www.tuhn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:39:00:60:b1:6e:9b:66:d8:25:cc:d7:81:8e:99:b4:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tuhn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:39:00:60:b1:6e:9b:66:d8:25:cc:d7:81:8e:99:b4:ba
Serial Number (int): 294079732976619510572947316263010092823738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:02:e9:ce:e1:b4:c7:0b:c5:8c:a4:89:80:1d:76:6d:db:46:31:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:a1:05:e2:b1:69:f3:12:02:46:a0:b0:1d:d6:d9:19:ab:6d:d2:85
Fingerprint (sha256): f6:8a:7e:a6:d4:53:02:75:4e:6f:4d:02:f8:ed:7b:8a:fb:a0:96:24:96:c6:d3:32:65:e1:ac:48:2a:61:08:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tuhn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tuhn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tuhn.com

Other certificates including the domain name tuhn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tuhn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294079732976619510572947316263010092823738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 05:29:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 05:29:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tuhn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877876324428677011868783544237988097666505274533526215887341276823803888991250541417197489211229579269770418046630372613661984821261743363601836908374806695910012511961533973311168899684748876018797298514143314571452479729655569379661216668183480409529676681232066533236728789801600648886610649792400854302142095885548295468237932595757096370067403441592492500298366597303652722607798994530771487375708182466071869242375683832583385466427175696256002115695855617963304131465672430743235622824843110299061036863623423106151247637233472292387364934103261026196189454616323287195798270820705705344964958027606863275496278878337306194320278015130852438925285540854267593152726830931485655858942217096255252586133340155854432478498999966359750549510435228144186515739263203539211982217918058795463796157003382622161119869707993824406760797623762330026512433483097921620475815171164742083252971091677012127966519035446085295748918955115343523338220865195359966374416596659852104411840085842435616968782081923053096517772150116406260955302766620811422991952045576497496527397254386401270870063606774879237844567067468103343061315981405381311892756383659317374563842050149428119902423607431704064430378766961971868615490977141704138381780607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b302e9cee1b4c70bc58ca489801d766ddb4631f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuhn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705c235ba00000040300473045022100f8aebc989801d4b393cc5354d518514e558f5c7a3ffb0f9321ca54421857e0de02204bb820a0fc3d5273b45b1adc7cfee85031ce748c519b56fadd1d66ce0f467894007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705c235ba8000004030048304602210088774b7df3c6e04836c201151668645225512f1ae0a018c38176158ad7efcf09022100d9eb923120cfd52a2c8e8636bb54ea57d3890bd9fc3beca0e08476f17ce31814
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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