pizza.onoc.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:b3:8c:27:08:a4:46:81:c4:9a:a8:b8:53:62:3e:04:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pizza.onoc.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:b3:8c:27:08:a4:46:81:c4:9a:a8:b8:53:62:3e:04:0a
Serial Number (int): 272464553061255106209576779017272589943818
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:89:e7:41:68:fc:59:1a:b8:e8:34:2b:c8:25:20:2a:9f:13:a3:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:cf:03:42:d0:eb:30:22:b8:22:db:81:fb:73:ed:3e:e3:9a:ae:04
Fingerprint (sha256): 0d:47:97:03:50:9f:3e:40:9a:24:fb:f1:0a:48:f4:bf:3a:57:04:f0:9a:b8:5a:d3:22:36:ad:32:06:65:e8:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pizza.onoc.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pizza.onoc.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pizza.onoc.eu

Other certificates including the domain name onoc.eu

(limited to 100 certificates)
pretix.460.kif.rocks
ctf.onoc.eu
onoc.eu
pizza.onoc.eu
pizza.onoc.eu
api.pizza.onoc.eu
pizza.onoc.eu
api.pizza.onoc.eu
api.pizza.onoc.eu
pretix.460.kif.rocks
onoc.eu
onoc.eu
pretix.460.kif.rocks
onoc.eu
api.pizza.onoc.eu
onoc.eu
onoc.eu
pizza.onoc.eu
onoc.eu
new.onoc.eu
pretix.460.kif.rocks
onoc.eu
pizza.onoc.eu
pretix.460.kif.rocks
onoc.eu
new.onoc.eu
onoc.eu
pizza.onoc.eu
api.pizza.onoc.eu
pretix.460.kif.rocks
pizza.onoc.eu
pretix.460.kif.rocks
pretix.460.kif.rocks
new.onoc.eu
api.pizza.onoc.eu
api.pizza.onoc.eu
onoc.eu
onoc.eu
ctf.onoc.eu
pretix.460.kif.rocks
onoc.eu
new.onoc.eu
new.onoc.eu
onoc.eu
api.pizza.onoc.eu
pizza.onoc.eu
pizza.onoc.eu
ctf.onoc.eu
api.pizza.onoc.eu
onoc.eu
api.pizza.onoc.eu
onoc.eu
new.onoc.eu
onoc.eu
onoc.eu

Certificate

The complete raw certificate details for pizza.onoc.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxN+Y7az/vNYzXoASzwAA
NW0txXS6r14Vv2eJDsE7veHlHSQnnvTzF6MMniiM6Asq1k5dnYjpLlyX+mT9Pv0M
dYjcG7XRlHueol/z+b289YSUozF0NqUWZy/sWGNdtUAFPdjTHaYjrA1vQzUxWxuv
1M5TWOJjhVMLkQo9uxkJTWphfkA/XjW0nri61g3DIlctQ14pj1uNFGNi5FFC0a3Q
nrKBw96RtC1Z01yRYZXAEAugF2UGO/lIUtfM4GYPgb1B2Wq0RkIBx5C+x8odjg4+
uyKANmdpDVr+uqHMsn80C96zgrgpmgULomtZck0OrXxs+jaaUmIWexNtbW+3EcWf
08/u/g7aR6SKlyqpl8GB6F7EGobT8ZboYREi916n2+kaLBb6nIdVGMFz2HyDZrLI
WXHQm1AuX7xjLMptszLz7+AZVY/zHTw9hXPpL7HQRBwVzbn4ZNjn0zVVpM+bDRTh
vVMOB7ksUPdqSHDGLjNiNuX7EOPWcWcAva20jcRSuxlB2cw9U+6qtMLBqTeZRhAn
e5q3rsaoUHMLF9B3SOFn9e1UxaI3pVvRZV4R/qUenu3fSgIGcic6C9wiKk/vfVzQ
jyEHKrj8oeFR+H5pn5bSrQ7HFtvxVOUhPMUNmV0qYNbT4Lm/6FIo6di4z6etAosf
BgAE1Na0jJgJ/Wur3gkqkO8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272464553061255106209576779017272589943818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-20 10:30:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 10:30:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pizza.onoc.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803173509641526144223376491047087380093842914372080259206378131332502906898434303455665062794355451557729880821809597522835810063290154907503752154331687067286027329745198678754324381925428410849141124860801587396347456461979548397185533898060307184142348722576727804141399022770981515073172697111904931543624245552859164956060618826494904239069708224528183922229552163502580693170899011252348472401608367054751535988277335985221570392345442323776855595440761660445318100556498126297061146088535788369968194839292730226375871800930836104375703845809224104204808842730707601717477698820293831051153966203212175674124755405844194631940129572800852843140594278888776588804183234681823582436855129556885469059292928947400764257538856439139658327984005001078354983049810314937952858264143921159194129655582282130985540610318839475876910594202408265400360126047797044790849669340464322603224131323095691911230350432577431899627685842726887208792486058742532744127181796931146079317947557902980528739597881448649829181133633867323181959167511346397279866556032814329224490424493689148570528582623456024050699158236178328793019405566683033015838801307892908604567008116156252743644830729984908565863644853159624216120185391511435850556281071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca89e74168fc591ab8e8342bc825202a9f13a302
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizza.onoc.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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