berka.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:68:fd:bc:6d:c1:41:71:1a:b5:07:00:fb:6e:c5:27:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=berka.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:68:fd:bc:6d:c1:41:71:1a:b5:07:00:fb:6e:c5:27:68
Serial Number (int): 273046015455048173181561168665170279737192
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:38:0b:fc:b2:b3:3f:0c:67:ed:73:02:0e:ee:b4:fe:46:8a:d3:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:25:94:98:5c:77:90:33:cd:69:1a:86:c9:de:38:fb:0e:d1:b1:b5
Fingerprint (sha256): 26:3f:7c:b4:c7:96:72:bf:05:4f:1c:71:86:41:b5:7e:5d:46:19:d8:a7:5f:fc:47:f3:a7:24:73:93:65:39:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate berka.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berka.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berka.net

Other certificates including the domain name berka.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for berka.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273046015455048173181561168665170279737192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 23:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 23:08:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berka.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820793555491293069524006248017691096284475220960020315113515293782900018778322489599874771232962941377957129443844597335265852492042235528055888272040417992747184283240630724258922602139191771443877572712947943971152478128638387654927056835201345962526274207410091739810740395732090403243250448434581365114210331660487331764918165168022548414443963979750897737913090201518496721673916273124615037085245989356407620105948236622485143609461022707632015946326046658477813156500534945114739650338650657873803895277366074049116819359995802811200931566937667694273694652882579785525021933725306444111538522873694789048800363679502490893982416146833237070570989237716515445571887329151810875253457689042609964235492507396701304308018803178863883156040274426635992923684993786217749359146868390105239344484025786631608005640961017052885303273308385947941410644372112439480091731841573117390071064298027173687566462564559879475289207336555158542990720418915492359587787746118467641731087010732966467209547013128010898552584255318075247246571704191057742237839495012672770727298116615247042565918270914980826700225012892390005578053398240450655057456563654609833922570683156571560133401671366113144134821768683915689734793286692313094688266549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9380bfcb2b33f0c67ed73020eeeb4fe468ad337
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berka.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169505418e70000040300483046022100efb108f7a767c981df6d8e5dd5e504d263345456fc517b65b3f8df432fbee64b022100cce13acc002954f3555e283b5ada4e273b35c471ae635ccc39e55b4ad94bf292007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016950541b570000040300473045022100e54358e07ce6a7c93d8832d95ac35bad929d521fc6b635c32ac7e6fbefdccee302207e8e1d6d7cb62c7ff32ee3c1163ce7f0e9e38eefd43209fd55eec2f224955ee0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004853700cfd543bbd43bae91f7c1e8ac1f91a6118bc048c20590f125c2b0c4d53736e89771b67cc4961edced2a3e246bf2805783cf83c30badc306e15bf207f9e937e34f883932f7a503df3502fdd0aa0818ad729697aee580ad8b45ec99371ca3eae28bee3b54c7e8e2a2aa7ee4a9ca1a3f41a6480e1b99d202275b70f6c7f14bb3e7bbeb1642a5df8f7955987106ac0707e5120d40975dc0e1217a9a2c39bf17e4d213be2b8cabe21a58d0662ab3f897ebe828d8c45124789058a5a8ac87316515563666570092a3808bc51836bd1485a1383dc6b18ca3fb6e65a1ac6ef808a38f7df0fa6921d52cfcc93c25e3b8f29ab4d7916ae68d083bc21220c2336aab4