437511388214336183966522818302868977891415086227066534328378052492746372928945015904625241703727442380561041492644764556319002585371948154310937312824325869964269671211120849327558764513990572165552815521056963454125125710929934568192318428577244153966394521695791512402500136450686902416702049118481691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c607f267a2eb985a5b272fb43f43995aec1053bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codicature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codicature.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fe4db8fac0000040300483046022100fea914f41ea3629edcc9839974065361feafd9f30745e4b907713f62d6243de40221009407cd539cf514f43ef0cd9fa22fa15726b3759e72a3afddeee36a18fe452e9600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fe4db8f870000040300473045022100e3a31f4fa542472734c44cf82f08c95a3f0ed415331fbc6e6e80141115c89bd1022052ebb288bf187a25e0429ce04ace1a4b722b09c9e33a5edbe6db5782f2a534f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f2932f91b49393efcb90f7ef7309a893bdb2da85d4bddc3e351a73f8bf23ae36180932b11788e58c4135ddbc155a9d60b3ed368fdf9b834b5490a1d3eae74e21afbf1b946e2969728f3f040cc751d1f465ee155e977866a2da198e3795a5c970b9e09a9748d968054080aa9e443ba49c78a6c3a8641554b6689a272701bde9f961e054fa0cda6cd92fab9d460c9dcdce6d6fbc4588bbb5f443157550618a77c85c6f1406d549057acbe31dbfb823e6d8d9114ed1c81a038284804358c9a0a8e8dbe2afd1b5ccd401cef05751384c814fcdd61a30f43784c8ebe29c414630e2511830ed7b79d5576afa4ee2d3f4e9d700097b0bce935af770022212260cebaf5