innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:56:8d:2f:e9:f4:0b:7b:a8:8d:00:27:6f:23:4e:e9:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:56:8d:2f:e9:f4:0b:7b:a8:8d:00:27:6f:23:4e:e9:77
Serial Number (int): 334612613376586007222255404416568201767287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:d4:45:8d:50:e9:77:c0:15:05:a5:77:c6:3e:30:9a:5f:38:38:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:c6:e2:82:fe:2e:24:d2:8b:88:86:9e:65:95:0d:97:37:d2:20:d1
Fingerprint (sha256): 1c:64:8f:9b:63:3a:03:08:b2:0b:0b:79:27:75:a7:d3:84:61:17:1f:95:5c:fb:01:4a:76:18:e8:6f:89:f9:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334612613376586007222255404416568201767287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 11:05:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 11:05:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801673129971537135591920336422520360129262380589005513812259856927252648667818768594822064919992090014366489277992333909300682522470851610050372173746810552430584657715437791851008519446633101257857724506532672817084114942172854908665366050506295236719195218992092503825874148775610103368028057746322856697349570136064316847689085558919995619028706610019527763957138098380446039321388857286798248288826041010569672045862844926823764207357199845487337126933056975802734042544899372683445364462528071735988847084743216956446088140880598872929488464535383542469430815553973519243547679406248786426599481768300249055212379821106743029921726358637723610452586516595327808171420592947581970840130759240229128670238694220781231838036947975495860851022621758704237223637933080640456648952884985704990788412963248495135229275169253643191357102875260737566243431435085561619243592302887301147109125929955525316708601876306225245555526290414537902020051407733613347184102258172789156475455162040660290613552997979909159550314410505813510501284115305998305925345397024262344910604390853391878443422287909569138667601644480218127032824111881529228197151030974293704051094166674948756800627116618353521251412838530159398355938906465192520093111293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffd4458d50e977c01505a577c63e309a5f3838b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d53b6963f0000040300483046022100e1518b102233d4a4b2a9a6defbc640e180e879522520a9cdb832655ca4ca530d022100ec8914dbcaf6152da0ee38cbc9441b4786ba1b59b1582e6b9ce73981357835a700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d53b696620000040300483046022100e8b454bb1bf8d68ec7842d3d5f7f9b039f988f4486ba55ae9a37fd65b4b7e7a6022100c26de197fb438f9018912bcd9b283848f30ca7756b4a2683a070bd41415c8d8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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