aegir3.koumbit.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:0b:c2:58:eb:a2:60:2d:b8:94:b6:6c:cd:bb:39:74:64 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aegir3.koumbit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:0b:c2:58:eb:a2:60:2d:b8:94:b6:6c:cd:bb:39:74:64
Serial Number (int): 267137288650001799806491209685954958292068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:ec:e8:39:d6:a4:ea:4a:f7:1f:65:61:ae:7b:48:af:64:37:d8:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:53:4b:1c:86:38:0d:89:f8:e4:21:9c:02:3b:46:45:86:26:31:77
Fingerprint (sha256): 02:59:55:8e:3e:5d:27:79:78:6e:9d:f2:d1:30:0e:bf:ac:7a:19:d7:91:af:72:d2:b6:40:55:74:73:7e:19:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aegir3.koumbit.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aegir3.koumbit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegir3-koumbit-net.aegir3.koumbit.net
aegir3.koumbit.net

Other certificates including the domain name koumbit.net

(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org

Certificate

The complete raw certificate details for aegir3.koumbit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267137288650001799806491209685954958292068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 18:04:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 18:04:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aegir3.koumbit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798440602232918652291115471752765799865127087442160717041809183976948750999869996170616207068756295608672099102418823128684212602233855233712837327877953960577188538624826550195791991092408180137350731005410195081650115182906983092361355967980899490074416423442948770372986769865540464486798303092496182393244622049844070010202965130089746133597911595876862630951343390452433734342511881634536231425435880751186928527470442078253441764602340392080863221423773903289558078347650332363840170387596202217629625838564816948985889447624010788569902745892071481156608124050638331926461063083035839689203155764678153445103949042221889242344939347585517492615983343027182413826414573889508874702340485819449287423307930272680544392075291464118287201634672658410016426976658646763878802325323425956268930493244456642709102022067130759363834443431371362036223592663353613463417079199168228078053557290734852186222993288506166552874718263214356378664851492832145856049818689302732198978094935489790633016042608814930151651942231453957631498483754453496089024949491182034301613178365408551114116234494581747985244423717140484254655368376922710395111024690466213025553753389103461206923970095840817743743378258262807600078150515441304472574749591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62ece839d6a4ea4af71f6561ae7b48af6437d8e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegir3-koumbit-net.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001695eb11c23000004030047304502200c9b4e75bb10296b8c6f74476950ab56ec79147db1bce1c9467012292f0827b9022100d976b05a925c74ffde132e7cd387f818a2ac496451535a7c96b4039d74e21d3e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695eb11c720000040300483046022100f63457734097b273b512cf3f3fb3134dd23268bea02faab34365aee4b5d74956022100b50d0b7ed0d6dc28175c86341867bfc6316fa6ae42e1e3d96dfeda771ef3dded
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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