bookisland.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:a5:b0:97:7f:e9:1f:66:b5:1e:bc:a8:7a:c3:57:f7:4f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bookisland.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:a5:b0:97:7f:e9:1f:66:b5:1e:bc:a8:7a:c3:57:f7:4f
Serial Number (int): 298307592959071682002332948747868685465423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:58:25:25:3d:05:c0:3b:4e:21:f1:46:cd:41:ad:54:0b:4c:aa:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:c0:6b:30:4a:13:3c:81:8f:fb:88:17:4a:ac:2d:39:63:6d:32:7b
Fingerprint (sha256): 03:0e:11:7c:67:38:80:bb:78:e2:39:2f:7e:51:82:99:6e:bc:7b:aa:fc:64:5e:f7:c9:f4:14:db:15:f2:26:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bookisland.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookisland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookisland.net
www.bookisland.net

Other certificates including the domain name bookisland.net

(limited to 100 certificates)
bookisland.net
bookisland.net
bookisland.net
bookisland.net

Certificate

The complete raw certificate details for bookisland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298307592959071682002332948747868685465423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 23:22:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 23:22:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookisland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777666333403370637769249147277178589799953790742881834626576636508813888723297839975256705014891390327067131346799487824872393372994320841426458641264120376157306673228051260907801683027770253957747177476739178015921425723020444595890359093880402319181912707632656208292805631672311804010344603007123611506812994424196679623216582353714558059576560312101006423182032811118108521836889009531493997360712634535402664012800799865699499564247874301495694291207369006179898092647655647328677337239007316765062758131207181452157648213515391932016806617738699126551591163780202205813052444916283460509352295699085489717205238523829243667394834535532016119097725711330977209520048097656066404164705340941669464576797931403981985392045061145049972786627482017472741087647432235963406755871423533014187749667889018449165174629844395897855527425428735433433625352852929449498159066351204783040722949640972764264091932757968112753990565402031074139091732017756374363158777179497067400327330970760345772633320123688589263558031465266475016526671118001389187388963351231861644928221640453404151773197250262533056096419681445484059260433978299618474133617937471664343717428350883179018087524040665612931143007802749130749937988683306353522548656511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c5825253d05c03b4e21f146cd41ad540b4caaa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookisland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookisland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eddbc96050000040300483046022100f3d15f0b028d3d578fc1bd58fd6074315487a4ed4207f86c950e744ee07ec25c022100a6e175161cdcad9d9384ab10165182fef5aa465457c16b4cd7b607926360ffc200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eddbc96230000040300483046022100db2e011098f1fa0424e1bea31f49f0c2b6b31fd17b8bcbadee6dc6e51e67867f022100afd81c382cfdc5944c5136347c43da7a91d0edbcf4e2fc70efb57a62f7397749
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00853f2043bd1723cad326d7e812df1a2b7b7f314b3601f5b99a5ab9683b2094fe7874bf0147aeb0af824d11d6788579a512c6b18f25023ba86884ac26e3539aefc806b7a26defee8300c265194822008e0f67f631f233ba3b2ea5e4db32d5deeabbceb495761979507e31a36406102991cd8bffd544317d4515de18cc00772f90c783bfdbeb6ebbd2ca928c51fbde44928960726bffed548468ebfec942cf618be3eb1a0119e6a992135dab4789b25c6dad7d20108c4bc41e5eb96025fffa6671af71d47aeb8601dc1bafcccc628149a3072d66f7e7d17859e96e1ea1cbf14b4f972ba87a0d98deb9a767a6f0da4b4fd4219ceccd5f16b739fea338ce1c944660