kitesurfparadise.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:96:0a:40:6a:3b:84:2c:f5:97:ed:ec:48:df:5d:0e:a1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kitesurfparadise.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:96:0a:40:6a:3b:84:2c:f5:97:ed:ec:48:df:5d:0e:a1
Serial Number (int): 261876577591028820398868030097070829145761
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:75:49:96:6c:45:65:49:be:41:50:e4:40:a6:33:33:09:7a:cc:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:ee:3b:5b:e5:61:5d:67:21:1f:1a:31:79:60:00:ee:be:bc:53:c7
Fingerprint (sha256): 04:7c:50:bd:87:e4:f5:49:a9:d3:67:da:40:96:66:12:b8:98:d4:72:53:8a:c3:43:c4:e7:7a:df:0d:35:9d:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate kitesurfparadise.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kitesurfparadise.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kitesurfparadise.net
www.kitesurfparadise.net

Other certificates including the domain name kitesurfparadise.net

(limited to 100 certificates)
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
kitesurfparadise.net
www.kitesurfparadise.net
kitesurfparadise.net

Certificate

The complete raw certificate details for kitesurfparadise.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAwGWCkBqO4Qs9Zft7EjfXQ6hMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEwMjYwNzM0MDBaFw0x
NzAxMjQwNzM0MDBaMB8xHTAbBgNVBAMTFGtpdGVzdXJmcGFyYWRpc2UubmV0MIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxhJ8PjEV9mED4rKhs7U08nDV
baqD05ooPErNsWqyhggkCUpIFilXFg9UTs8SyVja7DlOv3ScNbGgHJGf95eA8YsQ
9VucZeCjDVx6vQ9UAIllc565WpyIt44k7PUI1/lgM83deoWg26+zUQ2chfZi4q8W
Hmd+kr6ia59e33dT7OGYJMCEqx1723BqPmGED4C0UFzyjB5D89ibjpGvuxznwhTH
YSWLXXI4b4HxYwjhAB7MJ63a9pQJcNj5RfiveKs8ZzbrunpRlJrIR8l8TY4gUjCS
jH4bel+nb8Lw6IkJXmTEDqYmghSSGyTz1z5qooH8NpWSEBaBmzCA+r8rJM6Xce7a
INFpepqPn16TL0/ukN4RP+fuxHuGzWsOjwYbs1TS2p3XdVAuNv1jettVcYvOqo6u
NygrYxJTbwJSJrh5oBOIXe5OrRZXheGMcJb6L7yKVrwCXwEiN8Xqkqe7rBilqrRn
gFFmfMVXVBiMQLClIgurxWWpOIyXajAnNma4h71W2CIhry1e6cszllVS1SLwQtZd
W6RKScOSxrQDASrJTtpXLUksD3WupwQEQ1E9J3yxqeZg8bio6LqFBcnvcRXXJp5k
R+YcYmj6DOpwpwqdvNRPV1l7bsVkbhmmijIKGbajGUqxmUYXZR5brYilyJEOSg2a
pQ3MDAU1vWXf7uIcp+MCAwEAAaOCAi8wggIrMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUF3VJlmxFZUm+QVDkQKYzMwl6zK0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOQYDVR0RBDIwMIIUa2l0ZXN1cmZw
YXJhZGlzZS5uZXSCGHd3dy5raXRlc3VyZnBhcmFkaXNlLm5ldDCB/gYDVR0gBIH2
MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMg
Q2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQ
YXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNh
dGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9z
aXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBZ1PjzPScf87zHD3iESgzunBSj03MT
pGhG2qvGqiyJGBHB6l7EftmgL8QxRgd74TZQTKqtsADNk6U4NZPmnFjKH0lFa6OJ
gfxvfLbNDgMsBplYAgAkQyMaaCaaFhWFZAvOCFLkZ2AaSl4oaqZtGH6MBgp5P406
ZqyT+lUYcHiLMiv5frnOtlV5b1h/Bz3SK6lQce0mm3NnOxTYNXJyIiOyVca+pe5M
M3MYr5A7lQ5WUW/sbTYFA4dZsI3J+eoRL2bdzj3Mjzx9ruI1kZ2lbzr7GSo4EIgd
FwbkcFpV0P2hf+GGHpuig6uE4ikzOdjvJThhi2/ymE1IbnSNAIRD9smj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261876577591028820398868030097070829145761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-26 07:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-24 07:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kitesurfparadise.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808064109617525554154716865957263781133649497720502446147589234530798666400815205493887853224616339879254731064256387859270374509127644159691428535689240583354861890500058102544776681222310475006396195347741728997931234891288906725000703864363548766907712987903724555902852144869970424159517955145077560416358228367364917654830778111175655386180424655258587648580780218506922068738812615526452100258505468430106474658436841609195845370226407616596169238594032300053026560697827824051459940308331713865205418936212396575837700804477223902348454769917025542889012066655439376531526457685634164916795737994269371409045486250627243798750983575490728576791829692680529749338636226690581549372350490739860023607680233796895729042724831503382747625944878832327050254666663533889569076804863602988489935521279715508017003512132078221283944317133436119268599764996248138193463205527047923880335151885737930175228808202213304605259249358595797466031676069231449807860967081969925150818610226335605670639324849815807755816227856917347285262318455940780728221848944367397634512432945928962999540005589175732936478201553574558396980531232699946835418035656668577914470522273821380514389247825921375046968744538566641221828340565343903269135362019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							177549966c456549be4150e440a63333097accad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitesurfparadise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitesurfparadise.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059d4f8f33d271ff3bcc70f78844a0cee9c14a3d37313a46846daabc6aa2c891811c1ea5ec47ed9a02fc43146077be136504caaadb000cd93a5383593e69c58ca1f49456ba38981fc6f7cb6cd0e032c06995802002443231a68269a161585640bce0852e467601a4a5e286aa66d187e8c060a793f8d3a66ac93fa551870788b322bf97eb9ceb655796f587f073dd22ba95071ed269b73673b14d83572722223b255c6bea5ee4c337318af903b950e56516fec6d3605038759b08dc9f9ea112f66ddce3dcc8f3c7daee235919da56f3afb192a3810881d1706e4705a55d0fda17fe1861e9ba283ab84e2293339d8ef2538618b6ff2984d486e748d008443f6c9a3