kafka.verkstad.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b9:3b:df:6b:2d:3e:cd:0f:13:7b:10:0d:15:3e:bf:55:91 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kafka.verkstad.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b9:3b:df:6b:2d:3e:cd:0f:13:7b:10:0d:15:3e:bf:55:91Serial Number (int): 324368680183407649859125915729516528883089
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:33:b8:5c:97:84:c7:f1:28:be:f5:c4:dc:99:8e:5e:64:27:72:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 87:12:d5:83:c1:7e:8c:f6:da:ce:38:d2:9f:8e:2e:61:88:6c:0b:cd
Fingerprint (sha256): 19:5a:4c:e8:c2:91:b9:9e:1e:ae:00:1c:5e:06:cd:9a:65:41:7c:57:15:06:4f:82:60:95:11:ca:6b:b9:e8:b2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate kafka.verkstad.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kafka.verkstad.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kafka.klockrike.net
kafka.verkstad.net
kafka.verkstad.net
Other certificates including the domain name verkstad.net
(limited to 100 certificates)
kafka.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net
Certificate
The complete raw certificate details for kafka.verkstad.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISA7k732stPs0PE3sQDRU+v1WRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAxMjMwOTU5MDBaFw0x NzA0MjMwOTU5MDBaMB0xGzAZBgNVBAMTEmthZmthLnZlcmtzdGFkLm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOjJW8SZQNkViNBWse5UmxRpbhb2 NJ8JZyS9/Tlz/tnvOOqiWblqFL58FIOyHiGTAerfZKS483fGCOiYGZi3/j7SBOIW +tTH2Mm9mcYliHijIHfaDMBEGZ/yni0WOqxS+j4921OPWb6iIzuPCY9Lh3d73QPX BnZ6S7ytGE8dQs7DwuOE/jIDYN0agemFHT40x/g8cIjTEyPBWQbUA9kg169Xq7f2 T6upasmYdPS9UfL2HWCxHVU6HqF7fKgB1QKRz0yklAM6NXsik9laQqsmeFLgNwvm FjTtjwZT96tORoMDu7fYTfbWYgZ6fvcWHOfMb7NSVcJOpMzDRh6KJ3KtHzMCAwEA AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGjO4XJeEx/EovvXE3JmO XmQncgkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wMgYDVR0RBCswKYITa2Fma2Eua2xvY2tyaWtlLm5ldIISa2Fma2Eu dmVya3N0YWQubmV0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEB AA6jNAMq/1n8L8umfHj4sSQzap6yi/p0M0UzPwiOquw+beLaGMGyzEgBp0IiFz9e pnSZcoyT1lewy0YQJaPj1G3FmoAcBqgN0ejJSWeBU789e+fd329qJRmcVjREIy/7 05o397dmdmMca/L7AJ0gn+9FjjuhyzgUgq/Fcai3V5DDNR7qV1sbu7pY+KatNXhC k4lVXXlpfzhIWbJ7izAADs5V7sa36egEK1Lzxk5pdfl6rFZDjoxUNLF9kuirOCOv yXTEiA8k3xkUxPB7m2GSB0l7QuJISx5bTqm/CUTi2EiK72kyfjg769t3uyYSUfpA hiYX2RZUCRdfzj1+baLhyRA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MlbxJlA2RWI0Fax7lSb FGluFvY0nwlnJL39OXP+2e846qJZuWoUvnwUg7IeIZMB6t9kpLjzd8YI6JgZmLf+ PtIE4hb61MfYyb2ZxiWIeKMgd9oMwEQZn/KeLRY6rFL6Pj3bU49ZvqIjO48Jj0uH d3vdA9cGdnpLvK0YTx1CzsPC44T+MgNg3RqB6YUdPjTH+DxwiNMTI8FZBtQD2SDX r1ert/ZPq6lqyZh09L1R8vYdYLEdVToeoXt8qAHVApHPTKSUAzo1eyKT2VpCqyZ4 UuA3C+YWNO2PBlP3q05GgwO7t9hN9tZiBnp+9xYc58xvs1JVwk6kzMNGHooncq0f MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324368680183407649859125915729516528883089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-23 09:59:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-23 09:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kafka.verkstad.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29386580313717563348290303063625041299818477732136583558694839805357449964411824242543555463769873769651281570325051475002926107984224656443960964912359141723522056770631738508423227721845106536216410589744125230104364758218550412410258234982097796825446903425421528194540299909744648300069124117109238477599209640571243307511444364498919800383978669698878395851124111081466958777930812855482915866568844117926137357152143587231227738585640969891435412528527152846393427504492136129660221247807381916583139530429004658914657837891280334397076916231994185199271960077656214061134667629145397787608627654220730426269491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a33b85c9784c7f128bef5c4dc998e5e64277209 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka.klockrike.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka.verkstad.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000ea334032aff59fc2fcba67c78f8b124336a9eb28bfa743345333f088eaaec3e6de2da18c1b2cc4801a74222173f5ea67499728c93d657b0cb461025a3e3d46dc59a801c06a80dd1e8c949678153bf3d7be7dddf6f6a25199c563444232ffbd39a37f7b76676631c6bf2fb009d209fef458e3ba1cb381482afc571a8b75790c3351eea575b1bbbba58f8a6ad3578429389555d79697f384859b27b8b30000ece55eec6b7e9e8042b52f3c64e6975f97aac56438e8c5434b17d92e8ab3823afc974c4880f24df1914c4f07b9b619207497b42e2484b1e5b4ea9bf0944e2d8488aef69327e383bebdb77bb261251fa40862617d9165409175fce3d7e6da2e1c910