arantzazu.inika.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:bd:6e:f7:a0:84:ad:10:eb:6f:7b:67:df:17:18:97:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arantzazu.inika.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:bd:6e:f7:a0:84:ad:10:eb:6f:7b:67:df:17:18:97:82
Serial Number (int): 264310916996978774928205634577702602708866
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:c7:c7:83:78:42:9e:d9:4f:0f:ac:4b:13:34:4a:d6:8f:20:04:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:05:62:31:ff:2b:ac:4f:7a:8c:c2:4e:de:cd:fa:dd:91:b9:6d:59
Fingerprint (sha256): 03:89:3f:2f:79:d3:75:54:ff:41:10:93:a7:2e:24:f8:21:78:ff:37:4b:59:42:29:3d:73:94:5a:78:a9:3d:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arantzazu.inika.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arantzazu.inika.net

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arantzazu.inika.net

Other certificates including the domain name inika.net

(limited to 100 certificates)
astigarragakoherrieskola.inika.net
arantzazu.inika.net
sni164756.cloudflaressl.com
alkartasuna.inika.net
egape.inika.net
lourdes.inika.net
ondarroa.inika.net
elizalde.inika.net
azkoitiabhi.inika.net
errenteriamusikal.inika.net
ceparantzazukoama.inika.net
iesarantzazukoama.inika.net
sanmartindeaguirre.inika.net
karmeloetxegarai.inika.net
talaia.inika.net
urretxu.inika.net
gainzuri.inika.net
usandizagapenaflorida.inika.net
arrasateherrieskola.inika.net
arantzazu.inika.net
murumendi.inika.net
iparragirre.inika.net
amorsestao.inika.net
lasarte.inika.net
doinua.inika.net
ms.inika.net
adurza.inika.net
zuhaizti.inika.net
cepaitorikastola.inika.net
iesarantzazukoama.inika.net
help.inika.net
inika.net
koldomitxelena.inika.net
murumendi.inika.net
ninojesus.inika.net
murumendi.inika.net
gainzuri.inika.net
altzagaikastola.inika.net
losherran.inika.net
samaniegolaguardia.inika.net
gabrielaresti.inika.net
bekobenta.inika.net
urdanetalhi.inika.net
ipintza.inika.net
koldomitxelena.inika.net
samaniego.inika.net
bizarainikastola.inika.net
elizalde.inika.net
amorebieta.inika.net
sanadrian.inika.net
arrasate.inika.net
urritxe.inika.net
errenteriamusikal.inika.net
frayjuan.inika.net
angelganivet.inika.net
angelafiguera.inika.net
kurtzebarri.inika.net
idiomas.inika.net
eibar.inika.net
angelganivet.inika.net
ceinpro.inika.net
gorapenberriak.inika.net
urkizu.inika.net
gainzuri.inika.net
alkartasuna.inika.net
iesarantzazukoama.inika.net
cepcristobalgamon.inika.net
centerpoint.inika.net
arantzazu.inika.net
barandiaran.inika.net
kirolene.inika.net
iraurgi.inika.net
antigua.inika.net
ikasbide.inika.net
azkorri.inika.net
sanprudencio.inika.net
urkide.inika.net
mendaro.inika.net
sni164756.cloudflaressl.com
joxemielbarandiaran.inika.net
cepaitorikastola.inika.net
munoa.inika.net
ikasbide.inika.net
ellacuria.inika.net
cristobalgamon.inika.net
iparragirre.inika.net
ondarroa.inika.net
gernika.inika.net
tokialai.inika.net
karmeloikastola.inika.net
ekialdea.inika.net
sanignacio.inika.net
joxemielbarandiaran.inika.net
ikasbide.inika.net
ceptalaia.inika.net
samaniego.inika.net
idiomas.inika.net
elorrio.inika.net
bekobenta.inika.net
lezo.inika.net

Certificate

The complete raw certificate details for arantzazu.inika.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264310916996978774928205634577702602708866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 06:36:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 06:36:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arantzazu.inika.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3452843157982732671414535249387193982917087567903626099738532460084789266746510585804691478985882006446217181328604028926730135773261155014422856698028989961357444743131122760585597555881334076105161348477268390163726024435434895894210203496305031574839107237954314100609737752028093060084349487992105431393769725284274508520541376027949448971291358969893839525270196051472407189617312757231692649616863517577278915949314842198676717962249216663662610056453914241925984544282990612810694060251467388250232057134089619686275183675791788224127447018097241454290749635035661433878938348207816579955962934348225261827228867635399257388759799787249118851904776713079005068562721825603502756454033630268610912436055559975427844562022483779803499520567437643432528031696535731749158776796285571905064349738715046857789231444639292067464253277633501973630378864898140662998235709209532452404818948216772828258010972048794962112876263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79c7c78378429ed94f0fac4b13344ad68f200461
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arantzazu.inika.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001707b4654bb000004030047304502207dfb576720a52d237a1dc4b0108640c029f742ebf18fc9280ed87041b1a4160e022100bf993a2994126e022a0c62db4be9da336090c271d0922862a76e91ec0e0742a200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707b4654e50000040300473045022100dff1ab736a73796d9c4ca644aaf90ce4e8417b4b7c51f8006b6005660feaa633022019e504b74fbffa3a6a95b27e746845e00df4fd0333a22a1ad7c85e15aefff5d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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