doinua.inika.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cf:a7:e9:2e:1c:70:f0:7f:83:87:4d:c3:84:f2:bb:69:1e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=doinua.inika.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:a7:e9:2e:1c:70:f0:7f:83:87:4d:c3:84:f2:bb:69:1e
Serial Number (int): 419110785495383551472866280707955084716318
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:70:d3:49:ae:c1:5f:d9:6f:df:82:49:53:75:fd:4b:76:82:2e:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:db:3f:0f:9d:1b:70:27:11:69:b5:b6:fb:09:9a:4e:1f:a6:e6:54
Fingerprint (sha256): 04:bb:89:85:11:dd:14:fd:f9:56:03:47:6b:c3:ff:59:b3:64:32:a7:35:bb:fd:09:81:3d:4a:6d:e6:ba:7a:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate doinua.inika.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for doinua.inika.net

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doinua.inika.net

Other certificates including the domain name inika.net

(limited to 100 certificates)
astigarragakoherrieskola.inika.net
arantzazu.inika.net
sni164756.cloudflaressl.com
alkartasuna.inika.net
egape.inika.net
lourdes.inika.net
ondarroa.inika.net
elizalde.inika.net
azkoitiabhi.inika.net
errenteriamusikal.inika.net
ceparantzazukoama.inika.net
iesarantzazukoama.inika.net
sanmartindeaguirre.inika.net
karmeloetxegarai.inika.net
talaia.inika.net
urretxu.inika.net
gainzuri.inika.net
usandizagapenaflorida.inika.net
arrasateherrieskola.inika.net
arantzazu.inika.net
murumendi.inika.net
iparragirre.inika.net
amorsestao.inika.net
lasarte.inika.net
doinua.inika.net
ms.inika.net
adurza.inika.net
zuhaizti.inika.net
cepaitorikastola.inika.net
iesarantzazukoama.inika.net
help.inika.net
inika.net
koldomitxelena.inika.net
murumendi.inika.net
ninojesus.inika.net
murumendi.inika.net
gainzuri.inika.net
altzagaikastola.inika.net
losherran.inika.net
samaniegolaguardia.inika.net
gabrielaresti.inika.net
bekobenta.inika.net
urdanetalhi.inika.net
ipintza.inika.net
koldomitxelena.inika.net
samaniego.inika.net
bizarainikastola.inika.net
elizalde.inika.net
amorebieta.inika.net
sanadrian.inika.net
arrasate.inika.net
urritxe.inika.net
errenteriamusikal.inika.net
frayjuan.inika.net
angelganivet.inika.net
angelafiguera.inika.net
kurtzebarri.inika.net
idiomas.inika.net
eibar.inika.net
angelganivet.inika.net
ceinpro.inika.net
gorapenberriak.inika.net
urkizu.inika.net
gainzuri.inika.net
alkartasuna.inika.net
iesarantzazukoama.inika.net
cepcristobalgamon.inika.net
centerpoint.inika.net
arantzazu.inika.net
barandiaran.inika.net
kirolene.inika.net
iraurgi.inika.net
antigua.inika.net
ikasbide.inika.net
azkorri.inika.net
sanprudencio.inika.net
urkide.inika.net
mendaro.inika.net
sni164756.cloudflaressl.com
joxemielbarandiaran.inika.net
cepaitorikastola.inika.net
munoa.inika.net
ikasbide.inika.net
ellacuria.inika.net
cristobalgamon.inika.net
iparragirre.inika.net
ondarroa.inika.net
gernika.inika.net
tokialai.inika.net
karmeloikastola.inika.net
ekialdea.inika.net
sanignacio.inika.net
joxemielbarandiaran.inika.net
ikasbide.inika.net
ceptalaia.inika.net
samaniego.inika.net
idiomas.inika.net
elorrio.inika.net
bekobenta.inika.net
lezo.inika.net

Certificate

The complete raw certificate details for doinua.inika.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419110785495383551472866280707955084716318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 07:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-20 07:01:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'doinua.inika.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3433350739079739855171367329819689434595597379393123422587601418904261906913943494966436601595977900236381031603693217963421901053922510127078289841448439708285924607546673265255911447093626416770880975636960486867274474790103677211526900102689801558916773943949624862276760726217778954840638195773920515465799623819871464950777843695456668409187044726315152606782193181843199457574281368367476652753095718344084527432067954178989809966802669575060754359150466732984341123085720627592306226387625819678346014462155221970498144268112752502724965920994788178332531437869095009402542674659123003746796192349775814146409288296187206302022092984105655039577049416345046034685864750379173819776540159912841536888965662869271749763923071617386811768631645883253367169924197622989820596179674032729740822079723132311705383257791718934587310105918356516555989548775478341618127160253154533395305244746964310208215486711717144597109543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c70d349aec15fd96fdf82495375fd4b76822e90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doinua.inika.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175eef8e4f50000040300473045022100ee29d4154b90232986596dfe0523c4b54d9f40a27ac7db0d4ba83dd0a4419b070220035ff8e1e7c2268bd982484c8237167d16815429280755277634a7819c6276e80075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000175eef8e5c60000040300463044022058a854855229365b3bbef3cb2a4e5290f375e36c50a0ec5c87b7a8c481a37b9c022044bc5139f30d2457ada7a30a805e0dd741ba26e6d6ce174e977f7ede6f900e50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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