www.signicat.is

Issued by R3

About this certificate

This digital certificate with serial number 03:de:72:de:16:b3:1e:28:ef:17:8e:e6:3d:81:77:6c:75:91 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.signicat.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:de:72:de:16:b3:1e:28:ef:17:8e:e6:3d:81:77:6c:75:91
Serial Number (int): 337032228393555340376783081330585021216145
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:25:25:a0:5c:93:a1:62:52:b4:39:f3:0c:46:79:9e:8e:1f:70:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:af:08:81:90:7e:bf:9f:d1:dc:27:f3:86:29:2a:2b:a9:ec:f9:4e
Fingerprint (sha256): 12:9f:74:87:7a:58:bd:38:90:c3:77:7b:5f:96:e8:55:d3:24:78:89:5a:69:4e:2b:c6:d5:b9:cd:a9:b9:e3:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.signicat.is

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.signicat.is

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

janice.nl
loud-juridischadvies.nl
meshbox.no
nijkleaster.frl
pokemonkel.nl
sbte.st
signicat.is
support.tristargroup.org
tristargroup.be
tristargroup.nl
tristargroup.uk
uk.angelsandairwaves.com
wilhelmsenchemicals.no
www.claricell.sk
www.dekleijne-janssen.nl
www.geoteknikk.no
www.janice.nl
www.linsoteket.no
www.loud-juridischadvies.nl
www.meshbox.no
www.moeterommet.no
www.pokemonkel.nl
www.signicat.id
www.signicat.is
www.skepparpsvingard.se
www.stoltzen.eu
www.vestfold-fjellboring.no
www.wearepalmreader.com

Other certificates including the domain name signicat.is

(limited to 100 certificates)
www.signicat.is
www.signicat.is
www.signicat.id
www.signicat.is
www.skepparpsvingard.se
signicat.is
valer.kommune.no
www.janice.nl
www.signicat.id

Certificate

The complete raw certificate details for www.signicat.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOAdaH+XiBQVH3MnhF6P+2g8O1Glp
nlbLwv+gPoiA/2sat2U0XLpdqqxdDEiWO2LzUScFl87NrplPlWvTt12ojg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337032228393555340376783081330585021216145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 19:25:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 19:25:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.signicat.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000438075a1fe5e2050547dcc9e117a3feda0f0ed469699e56cbc2ffa03e8880ff6b1ab765345cba5daaac5d0c48963b62f351270597cecdae994f956bd3b75da88e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							302525a05c93a16252b439f30c46799e8e1f70b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janice.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loud-juridischadvies.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meshbox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nijkleaster.frl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonkel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbte.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signicat.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.angelsandairwaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilhelmsenchemicals.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claricell.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dekleijne-janssen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoteknikk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janice.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linsoteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loud-juridischadvies.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meshbox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moeterommet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokemonkel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signicat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signicat.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skepparpsvingard.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoltzen.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vestfold-fjellboring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearepalmreader.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f54bb371e0000040300473045022100f4fa403b6eed18a2db5d19e67532c29e81eed2399e533afc23a4c0ed8279b6e4022041e6dfd6cfc993fc15480e36e418f5cf1e7073f106b87743938cdbaf5aeb1b890077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f54bb37300000040300483046022100d3ae783d9e13e3856c772a45044fb2b4d104888e5d43460d9b4d4c9cbed710be022100acdb21ca82a41f6ee8918014a062ef98c0336c34124aa3f91460729cbf719b3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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