beat.doebe.li
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:f6:54:f8:b9:77:d5:eb:71:10:ca:16:f1:fb:5e:62:35:e2 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=beat.doebe.li
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:f6:54:f8:b9:77:d5:eb:71:10:ca:16:f1:fb:5e:62:35:e2Serial Number (int): 170934694797318091182543011390224823629282
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: 1d:cb:26:a4:ad:73:1a:e3:fc:d5:a8:8f:bd:59:3a:a0:bc:4f:53:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:a0:74:d5:13:f5:08:70:fb:8f:61:e2:04:95:58:3d:31:bd:99:ce
Fingerprint (sha256): 00:00:bb:a7:39:aa:bf:88:ac:1f:e0:e8:b2:b3:86:f7:0b:54:e4:82:6f:29:72:78:b1:c7:c1:d4:9a:69:41:73
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate beat.doebe.li
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beat.doebe.li
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beat.doebe.li
www.beat.doebe.li
www.doebe.li
doebe.li
www.beat.doebe.li
www.doebe.li
doebe.li
Other certificates including the domain name doebe.li
(limited to 100 certificates)
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
beat.doebe.li
Certificate
The complete raw certificate details for beat.doebe.li in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAfZU+Ll31etxEMoW8fteYjXiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMjAyMjEzMDBaFw0x NjA1MjAyMjEzMDBaMBgxFjAUBgNVBAMTDWJlYXQuZG9lYmUubGkwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCpTkU7wQ82DcZ9dIonbDVabuo82qutWNdS 8ChnL6IBGk5mhuDO2lNvJuhhRpotM/mEMzshf+Fz7kmj0k+rXWbve/1spAa4Yd5W R/fBVJtOV+v71J+Huph1Fn+TL6T+70N/QIatNDYOHzkZgyZ4qw4fVI44py0rVNQ7 fqMT9axmumBi099d+tqDbw/QLo8wPI6AkLnsM27BHJicDLckMkEAGn6V2mTQrCFk OGqzcEcm883hJM0TSwxuWMoLCShOP6WxvTOsIeeRLTkbrtsw/lta9xFqNVqIPEpG Y9g9SQy7MP+7mNWKOoAZ84QgqSJmV3ELK28XZI/iqHweD93oWg+suTs43Avzzm8l ryQ6ivF1tLyRPC4lj6bZcxDgVDTtOe5+63yT9eXk0svnCqaUU3e5+ILY4osXVSp4 UhOjqGX7UkF041jhzhOl3ZjupJiQeghgOYES9W7R7wdLWI8M0wShybHGsKmw9sJw okAqeV54/VtRBrMPZzsYxAzj1b6hvuFKW4HsTF1ElH4lhIkbgIZgNTnIhdZRDRJW 8rlaeUc36Dk1PvG38dNld/tLoEIJtrasPivXSUnQcw8XGRLCYhzqkrnwOFo4QN1U R/nprt3GuH/uw5mGuDm3DY2CPcld+qKKyYPN/rNphaqa9mHk5+NujWH5r48xn4Xu dSNPZ7CSAQIDAQABo4ICOTCCAjUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQdyyak rXMa4/zVqI+9WTqgvE9TAzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14 MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzBDBgNVHREEPDA6gg1iZWF0LmRvZWJlLmxpghF3 d3cuYmVhdC5kb2ViZS5saYIMd3d3LmRvZWJlLmxpgghkb2ViZS5saTCB/gYDVR0g BIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1Ro aXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWlu ZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlm aWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3Jl cG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCJgBSvHE4F/NkJkaJnPvoTxo9O M2+4oCTT1oyEKXuSnNyxqs3LURbJsnY0F0sT72LW4ribaMMEdsvw0JgSywdfQQ4b IKwg0sNsLr+IJSONlj6zBqHJayrc+bWsi3pubVTmG8XC1CtDkfxwGqPdf3vbA/op 5ie2+dl9Ds4Gjj6aZGQiuvDuG8qYP8laWTaW00IDOZyq9wgz9qDQFBnq5WQR1hL0 Cl9xoyONynePxPh0IFsCG0TlhJ0kg/1fGxA/Z3l7Ny5Hcb8q//T7oe6x9kC0UdpQ MjeUpiTcDik4g/QAT0efH6DEfe2MqCiN7SX3DqtzH9aB28ramAGXtnRhcgqO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqU5FO8EPNg3GfXSKJ2w1 Wm7qPNqrrVjXUvAoZy+iARpOZobgztpTbyboYUaaLTP5hDM7IX/hc+5Jo9JPq11m 73v9bKQGuGHeVkf3wVSbTlfr+9Sfh7qYdRZ/ky+k/u9Df0CGrTQ2Dh85GYMmeKsO H1SOOKctK1TUO36jE/WsZrpgYtPfXfrag28P0C6PMDyOgJC57DNuwRyYnAy3JDJB ABp+ldpk0KwhZDhqs3BHJvPN4STNE0sMbljKCwkoTj+lsb0zrCHnkS05G67bMP5b WvcRajVaiDxKRmPYPUkMuzD/u5jVijqAGfOEIKkiZldxCytvF2SP4qh8Hg/d6FoP rLk7ONwL885vJa8kOorxdbS8kTwuJY+m2XMQ4FQ07Tnufut8k/Xl5NLL5wqmlFN3 ufiC2OKLF1UqeFITo6hl+1JBdONY4c4Tpd2Y7qSYkHoIYDmBEvVu0e8HS1iPDNME ocmxxrCpsPbCcKJAKnleeP1bUQazD2c7GMQM49W+ob7hSluB7ExdRJR+JYSJG4CG YDU5yIXWUQ0SVvK5WnlHN+g5NT7xt/HTZXf7S6BCCba2rD4r10lJ0HMPFxkSwmIc 6pK58DhaOEDdVEf56a7dxrh/7sOZhrg5tw2Ngj3JXfqiismDzf6zaYWqmvZh5Ofj bo1h+a+PMZ+F7nUjT2ewkgECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 170934694797318091182543011390224823629282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-20 22:13:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-20 22:13:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beat.doebe.li' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690707173857086938843349164864133470858381000600964147704476801545607257936253820548557913984363645855098943543543576531506394898674044425065322115218662866587106551004763905453024821394542610681629882777519059896859829162852377889115102440701010544974732641856387321918500376165358616287696318534420639322578080333660730294096584931745687403625930591840963812686851616389770201958592432054578595305365138288825727302466356143786264813282488159964421981641958738642806879627827227241204041922786270077677087872644236325358250312100360401857180028101770949783456327827137947989714243434572515076596954615961193197160661174086906927108889100351562280336363635272586567327993296841153903418653109714777205966969887919342849753476578839948803286056414765237916334622014883513949914174198479879394169982058392896984197183327064496607091985798481869236758461523675995624420669878397356344420307660269617962241615997216383006430177965910111399078820953960803353804539905422084176385346907291728784398550459414276639897073881327410021354211615572023638550753151576690267742248850908150954553514609067439060382320326731196053559287259196495814955017732281013267429987143486756750217917576056072035888278838682081206895462145444514456484745729 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1dcb26a4ad731ae3fcd5a88fbd593aa0bc4f5303 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beat.doebe.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beat.doebe.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doebe.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doebe.li' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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