aufruhr.squat.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:b0:15:8f:06:b5:61:3d:57:c2:2d:11:ab:12:57:3f:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aufruhr.squat.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:b0:15:8f:06:b5:61:3d:57:c2:2d:11:ab:12:57:3f:53
Serial Number (int): 287772656114601252691102649237868566232915
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:f2:06:9b:4d:41:31:1b:ae:3d:c2:76:6b:e3:e0:c6:59:6a:8a:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:ef:60:a8:36:72:31:af:0b:38:f7:cf:5d:05:85:ac:b9:e1:3b:a8
Fingerprint (sha256): 04:8b:6e:d8:88:71:46:01:0c:59:fc:b6:0b:5b:54:32:1a:80:29:fc:3c:63:35:fb:00:16:b7:ea:83:7e:c9:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aufruhr.squat.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aufruhr.squat.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aufruhr.squat.net
www.aufruhr.squat.net

Other certificates including the domain name squat.net

(limited to 100 certificates)
kraakgroepleiden.squat.net
comodo.squat.net
canpikipugui.squat.net
wanklank.squat.net
ob67.squat.net
peckham.squat.net
krakengent-oud.squat.net
kamtxatka.squat.net
lotecliste.squat.net
lunanegra.squat.net
lunanegra.squat.net
cia.squat.net
ac4042.squat.net
ulft.squat.net
boligaksjonen.squat.net
dageraad-indischebuurt.squat.net
spok.squat.net
albi.squat.net
skatonomen.squat.net
chequepoint.squat.net
sept09.squat.net
biko8.squat.net
kilombo.squat.net
testrdr.squat.net
albi.squat.net
landandfreedom.squat.net
awier.squat.net
willembeukelsalternatief.squat.net
guantanamobay.squat.net
onbegrensd.squat.net
praha.squat.net
overlast.squat.net
bloukblouk.squat.net
infosquat.squat.net
streetmedics.squat.net
k85.squat.net
praha.squat.net
streetmedics.squat.net
www.rigaer94.squat.net
arg.squat.net
kraakhandleiding.squat.net
hollekies.squat.net
rs32.squat.net
loukaze.squat.net
damslapers.squat.net
leeuwenhoek.squat.net
videos.squat.net
kaufnix.squat.net
blackathena.squat.net
toulouse.squat.net
ar.squat.net
barcelona.squat.net
23.squat.net
r84.squat.net
kbf.squat.net
aufruhr.squat.net
kraakweekeinde.squat.net
kaufnix.squat.net
it.squat.net
barrax.squat.net
heiligehuisjes.squat.net
gegengift.squat.net
huizespoorloos.squat.net
spok.squat.net
arg.squat.net
tanneries.squat.net
usurpa.squat.net
rdc.squat.net
positivament.squat.net
politieklachtenburo.squat.net
krakelbont.squat.net
afrika.squat.net
potse.squat.net
ram.squat.net
langeleidse35.squat.net
zureich.squat.net
friesland.squat.net
csolaguarderia.squat.net
topf.squat.net
xb.squat.net
burntout.squat.net
ansii.squat.net
moya.squat.net
libera.squat.net
unsystem.squat.net
ksuoost-data.squat.net
libera.squat.net
laostia.squat.net
nonono.squat.net
verbindingsblok.squat.net
www.eus.squat.net
vault.squat.net
lapoudriere.squat.net
libera.squat.net
izmir.squat.net
squat.net
bsm23.squat.net
hollekies.squat.net
kmii.squat.net
garave.squat.net

Certificate

The complete raw certificate details for aufruhr.squat.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxdG/AL1EAeSJi19SaCi2
YrGg5/16t18jn8HLP1i6fwm503uD6G7EbR6klm7wARbVeYDmKeoxKyjo3EXxei7n
aiF7Jue+xQh8BhV20ExYEKuPFJnJ/miTtwza6dFcgkA6kwPI70GfA1Az5vCkJjK5
ryvzy/RRgAFlhsBLKrLI6JQgnIgfYO2RYNYOk4d20p0JOLn8jQc4KgJiRFQdGhZo
/kYiV2ojBpTVO22qD8VU4/IEuUx0zQJ+q+e3pMVlhMUbiyV8gAAiStQuLhgVbOng
ceuBA7bXtARdwzZOemsC4SrKy8R7+0uK5cG4MshMvFqoY2433+y5qRipcr/nUGvS
wMP022g/YNV8tSkR3cU45x68WN92ly1LufchPAtFkQO/IhU6gtYJKQgElsp1ygvJ
dLvC2wFX2qU4vvuCZNgLscpigiHUqAOuqh/EmEbdLh64s6u10rSSjKWv++RPUeBU
g/af3al08LlSffPoSiJlO0jax+FE79Nc8m77g+kBrGd3REXdJvjNFciG94lV6wXW
m8QnvEsvs7WmWR8MuOPLwlNGo6wJgObjtpPixYmhaFi1pg6LkHAVVfvbkfqF5vOC
FICvCRDfOUKyfNxMIEYL5AlMimGrkEm4BpktiABgSSUt+5n0v+9ZjT0J1iC9qbbb
iaNa8pv3VbvGfHlrPxZVa8cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287772656114601252691102649237868566232915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 09:32:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 09:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aufruhr.squat.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807032418326451354204604890390468561380716587136177805973686151835722472545084846641315275711179451177751581974761887350003656932450090668540006697253025795161063135150969273165615630859944577009279914863758454425905391479186588287971978189369383955164682291049062718297881746900573651702005999104225408733268585691983294730433412006550588179509602800011349016697503189777446782188337925405506889603900781422044363183983913615747995728036159189310656775570744232948527915971567464045937639483945429228093755938678708806569911816802581896493412481523695127578562785294031395988545384916458770092118847314487653874101406893240624351776938501668261651136018367341613340298346239231009065465297410293478295475635186094955682275849014416987256911458757464505617794273047980544824769796348535898819591989282524490787140257259407458222794050981468612820872407821249154646536217328893549203522189626842482470723849173363241949088397884543260287165848038982007272540803793681476335893682804099136849553807808377658742535687971450545939728708330976598787044780292247731084146877351744867982768360153295825043895653168898332863335202580605390597827368995126652645267164180057307378444682127492136513296040003282891086165208857926185642907495367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32f2069b4d41311bae3dc2766be3e0c6596a8a95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aufruhr.squat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aufruhr.squat.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016851116c3b0000040300473045022006a717e26ed6c0f25d3cfcde69e4058056d42d44798edeb97bee53d1481b17a202210081018b3c0d9763eddb9db22d1e9cec1dd99ad3ae96cc3a004b17175f79012d1e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016851116a370000040300483046022100d26ec7f6630ec09b643dcba48f6b7f8ac4f5dbd02db1ab12f2038c8d09ebb4120221008de6e0abd18346d749b01cc69f4a4f5f564ee469f0e46529cd72a681795412a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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