kastali.is
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a0:e0:c6:aa:6a:76:11:68:9b:b8:fa:2c:55:75:a5:19:df was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kastali.is
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:e0:c6:aa:6a:76:11:68:9b:b8:fa:2c:55:75:a5:19:dfSerial Number (int): 316080815104909063269605070103871551248863
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:13:8a:2a:fe:75:02:78:4a:60:f9:30:66:d9:3c:74:0c:55:54:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 14:2b:0f:b9:45:23:26:6e:e1:8f:dc:22:5b:9d:cb:df:ea:80:fc:cb
Fingerprint (sha256): 17:23:31:53:77:12:48:4c:0e:6f:c3:9c:7a:ed:6f:9e:54:11:45:05:c2:0e:c0:2e:f6:c2:26:6a:28:e2:1a:74
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kastali.is
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kastali.is
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kastali.is
Other certificates including the domain name kastali.is
(limited to 100 certificates)
kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
www.kastali.is
kastali.is
kastali.is
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
kastali.is
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
kastali.is
kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
www.kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
www.kastali.is
kastali.is
kastali.is
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
kastali.is
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
kastali.is
kastali.is
www.kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
www.kastali.is
www.kastali.is
www.kastali.is
sni160876.cloudflaressl.com
www.kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
www.kastali.is
kastali.is
www.kastali.is
kastali.is
sni160876.cloudflaressl.com
kastali.is
kastali.is
Certificate
The complete raw certificate details for kastali.is in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISA6DgxqpqdhFom7j6LFV1pRnfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjIwMzU5MzRaFw0x OTAyMjAwMzU5MzRaMBUxEzARBgNVBAMTCmthc3RhbGkuaXMwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCnIiWdAKHK0BIx1BVQNz7gWEH3u/tdMEfB4MrQ uESQqDpveGZaG/OvS5s76fW9r4NVSfy4RSJX84WKefghw8ILb6sSe2HO4eMxQQ8j wRx0DPdOcQYpGKIxlmTR4SNDtmnoAuycZ41bsYo1Gw5yJUXrCK+B64sXSn0yCjfp MFJLgXNoifqriLH3eWjSZ+5YKS3VG1gtMAscabhwxICVzOpf2IDlKZLaMURnA13a cQxFWUy4f4kqMhVynByxyBrGheI5I0UTE5LSMZxq+gAVTIueOJQ1K2Q/rEIT9AIv fa+9MPPdsHG5kEsGLzE2VcygKpi8QrmXTto+nepGX9P6GvjBAgMBAAGjggJeMIIC WjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGQTiir+dQJ4SmD5MGbZPHQMVVQrMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w FQYDVR0RBA4wDIIKa2FzdGFsaS5pczBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AOJpS64m6OlACeiGG7Y7g9Q+ 5/50iPukjyiTAZ3d8dv+AAABZznJoWIAAAQDAEcwRQIhAI0nOPeHCEx+HhGLPmqO bavbKmbQuZugMIdCSEuO0vWyAiBj4+lj1sOdqfV0Vr4mPq2/uMyLHbI0tuwkoF7A ocN+6wB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZznJobAA AAQDAEYwRAIgHt81/+GdaoG0CTImhFVuhXS+c0qSGPoyPXbZrTE203ICIA9UaI1V 8X1sHRskM8s4VNpFwjrlcu2d5Qk4TRz2ZCJbMA0GCSqGSIb3DQEBCwUAA4IBAQBl wF9dBxFpQwcy/ExJotl3nxFvULnpcg5pmEYopjChCYl8w0KJlMnsXuNfr5oIDTw2 otMIO97IY2XVQlYIHGGDu+0Zv68WzSsEERVtGU8LQb3f+iHv3b7MFYYxJEW6X688 pjYTpwyCh7GMjQEBODN3rpJ4E22cJsvTCrjW7aShKPEVb74CWb5MQ8YQ0qjSe9ZV d8WbnWzgwYK8tPWK5rck+QJxYhOv+kdbDQNlc2P7ML9JHe5autNuqh9VTNH86wcB dgnDuy/eywl4LvCOrpaGv18kQAplt9Gf5SGomVvLUE7gYEZJk8ucwKZL07CIZtou Hap2ckEMKevFq9Gxf0X8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyIlnQChytASMdQVUDc+ 4FhB97v7XTBHweDK0LhEkKg6b3hmWhvzr0ubO+n1va+DVUn8uEUiV/OFinn4IcPC C2+rEnthzuHjMUEPI8EcdAz3TnEGKRiiMZZk0eEjQ7Zp6ALsnGeNW7GKNRsOciVF 6wivgeuLF0p9Mgo36TBSS4FzaIn6q4ix93lo0mfuWCkt1RtYLTALHGm4cMSAlczq X9iA5SmS2jFEZwNd2nEMRVlMuH+JKjIVcpwcscgaxoXiOSNFExOS0jGcavoAFUyL njiUNStkP6xCE/QCL32vvTDz3bBxuZBLBi8xNlXMoCqYvEK5l07aPp3qRl/T+hr4 wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316080815104909063269605070103871551248863 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 03:59:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 03:59:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kastali.is' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21098635406573476528732795445700410954649980164123168792319051866885685808932530009153788937533426739163538695490006683891071980365432805445162683176088629668376416502391492896821003240571535165100780424847368612730662816917627005491823847376817074444949197217174142758075112147608396331813702478042652529993647780800071708171492718481444808295042114394508778594219886213531549838632175695045744191841299104297736480212194781903484243279585823285480156409057343874512516406991264306058585792165177280355126100349264862216950265889580938467237955675095463495544942939759668230821971391382339719905469849445447952431297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 64138a2afe7502784a60f93066d93c740c55542b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kastali.is' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016739c9a16200000403004730450221008d2738f787084c7e1e118b3e6a8e6dabdb2a66d0b99ba0308742484b8ed2f5b2022063e3e963d6c39da9f57456be263eadbfb8cc8b1db234b6ec24a05ec0a1c37eeb007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016739c9a1b0000004030046304402201edf35ffe19d6a81b409322684556e8574be734a9218fa323d76d9ad3136d37202200f54688d55f17d6c1d1b2433cb3854da45c23ae572ed9de509384d1cf664225b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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