webmail.koumbit.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:53:ec:ea:e6:59:62:47:c7:dc:35:a1:ed:83:9b:5e:26:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.koumbit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:ec:ea:e6:59:62:47:c7:dc:35:a1:ed:83:9b:5e:26:93
Serial Number (int): 377007497657984947961788551456814511564435
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:df:c9:42:94:97:65:28:7b:55:bc:0c:e6:f2:73:63:ab:97:1c:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:7f:8a:5b:95:20:26:12:76:39:dd:04:a5:dc:71:aa:83:fa:e3:8d
Fingerprint (sha256): 10:0b:7e:ce:41:7e:d0:92:a6:43:74:49:6b:48:d8:3a:ba:13:4d:e4:6c:b9:58:02:02:0e:be:09:05:08:85:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webmail.koumbit.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.koumbit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.koumbit.net

Other certificates including the domain name koumbit.net

(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org

Certificate

The complete raw certificate details for webmail.koumbit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377007497657984947961788551456814511564435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 03:44:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 03:44:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.koumbit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654208989601001904824084137691199187494780656633647899969830161644796501604341396295794870270752746861166585270502286563403703269100991683394477043631421509130380364035957391306617340911650343873531181745665633519919749731067901192131761012584521760102981152372182089624243672335514794819802112227463804855035184759089709480910789021284122769288423778160175587933746187940864922514698622604179440676267948759895102524313463402130667548953590346216010022497259567228124832526647982368973684865770906958405108058075947131503255633190257106570912413701054685745540838957198348125701693001028953972863485568983087653074692907246498806675094922550868879445945176211813588816625349654269079713589282695709813983321427999582869192515924940920654743942586675399119426516603755288541143193080478808986153917531063820564150024786083082890054524793274275263428240756610643918058728717683637596204534402461978452596311113102883166317142825199487140864691978166788367899072719822342555226505102156660865929494331994965863706227094700408747255870253742257510542005052117469033758954933798685079530399182451444308645748734097429509006325680814295765649191998904326967612624517355768132377233041281684610752161876890596119404784922484090082189291883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9dfc942949765287b55bc0ce6f27363ab971ce2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.koumbit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aa53532640000040300483046022100ed40b6e62dfdefc35971de1457e01bbbc4323862216f2fc4d9239a26b1f81fa20221008532cb77fa4b7412b8bbb3427c1d7e3d68821af522e2a2d15bcfc5298e7d28fa00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aa53531d30000040300483046022100c8e6c96c0563c54e3db3b60afdde8bfc7268e5d6e7b83c5aa4bdacee1ec094a6022100f5cb1e072f1d3873e9071990eccc059bb8232ef302f19f1c77290e31539e9a58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073045700ba91856d858314246eb60b80b66e0276dd45655da19b673b493a1e600a1c540feb7efce7335096d73ebfb60a799df91fa86c4dd1d65f271abe33b450fb6ad0005f0eefabb5872a0654b2c87a0045a38887b8bb4303d90fc6c702f871c5dbec2de7595352b0a3e88b6c323dd23c0b0f5119a4a8a3e7044f5beed928627fa687c844dd8dc1381af92fbc1ec0f9e1709d89e903b2a0d122ed75718e373282565e33c396c9c76cf1479cc26c69e420f0d10da79ec9d5c8ce8d2046c4d51bea9fdcf7121c24e4116228f0728425947ac57de142f1a3de998c7c6c2c168ac92895ee46336c4324c52df7f32cf1d043bb1b767afa916e86537abd95f9c089c7