aegir3.koumbit.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e1:5b:0a:a0:a8:9d:9a:92:9f:e2:bf:93:73:0b:36:9d:87 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aegir3.koumbit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:5b:0a:a0:a8:9d:9a:92:9f:e2:bf:93:73:0b:36:9d:87
Serial Number (int): 425133691213381797458662142552469046467975
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:64:5e:f5:54:e7:3c:64:f0:19:7a:08:b3:f0:29:43:6f:a4:39:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:5f:75:21:79:03:0d:46:7f:8e:5f:c7:74:5c:94:8b:e9:05:ad:a3
Fingerprint (sha256): 0b:24:c6:7d:62:ba:29:e0:da:8d:48:e6:8c:9a:d2:3c:e6:9a:8a:98:97:ad:76:d3:67:8f:57:3a:07:89:27:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aegir3.koumbit.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aegir3.koumbit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegir3-koumbit-net.aegir3.koumbit.net
aegir3.koumbit.net

Other certificates including the domain name koumbit.net

(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org

Certificate

The complete raw certificate details for aegir3.koumbit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425133691213381797458662142552469046467975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 20:53:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 20:53:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aegir3.koumbit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912789081057581891761824346118419904841533478100735039724742844967481127912649978547667603164403857198667771209267926595342243333047326175238160845627389493788183295327150583456016539300757526247902142434491287935019631685589541703351329974495530093843376789792121727223054080752995990585673267377424538905421365693336076429312226322470015528246101717596641797673454866939575609054482329298023901908199652114134908242278190753828187086275251210002352439897856550942502559769098274245812188475155650604297432488633574177902116629934553189350761839006232918486420312084898764800224308705915080522409658567470159200598084810481322782338135186958154618266258678724326856661134376165286645996447426393495915932795238298356555007508509785725966878164465577182418796933703837418443172195943265019434751455181239509420903198437570996376749938307102985454697221015278029532101581257000991594422635645172963238620770663867078421029760436790086760692295317376749802382978624909106885536139520249563021850742037157263440117893726274554033948745494515883721005492646666588152014943435779159952668797815889609468940332736193879657125096785118743626109764637245632126661100763898344785550283635213152704895561331794917171681399808001430666093451339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06645ef554e73c64f0197a08b3f029436fa43942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegir3-koumbit-net.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001682527e838000004030047304502207f1f9bccea14f460e03d15cc899ddadffd3ffd9edae5c7186e883cf19f256480022100e0cc8793bc990e0c3013ef17d91d1ea9b2b88a591514d77d373d89d86e11492b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001682527e7c30000040300483046022100dbf57a7886f42b993f0d20ab46ad0914a6c02210633cdfc982b11a2bf1892eaf022100f26eea5d782678294f6e312129f040550ddb649990a8f94e920e68eba55330e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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