matrix.chambana.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:4e:23:bd:c9:ee:6f:09:1f:a9:35:45:7e:93:5f:16:a4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matrix.chambana.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:4e:23:bd:c9:ee:6f:09:1f:a9:35:45:7e:93:5f:16:a4
Serial Number (int): 263822699727162648762890455750309389997732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:aa:a5:83:63:b3:a0:ad:27:12:b1:91:02:e4:7e:03:ab:65:8e:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:a8:2d:6a:27:bd:dd:8f:3f:42:43:38:66:31:1c:f0:87:93:60:13
Fingerprint (sha256): 24:5f:d4:20:c5:d4:9e:cc:a4:27:36:67:0e:67:af:44:9c:71:70:e7:71:32:c6:ef:9b:df:21:0d:46:44:5a:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matrix.chambana.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matrix.chambana.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chambana.net
matrix.chambana.net

Other certificates including the domain name chambana.net

(limited to 100 certificates)
smtp.chambana.net
chambana.net
*.chambana.net
chambana.net
smtp.chambana.net
chambana.net
maryleesargent.ivan.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
smtp.chambana.net
chambana.net
smtp.chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
aware.ivan.chambana.net
chambana.net
mail.opentechinstitute.org
talk.ivan.chambana.net
smtp.chambana.net
chambana.net
imap.chambana.net
nonconformity.net
chambana.net
smtp.throneless.tech
chambana.net
matrix.chambana.net
ivan.mayfirst.org
smtp.chambana.net
lists.ivan.chambana.net
chambana.net
smtp.chambana.net
mail.chambana.net
smtp.chambana.net
ipa.chambana.net
smtp.chambana.net
mail.chambana.net
imap.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
lists.ivan.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
starbase217.ivan.chambana.net
chambana.net
imap.ivan.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.net
chambana.net
matrix.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
ipa.chambana.net
chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chat.chambana.net
smtp.chambana.net
chambana.net
matrix.chambana.net
mail.opentechinstitute.org
matrix.chambana.net
smtp.chambana.net
ipa.ivan.chambana.net
ipa.chambana.net
directory.naf.chambana.net
imap.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
*.chambana.net
commotion.ivan.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
imap.chambana.net
ipa.chambana.net
ipa.chambana.net
chambana.net
acorn.ivan.chambana.net
wiki.ivan.chambana.net
imap.chambana.net
*.chambana.net

Certificate

The complete raw certificate details for matrix.chambana.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnPiLGiUZFgphwXqA7GCh
9AvUlNLjjudDKaPzTo/PViBN8eHJXC12Jx8HN4ofZWzrkTlr5tM8Y2K/JJP3LHJZ
6RegNZeLV3uUdwkApyTODnqKglgxNefOdakx8pfXvW0E1w+F6PYILcUl5pQSdqUt
PVNigOkjp62Aamq3Wpb0IXxsIhk713hklHfilv702DOBnpzyZuMszrNut/kci5NO
fj2vltECWc5vVBTwwyjSV9xk+BptSw4hC2dfI97M2SnEkFgMct9q8xWY5YHen0T+
GiHmPw9xtwtRFVwut5pySfZgc532RlCXBBXFcPJxm2ZxFhSkGqZIJWungLWR5DGz
Ra+XF/VM9S/+tDsFSUs5Uwyd5/AOWJG7N0EKjO6WNv0B7es6FqdcfKg3X7RT745J
l7wbpGzVc0bvm5jf+eJr5JgjUWOPlU0YQVkFeEj12FcMY9prrlC2duKFAfHUzqLc
hp6aEPbrPr/eXJIdqZO0X04yOizU8rb5/v5v8o/cQDVe1caddkwDzerMU8O+NzHh
MDrA6p05BcpoVkAG5LrXEKtcsWsteH2Gmv8YISi6xMXN+mynkCR5B9L9uFEjz0TE
G2RURXgPNQIkvoEOTpSZRoXTzlv5YtUBzIYuCXfGE42cOOas9PefNB7vMQKgerdy
AaeaJD5YW/asdYqUVrW+a9kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263822699727162648762890455750309389997732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 19:53:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 19:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matrix.chambana.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640385288969113032689164775246439603607272369498103135144444941937924269684865186518391598939354145507846774416012284428949193467655276452800328177188644207533999024570316484951918993565245890049757029361067263711558995795254586583097098548817560801216127879301029785073122413474423080654218820204890041372472596269893395003809368892956955723397265847242352880187343395482464799898887967733390473466439587465950852171911098661038729284267394114373823239318740109881272478211798820793038751642763282572311311737619220793478996315123074176571754561391411420643405995113293272151514952371379129685665335931191909731945075191485042811713940636219206757722660037603782619101384022115328395434368663720030589272821613868552229764838621406907869532791907655371089858746930492312065743218340161539747256744282177374371038395258136541142417550029261490838684159687418102100772038822008058105677658572485305761614448634278292875631897243063019329925849394168564062444032761528612827653039451717968195037458605292945300420530717566556948617437009798287238523765798364571763416339564803153044293711791710091009711925340374684215402648103865734174551086701076297277060143432082019235871870373110585921716405358885269541730492278775328374353980377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50aaa58363b3a0ad2712b19102e47e03ab658e12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrix.chambana.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6ddb6e10000004030047304502205b3109854c296ed727d0cb2930c9e0f6997ff3863034a006aab26b29e6ef889a022100bc16fc741ca4aed6d339027be21c3b64a73aa19c022e58788a2e3994650c0880007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6ddb6ddc000004030046304402201664324a3a6ec4b7b632b3053568dad2c3a14afa9ed042f1197a9749adb2710402206dcb36e6bcce71abd2375b1579b4147897c13742e3fd81bc75d14fea78e86665
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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