holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b6:70:8b:ac:8a:6a:b4:76:b5:d5:84:6e:48:8e:8e:d1:e8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:70:8b:ac:8a:6a:b4:76:b5:d5:84:6e:48:8e:8e:d1:e8
Serial Number (int): 410530133270983995688973244609270660387304
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:aa:c3:0a:87:7f:14:71:c8:d7:a0:c9:57:55:00:df:08:b1:88:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:5e:b9:78:03:0c:10:05:a6:23:46:8d:8c:96:1f:2b:51:a7:c5:30
Fingerprint (sha256): 0b:52:8b:65:4f:9f:fc:99:44:0b:a4:20:63:fc:91:0c:92:d4:04:17:1e:00:77:cf:30:1b:ff:d9:55:8e:29:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holdur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is
www.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAueRj7/NepgnKB9bgBROD
IYjwACBc3+7xAhRiHaMKcPMLo0VGB6jplCYCsY2w6YEYbncDZCn6wFKNKKt983CX
dASfjgq/aFTkD2PS059ZDr1MAqu4yBQZY2cTm59fknul6pB0oqSc59AfnHMg7peM
uKK0sgd6BRkxRtqSi+2hz/Y463xDqd80XJ/iTg3zQAmYmd1TNfMYzN9LtZ3yAI0A
QQLxc02otxwOqMs8kUh8k/OY4ew2vzxA6WHoIrgQuSvft0sarF+LMMLK5js5nQxH
NZ/lceKfP6Ms/XUVl9u+gQEbkqS172Zni7mtmwR0nVFJpsKwH7ke4+x9X+BnbhCL
rRqLqwwMLGUGldsJNCTYWajudr5uG8Ff5kOK1PK1s/iGGdmS9eIRu2Z4MPMWfq8i
0Eg0CyDZlQvELefzfA74HxaEyy5JR0N11hYj5kjUQb3H0cvR97yqok3Ot/r8r1HH
e6ZyBZjojLG40DAITfriZBP3Cbci6d/qHJ7y1QqEkG/WVrHi/sHnx7GjvzTb5ovn
AIx3XCPtxLDYLY5YniyI/JlvmOTw0oZYxBfKbC2fLVQMuoMFq9B1yNBWC6NqDlhE
7vJW4UdWelEkT+lSNPjQ/VELSpcd98YiCLhPkdVrhfWNKZnNVpXdOopG7AcgHVBq
au8UebLrJxevfVYf1xWw6usCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410530133270983995688973244609270660387304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 05:01:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 05:01:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758373806721983474356600894924606376397314932675521317994039261372466127123244383040543679226017574588857793327195783858783047418052104500457226431612720972098140018764802312624659016986603608365795045558078863279613747577283957986040972421758585119203817649952196402438697885030832769041226865050240041987914005221333835472584918735089216402027954691565280928583044022410854343113264085616651769565915390456755334236318698316205942644462460062060485004840240420706622690582882166221640112052304837621152532424794542133156604512876134838119060909469165947557237798511389551114130482315218770727583585408887487169640735571941179113361088536894926101605746042597473066567326108804335334585290205627857345922258771953280810236275248902577614658953950126668765662270013820245221204487223067377768376214106939227320413361209453088240148551955468178993289849519210796794954645558190609886784874832896384301932170685129269312144099283610037651366359239474234248136587584566441770876580045955629615512098988192457306005168424221547789918554528718919618312641647686352504422339223165085937536797905396313616393699828259713085252304268822143525022307650341544739962580109388793177930203226979705355070017358181730368152637598010057514279824107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37aac30a877f1471c8d7a0c9575500df08b1885d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b925fbf7a000004030046304402207e0f57d253c04de993131de2eac14600862df1ebbf693d625a3f861ee6588eba0220361e15424fd4b4a2e615e9b171b38d7f3264a9ed323cb5cec391ebf86f4242b700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b925fbf5b00000403004630440220782946c140c3cbf22d9c6b7e735ad4333069ac765dc3677411c6db985b5a766902203973b0037893e900ee0ac9524a851ffc993fc8c286c324a8a5596a09e252a61d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045463c85eae293aaa018960e358896bf8846ba4cbc5ec028cf4a1a14df064e751a5c9c2019f1a7b3a5fc947717fe2073ea8c4593e19fc7fcbf7afa06272dc4594129a7764f228a159694bcdb0cb4903cf3d7db0ece379a1d367393818bf38ad36f0506022310919e0e3354771f80d8312e00e4ba1a6c629c7017fa5a64601e56cb57e52c290c3ead5d80fa9878390790b2c40c8c1f1e0ccaa4dee3f7da5c1fd50b7a52c6a093927bc1e2d74505cc5d3a7ee30ee64a429c489c3ec007cd959cd5b0d0fc567c2129cbdcaba977d4984673b41d760756bcddd220c486951a046be8b0c2eee1afb21d3b50338791b7572a3e56b5328057f0769a3efc9db4022ce11a