sushi-chef.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:09:05:0b:0d:af:43:fa:2c:e4:47:26:9e:49:da:12:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sushi-chef.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:09:05:0b:0d:af:43:fa:2c:e4:47:26:9e:49:da:12:7c
Serial Number (int): 341995767993180226506707944619548402651772
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:24:c2:63:ab:a1:3d:cc:8a:88:89:cc:19:48:9b:54:26:e4:0f:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:8d:8a:15:cd:8b:23:1d:e8:09:32:3a:a9:fa:25:00:1b:52:d5:f3
Fingerprint (sha256): fd:07:f6:d0:d2:6a:2a:f6:e1:cf:21:f5:e3:6a:bd:4d:6a:e8:b7:49:43:db:e0:f6:52:73:0f:e7:ce:5b:3c:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sushi-chef.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sushi-chef.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sushi-chef.com

Other certificates including the domain name sushi-chef.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sushi-chef.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341995767993180226506707944619548402651772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 01:40:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 01:40:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sushi-chef.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804333914272906393891372999428269118929098488872119154006546584027129943740253101935836977909548699976758587460088164067083192718481210973917278304720329425051680088357207234804427137883346847590060993864113079356964844467761506477260293529453118768568750382150110364048612269427524632747021019087480940499301774424733610957434262295915799939534188196602500930467589343853084702102160264817266248783733773186673300337738519306138159360184508614356422592516960762210304228984492444226515209361223080254983145666130363126075370123627581186604724267942798561237667318607110948105181423999856873130060215362744023660498666846590667130671948845117957968326319608748965750647839924027490286698666861560861924109353826642046425655202217612976393751793043932340803741885407183445086483533183982656764955559710899903437128835546564416568125425339735832251180387758815142444430022730393956056742367996439742917169889733671009931723423335215175333065803214516607978804396077685950931234892262456548286325888544435588373154833054698031792810291551368252181055031033542138461423897402924390661505001686878775930295974246104580262393261436267098318542781517478919777660711332225331494658161331634727919950694366643569731758318368887373678515499407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3224c263aba13dcc8a8889cc19489b5426e40fab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi-chef.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be5738caa000004030046304402207e404412eca2d5a93ea9fc80ab7d88d32f4d2387c3b825c51a8040da0eba0002022038008712b6f37a13c90ac00c30a766e65fe5df712bfd2f18b12803242b9497ba0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be5738c94000004030047304502203fbc26bea26ef79b8e449ee136b612eb104047c87b2721844f126c7c885552c8022100eecdd9c62ab5dce04109f280d954b523bc69f283df286af18187d3d684df4f8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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