cuffia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:f3:b1:95:0e:34:bd:1f:da:49:78:33:16:db:a5:9f:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cuffia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:f3:b1:95:0e:34:bd:1f:da:49:78:33:16:db:a5:9f:47
Serial Number (int): 342647985585188336542969986307357906673479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:61:eb:3a:ee:6a:97:61:6b:dd:92:a7:d3:64:46:4e:ab:35:38:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:eb:6a:b5:20:6a:5f:66:3b:c1:8c:42:89:91:43:a4:e2:df:64:db
Fingerprint (sha256): f8:92:98:84:44:b7:e8:7f:7e:ae:9d:44:c5:b5:cf:f6:22:34:59:64:4a:c5:e9:df:94:51:d0:54:fc:71:c1:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cuffia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cuffia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cuffia.com

Other certificates including the domain name cuffia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cuffia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISA+7zsZUONL0f2kl4MxbbpZ9HMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUwOTM0MTVaFw0x
OTA4MjMwOTM0MTVaMBUxEzARBgNVBAMTCmN1ZmZpYS5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQC9IRSH5wQIe7AFf2x6/YGuUtQRvGApk5lxhoK1
iG8/JyGbqlGRfmmKmR6L8oZFzdI8qXpplR8moJVwpGxDAnEShCW4SoPt4KvD0vcS
ggVBOtGGUzheaq5pTTTx4YQV4rh+Ub2BL4uwcDAi7g3Q+V2jJ5oeQAyua0ZzWZfg
CpQQmzOufPr0uYSr/wqZOFtGkXQNZsRt4CbYAz/AsMindAlqt9ViWlDH25VSTGMp
JEv0irFDUYiyE/5dhBjhnb6RDNyByGYo8wqSffBChtz6CYWfPyzEzCghg9I9efly
BcN1K2EOk1bnk951luBWm0USuys6Mx5bWLdFawtOK+iApbl3/MLoTmMbSVpq6rg/
2Eqchg/sTr5DyJtjqpfnejn6mvqbBMUeciRL+8+MbtYR0iwJkLu/hYsm+fKMMA1k
TXzjYji0NFy86At4njm7mUoIXGaJLDPcRVCtQY5lSxtKRb8/sHk/f/HV9W35Yc5d
WqBQ0U9F9ewOkFu30FfQVd4ln4fiTNvev8XX+7sih6GsxGLlpuW4R45eMbuKAcno
BpBKxQPW6OfBoDQJS0N/8ZAmEudEI3On3pPwwKoAQtUgkSOCoU1xHXxnG/4X1wl8
gG7RpfPr8jQZaJPEDo/RmYawUNuPRiR/HIYTAr5ywvrxD5o81rjEuvJKo9iaqBNe
ZPfPqwIDAQABo4ICXzCCAlswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTBYes67mqX
YWvdkqfTZEZOqzU4MDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmN1ZmZpYS5jb20wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB0
ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWrujikQAAAEAwBIMEYC
IQDDn0l6vOEo+yPCzUJgWgBQqyQkqiUzvigmI8SiWzjxDQIhAMA5Pa7hQ+rslNMI
Se2eiC544b1yOpbHpbVa+eOgPpAWAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk
wwz05UVH9HgAAAFq7o4rJAAABAMARjBEAiBxd+AspCBl+W++u3IjLxi3wa81IOGO
qg1W5oANbn1MvgIgdoBbi8QE6tUcGSuXyJxaRLoXzf8A0x76DUuxzgQCdREwDQYJ
KoZIhvcNAQELBQADggEBAE87RFqzw9ME8LLgGgdUWNMDJ+rZYRIJb4MSuvbwG7DQ
REXvj0p2W+0jLAPw2zj0yg6VaSchsxOUXZsxf5ll+qspNO+Sz9i3aA7uRjTaDKnC
/UQ0P7KpZF6/q1oqs82Z548a4pygghlVZaVFSRH8w8WYRCzgzTKiDWBAJVyKsFHY
hrf7a0Aki3estoChd62wFCnVfQtjlMDSfl6om/NSBEYsKIIeMAoFWSFM0JE2CSFv
w5lQnaTYVsSXZJjhRRQ8q65IFy32ZyPWTz+w+gs3qovojL5rO+EHQbhDnI4gk6A5
UEIZ48d4AlcLOQV1sE93OpyJhbVWnvwvWO4P9U6O19c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvSEUh+cECHuwBX9sev2B
rlLUEbxgKZOZcYaCtYhvPychm6pRkX5pipkei/KGRc3SPKl6aZUfJqCVcKRsQwJx
EoQluEqD7eCrw9L3EoIFQTrRhlM4XmquaU008eGEFeK4flG9gS+LsHAwIu4N0Pld
oyeaHkAMrmtGc1mX4AqUEJszrnz69LmEq/8KmThbRpF0DWbEbeAm2AM/wLDIp3QJ
arfVYlpQx9uVUkxjKSRL9IqxQ1GIshP+XYQY4Z2+kQzcgchmKPMKkn3wQobc+gmF
nz8sxMwoIYPSPXn5cgXDdSthDpNW55PedZbgVptFErsrOjMeW1i3RWsLTivogKW5
d/zC6E5jG0laauq4P9hKnIYP7E6+Q8ibY6qX53o5+pr6mwTFHnIkS/vPjG7WEdIs
CZC7v4WLJvnyjDANZE1842I4tDRcvOgLeJ45u5lKCFxmiSwz3EVQrUGOZUsbSkW/
P7B5P3/x1fVt+WHOXVqgUNFPRfXsDpBbt9BX0FXeJZ+H4kzb3r/F1/u7IoehrMRi
5abluEeOXjG7igHJ6AaQSsUD1ujnwaA0CUtDf/GQJhLnRCNzp96T8MCqAELVIJEj
gqFNcR18Zxv+F9cJfIBu0aXz6/I0GWiTxA6P0ZmGsFDbj0YkfxyGEwK+csL68Q+a
PNa4xLrySqPYmqgTXmT3z6sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342647985585188336542969986307357906673479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 09:34:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 09:34:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cuffia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771579898529321235175019341038404680381807464170934459374210253051309377474099291343605805077437076463673294670622861649714428496619341540630825676873314563580054425813462204783108803916781384308414847548085196109747999001247514409722674533860721744171132619981515509501341834494103860348084060410836055240687592062893780826914125424906380443238995450806963132528877297097141301271432872710081624228275373857359815624331892229897908575888513004238285427371980644613882034526245697560792574932616249278277423086786001770755749570437261462847352327424422835633876589817349512761954976321019048352838755768953312931573019894618660762581286600623828509859386780853298522107784611140187660698381577380332269834186259542490525952051263036175291994672663250892780874237878224133286348284119047305599455608080174095214776509699235422572342638005886676708247183338569789651669659771921730830419842160439317950145917180297104971767014038322032237286175936748667979990177107701835988722520613136551784058293383404470631080914546263414476369222129646984700075886805723447533110513029879781677910970592633505106538580028666710110196890919184689438726099535734172141788908867476876336751281776619969886819330743250475005285143168102395712581914539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c161eb3aee6a97616bdd92a7d364464eab353830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuffia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aee8e29100000040300483046022100c39f497abce128fb23c2cd42605a0050ab2424aa2533be282623c4a25b38f10d022100c0393daee143eaec94d30849ed9e882e78e1bd723a96c7a5b55af9e3a03e9016007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aee8e2b24000004030046304402207177e02ca42065f96fbebb72232f18b7c1af3520e18eaa0d56e6800d6e7d4cbe022076805b8bc404ead51c192b97c89c5a44ba17cdff00d31efa0d4bb1ce04027511
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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