cuffia.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ee:f3:b1:95:0e:34:bd:1f:da:49:78:33:16:db:a5:9f:47 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cuffia.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ee:f3:b1:95:0e:34:bd:1f:da:49:78:33:16:db:a5:9f:47Serial Number (int): 342647985585188336542969986307357906673479
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c1:61:eb:3a:ee:6a:97:61:6b:dd:92:a7:d3:64:46:4e:ab:35:38:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 93:eb:6a:b5:20:6a:5f:66:3b:c1:8c:42:89:91:43:a4:e2:df:64:db
Fingerprint (sha256): f8:92:98:84:44:b7:e8:7f:7e:ae:9d:44:c5:b5:cf:f6:22:34:59:64:4a:c5:e9:df:94:51:d0:54:fc:71:c1:ac
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cuffia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cuffia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cuffia.com
Other certificates including the domain name cuffia.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for cuffia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISA+7zsZUONL0f2kl4MxbbpZ9HMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUwOTM0MTVaFw0x OTA4MjMwOTM0MTVaMBUxEzARBgNVBAMTCmN1ZmZpYS5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQC9IRSH5wQIe7AFf2x6/YGuUtQRvGApk5lxhoK1 iG8/JyGbqlGRfmmKmR6L8oZFzdI8qXpplR8moJVwpGxDAnEShCW4SoPt4KvD0vcS ggVBOtGGUzheaq5pTTTx4YQV4rh+Ub2BL4uwcDAi7g3Q+V2jJ5oeQAyua0ZzWZfg CpQQmzOufPr0uYSr/wqZOFtGkXQNZsRt4CbYAz/AsMindAlqt9ViWlDH25VSTGMp JEv0irFDUYiyE/5dhBjhnb6RDNyByGYo8wqSffBChtz6CYWfPyzEzCghg9I9efly BcN1K2EOk1bnk951luBWm0USuys6Mx5bWLdFawtOK+iApbl3/MLoTmMbSVpq6rg/ 2Eqchg/sTr5DyJtjqpfnejn6mvqbBMUeciRL+8+MbtYR0iwJkLu/hYsm+fKMMA1k TXzjYji0NFy86At4njm7mUoIXGaJLDPcRVCtQY5lSxtKRb8/sHk/f/HV9W35Yc5d WqBQ0U9F9ewOkFu30FfQVd4ln4fiTNvev8XX+7sih6GsxGLlpuW4R45eMbuKAcno BpBKxQPW6OfBoDQJS0N/8ZAmEudEI3On3pPwwKoAQtUgkSOCoU1xHXxnG/4X1wl8 gG7RpfPr8jQZaJPEDo/RmYawUNuPRiR/HIYTAr5ywvrxD5o81rjEuvJKo9iaqBNe ZPfPqwIDAQABo4ICXzCCAlswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTBYes67mqX YWvdkqfTZEZOqzU4MDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmN1ZmZpYS5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWrujikQAAAEAwBIMEYC IQDDn0l6vOEo+yPCzUJgWgBQqyQkqiUzvigmI8SiWzjxDQIhAMA5Pa7hQ+rslNMI Se2eiC544b1yOpbHpbVa+eOgPpAWAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFq7o4rJAAABAMARjBEAiBxd+AspCBl+W++u3IjLxi3wa81IOGO qg1W5oANbn1MvgIgdoBbi8QE6tUcGSuXyJxaRLoXzf8A0x76DUuxzgQCdREwDQYJ KoZIhvcNAQELBQADggEBAE87RFqzw9ME8LLgGgdUWNMDJ+rZYRIJb4MSuvbwG7DQ REXvj0p2W+0jLAPw2zj0yg6VaSchsxOUXZsxf5ll+qspNO+Sz9i3aA7uRjTaDKnC /UQ0P7KpZF6/q1oqs82Z548a4pygghlVZaVFSRH8w8WYRCzgzTKiDWBAJVyKsFHY hrf7a0Aki3estoChd62wFCnVfQtjlMDSfl6om/NSBEYsKIIeMAoFWSFM0JE2CSFv w5lQnaTYVsSXZJjhRRQ8q65IFy32ZyPWTz+w+gs3qovojL5rO+EHQbhDnI4gk6A5 UEIZ48d4AlcLOQV1sE93OpyJhbVWnvwvWO4P9U6O19c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvSEUh+cECHuwBX9sev2B rlLUEbxgKZOZcYaCtYhvPychm6pRkX5pipkei/KGRc3SPKl6aZUfJqCVcKRsQwJx EoQluEqD7eCrw9L3EoIFQTrRhlM4XmquaU008eGEFeK4flG9gS+LsHAwIu4N0Pld oyeaHkAMrmtGc1mX4AqUEJszrnz69LmEq/8KmThbRpF0DWbEbeAm2AM/wLDIp3QJ arfVYlpQx9uVUkxjKSRL9IqxQ1GIshP+XYQY4Z2+kQzcgchmKPMKkn3wQobc+gmF nz8sxMwoIYPSPXn5cgXDdSthDpNW55PedZbgVptFErsrOjMeW1i3RWsLTivogKW5 d/zC6E5jG0laauq4P9hKnIYP7E6+Q8ibY6qX53o5+pr6mwTFHnIkS/vPjG7WEdIs CZC7v4WLJvnyjDANZE1842I4tDRcvOgLeJ45u5lKCFxmiSwz3EVQrUGOZUsbSkW/ P7B5P3/x1fVt+WHOXVqgUNFPRfXsDpBbt9BX0FXeJZ+H4kzb3r/F1/u7IoehrMRi 5abluEeOXjG7igHJ6AaQSsUD1ujnwaA0CUtDf/GQJhLnRCNzp96T8MCqAELVIJEj gqFNcR18Zxv+F9cJfIBu0aXz6/I0GWiTxA6P0ZmGsFDbj0YkfxyGEwK+csL68Q+a PNa4xLrySqPYmqgTXmT3z6sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342647985585188336542969986307357906673479 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 09:34:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 09:34:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cuffia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771579898529321235175019341038404680381807464170934459374210253051309377474099291343605805077437076463673294670622861649714428496619341540630825676873314563580054425813462204783108803916781384308414847548085196109747999001247514409722674533860721744171132619981515509501341834494103860348084060410836055240687592062893780826914125424906380443238995450806963132528877297097141301271432872710081624228275373857359815624331892229897908575888513004238285427371980644613882034526245697560792574932616249278277423086786001770755749570437261462847352327424422835633876589817349512761954976321019048352838755768953312931573019894618660762581286600623828509859386780853298522107784611140187660698381577380332269834186259542490525952051263036175291994672663250892780874237878224133286348284119047305599455608080174095214776509699235422572342638005886676708247183338569789651669659771921730830419842160439317950145917180297104971767014038322032237286175936748667979990177107701835988722520613136551784058293383404470631080914546263414476369222129646984700075886805723447533110513029879781677910970592633505106538580028666710110196890919184689438726099535734172141788908867476876336751281776619969886819330743250475005285143168102395712581914539 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c161eb3aee6a97616bdd92a7d364464eab353830 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuffia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aee8e29100000040300483046022100c39f497abce128fb23c2cd42605a0050ab2424aa2533be282623c4a25b38f10d022100c0393daee143eaec94d30849ed9e882e78e1bd723a96c7a5b55af9e3a03e9016007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aee8e2b24000004030046304402207177e02ca42065f96fbebb72232f18b7c1af3520e18eaa0d56e6800d6e7d4cbe022076805b8bc404ead51c192b97c89c5a44ba17cdff00d31efa0d4bb1ce04027511 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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