roomwithaview.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:0e:6b:40:f2:58:78:01:f0:ca:b3:b2:cf:64:04:57:19 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roomwithaview.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:0e:6b:40:f2:58:78:01:f0:ca:b3:b2:cf:64:04:57:19
Serial Number (int): 297085672406958940375588638576875499968281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:6b:f1:e8:4a:6a:82:1a:76:8d:27:56:20:b9:7a:48:aa:d0:ca:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:65:68:36:1a:cd:a9:b3:42:6c:db:82:68:66:f7:62:1c:a1:d0:3f
Fingerprint (sha256): 15:1e:1c:de:65:13:5e:9d:5d:23:65:aa:d5:30:ca:e0:83:c1:bd:0a:ec:b2:c7:e3:19:ff:54:4c:ab:2f:b5:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roomwithaview.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roomwithaview.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roomwithaview.is
www.roomwithaview.is

Other certificates including the domain name roomwithaview.is

(limited to 100 certificates)
secure.roomwithaview.is
roomwithaview.is
roomwithaview.is
secure.roomwithaview.is
secure.roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
secure.roomwithaview.is
secure.roomwithaview.is
roomwithaview.is
secure.roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
roomwithaview.is
secure.roomwithaview.is
secure.roomwithaview.is
secure.roomwithaview.is
roomwithaview.is
secure.roomwithaview.is
roomwithaview.is
roomwithaview.is

Certificate

The complete raw certificate details for roomwithaview.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISA2kOa0DyWHgB8Mqzss9kBFcZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTMwNTM0MTZaFw0x
OTA3MTIwNTM0MTZaMBsxGTAXBgNVBAMTEHJvb213aXRoYXZpZXcuaXMwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCmhPo0ZqZai6Q7xXSpyfbKJ+myIvat
x3T/ty2PtOhr6R8+GmSKgLyHHhWCzL7VWVZ4egPBUdXkk5jbIQ4cAywdwcyviTR7
+yPFydV1vCT39XihxTTOO/E58xvvtv28Rubu8M+uX7SVlVYtulAn6DDS/dRD+wL1
PiV/6lAfdDbXFj4tTgjkPYjHoRaQk76cVVK0uhjez5bG0NXrbij+OeC7o4vj4JDt
TDqN9N6mhn5dRBG0rKIMlrLNDtxcTNbgbL+pvRXWIRktib/gxjHe20iLiMDwgED+
BEnzHKfAIFsUItTlspQWCDDHWwulDewebp0bRb6YJT4+S/myTuMVjdrMR8IRm53h
5vlxlRtQNJUMDtSgqhqiZeHL8oiSHjaSkNGm2eO0IoH/T6sAzVaK6lYoWo9ToVSX
/WTcRL4HQEOprdY+eLWPU5rIyXe3y1W73gZDJq+E4NbDLkNhbZeGhC+Hd0FX0ks6
nt3YF8j8wQ7dIOU2+SI/kWYTge2YWafAyOu0CfbgyrIG748OUqsUKmzI/RQiVvS3
ktfAJURn99m5+ZWYuIuu/vx5TzoNptzVllWG7DUJdwUG+r4cVpInhpjMiauIEAxg
nfeyYrohUjVeAOr8/4pU9pazTxwUTM5TMa6VdVpmkB2U5dS3PFVcJIWFBq9gRxwi
fBYSDQEgcUQ2vwIDAQABo4ICfDCCAngwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTa
a/HoSmqCGnaNJ1YguXpIqtDKujAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEHJvb213aXRoYXZpZXcu
aXOCFHd3dy5yb29td2l0aGF2aWV3LmlzMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9C
cMK//V5CIAjGNzV55hB7zFYAAAFqFWddpwAABAMASDBGAiEAuN7wPUbv8dGHt4Fz
TSUQNkR3amYRcaBDoWVrSz+JFM8CIQC5sn25o18PiYfxi/6wxTVaq7QfUHXLVPGO
ZBEEhwY8cwB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABahVn
XaMAAAQDAEcwRQIgVqvGjWlzzvvZEqN3KkO1B2FCCVS8n9rBM1WNSB/xJWECIQCU
8qa5hQS8lr/YxvTYUybwoEG95e8PsesrBmF04+9ukTANBgkqhkiG9w0BAQsFAAOC
AQEACQYpBVNk0O+ySfc41FmNdKfiIN303bs5oOCh3bmxDAyArPFqsdbks8ZcDIWb
KvKx/BO6y4Wz5q4SXZl+O8AO293ORQ/gNNdn1VXZWkTABdHBNcdBkzQ+o1zO/N9z
XJQqp1TtuTir9bSBcvu41Ks/WFI7ljkjhq4w6WIckCGtPyGGs5GfrLsnDOvyqvNY
f9rUg2XHT2EMei6KZijiKQR41mOo5zCqIKF3pPvJC/7f/wf6kBGm/YUQL32uoQiV
fyoQWCadEMnz2qgNpXQ2mQ5x+heXc8QPedxlANAsfnJ5fC2dooM7TexmOAOP0Rw+
L0P+iO5AM9h1hTMrxH+ICJ3RaQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297085672406958940375588638576875499968281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 05:34:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 05:34:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roomwithaview.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679340057113106790263813564410610354915569335517098754636550240731124364674533496240499683125700564574431693916234855152265152884138736143164002137784909420665272457142624881127424657659029438008720774374946068264014636607274452775651598407095723479934107704334010121828161096151232731008999657671040541244044558136537847260136851951498537347971039514438716192865970689295430460962526913054989486906839887890790865381175840365079770141039069476084956060815889477925018501722478757921969976401701983031944359331171390082445978356333562905406817361173083969722938343268038829287968111066273654565849612901479829490290271376591532597027426646305312187359682578277425614562477298152647179292568983948266124934472318535534062586169939460408308466197604553041324583915399951740579084122752946677893884406153064103534312703543645068762044547496383623050586140232470976816199571881237484743099774551861848541000242463063231010167013235705753462462116026967053608279328781018685636544673568173647190824303983319342734014029302429179969857200497693238797534724444092902697324789044950445103158495097270109607048045165989315733306184101812728938720163606934230699992378730468064673953598098527242915634196506769688418470010144188250036604516031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da6bf1e84a6a821a768d275620b97a48aad0caba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomwithaview.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomwithaview.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a15675da70000040300483046022100b8def03d46eff1d187b781734d25103644776a661171a043a1656b4b3f8914cf022100b9b27db9a35f0f8987f18bfeb0c5355aabb41f5075cb54f18e64110487063c7300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a15675da30000040300473045022056abc68d6973cefbd912a3772a43b50761420954bc9fdac133558d481ff1256102210094f2a6b98504bc96bfd8c6f4d85326f0a041bde5ef0fb1eb2b066174e3ef6e91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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