home.koopmail.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:f9:7c:5e:2a:f4:30:60:c9:5f:ce:5c:b5:38:9a:34:38 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=home.koopmail.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:f9:7c:5e:2a:f4:30:60:c9:5f:ce:5c:b5:38:9a:34:38
Serial Number (int): 325301283935206793375255489037346744710200
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:1a:84:a8:60:4a:48:e9:45:a7:82:22:87:3a:51:1d:64:53:d4:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:9e:52:b6:98:32:1e:54:7a:5f:ac:ed:19:28:25:e0:2c:5d:26:59
Fingerprint (sha256): 00:18:4e:51:13:9c:18:1c:f8:76:cd:a0:0c:c7:cb:2a:4d:94:1a:83:ed:63:a0:7d:96:7a:f6:d5:02:c8:fa:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate home.koopmail.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for home.koopmail.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

home.koopmail.net
nas.koopmail.net
octoprint.koopmail.net

Other certificates including the domain name koopmail.net

(limited to 100 certificates)
home.koopmail.net
nas.koopmail.net

Certificate

The complete raw certificate details for home.koopmail.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325301283935206793375255489037346744710200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-29 11:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 11:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'home.koopmail.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780569642227273962416597863077872998814892722108791781982653736467652118958229857837274907203857862172847387652047421679152661229819632024464165208865385334180270601834767651468502230121625237624259945900483435282194789943195775474777286397446866131820041340830979381800456317548834980305358191913624328831434990827914867800725001964992598737143406845183069882763105933543938856699365329476979784173557012201086819088670224280639703787244385609416832969911914184916965011601858043283450819962023967662728065765208517078554006478824210097686775127376514318248896350897921201782779609841534042038244112334172591766398150985678136822253938822419113539238631256370307703944058381625001694762620464048035319728590819107027194668818246405379997235131532146998172957247573679614307842691618276635843782466722986890220895953134110630138018294410708664988321680293223906420784630677697870527429509685020288097956908531481315560687803317008562498739870903053439272779696251471581457187008297808900837349460098062064103977752039181267247851174633998275974261381777705832437774456648147476150323335869795101238288414426350884910147773027878510632987440613313813188237287660470375069471470830885199757322612983575368619805029949103696631388570543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e51a84a8604a48e945a78222873a511d6453d4f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.koopmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.koopmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octoprint.koopmail.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058287940a1f2fdaf34769adec89ec518f3cd327f6744be301205e3b89639c6dd2084097b52c7ab7586785a4514291bfb297414f4d5618fc879dfbfeb166ba0e1b7bd4e959d04ae5bcad267408bd6b4d577218145be08e8246bea596ae06127d7e329e14a140fe90f12aa355119e73c0aa196aa70df996083dccadb41f6584a765a2ca6d3156fe8c8d8a0c0d9586b1869158c8cd7ddca1059c39afbd926b41cc677a6c034cefdd2d20cf31cccfe496a128eb11c88184018fb03f2dd94080801420707d912261c58e9a115e13cae95d4007bb9620247350fdd6c49bb639e83a1ccc0e378cfb1a036361149efda28258b9d64f0b85d99d23019bfc78888f11fa029