krugers.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:56:6f:e3:8d:0c:59:92:e1:c7:70:ce:08:dd:47:0f:4a was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=krugers.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:56:6f:e3:8d:0c:59:92:e1:c7:70:ce:08:dd:47:0f:4a
Serial Number (int): 309431566099003836470730667255792199470922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:c8:cb:31:87:0d:f3:bb:16:12:5f:89:b2:ed:c7:cc:5c:b8:dd:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:65:e1:1d:5b:f1:f4:d7:3e:47:36:c1:4b:c7:01:cf:34:d3:7c:dd
Fingerprint (sha256): 29:b3:ae:b2:0a:c6:72:eb:8f:31:75:63:bd:6e:ab:82:8a:2e:e3:ca:5e:7b:c5:34:ee:e3:36:ea:1e:8b:30:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate krugers.net

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for krugers.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ka9fox.com
autodiscover.krugers.net
cpanel.ka9fox.com
cpanel.krugers.net
cpcalendars.ka9fox.com
cpcalendars.krugers.net
cpcontacts.ka9fox.com
cpcontacts.krugers.net
ka9fox.com
ka9fox.qth.com
krugers.ka9fox.com
krugers.net
mail.krugers.net
webdisk.ka9fox.com
webdisk.krugers.net
webmail.ka9fox.com
webmail.krugers.net
www.ka9fox.com
www.ka9fox.qth.com
www.krugers.ka9fox.com
www.krugers.net

Other certificates including the domain name krugers.net

(limited to 100 certificates)
krugers.net
krugers.net
krugers.net
krugers.net
www.krugers.net
krugers.net
krugers.net
krugers.net
krugers.net
krugers.net
krugers.net
krugers.net
mail.krugerdevelopment.com
krugers.net
krugers.net
krugers.net
krugers.net
krugers.net
www.krugerdevelopment.com

Certificate

The complete raw certificate details for krugers.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplrnul55prW7Vnl2WBQB
o3uYNViJMtWofnb0wbUsbD/8eIuBiWqpG54K5L1E7uqhTXSRgB7ByY9b1eiZMFiL
5DjgAxNb1Ni8ZlNPlkWueNqJG2nzB+kPytBhpfdBeWgPIgf/F8oe8MP+ZnZW5V9N
SgdEjyembYPxkoN7f80f0rTyrfieSxbBtv8EXd+veRHdAJzTkc+8D1QUAgyHgwXj
SIQuhc0Bywh2jCNZpfWcYGQPZ57no7G+pF+LAvOtab7Ce4s5NxoCRhhfPjVjta5v
V8a+xB0VffxNqDLizG+pb2keWCH7pTKnGYmtlta1DseDcInFgdstz3kDh8HTj2xL
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309431566099003836470730667255792199470922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 09:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 09:56:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krugers.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21000385643055701051751231369453214113684411379578585251716027733891901781362135613614356149698990797713411136369291911199971280843406960415251047508070153389781926106169048561757088334458051447102065436969188397965994887947692364440988597831503541567946033747828864160515573023408611380031774492008530417748965264853801310403089798660047817422602088380210877637608647150872697891210719880264851222630645924904648447123877662691662579743425206990146935290422259215883787074750605499322882233296674663577448896136108255965244310021939776277901119609138087795816343835763460579006498754579518753408594855053941675936599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfc8cb31870df3bb16125f89b2edc7cc5cb8dd5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka9fox.qth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugers.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.krugers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ka9fox.qth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugers.ka9fox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugers.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017014fea0350000040300483046022100995da95365360a3ffb6085a67be3af31c320868f9da7d13a2f0080d296e892ee022100c0315b27dd6119ac7874a384f367dc9fa714a8f8b1895983684be4ef459a313400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017014fea0600000040300483046022100d99b53b1467f9a21007bfba73c27b76d6980d80a7a60b32ccc53ffb9988321bd022100d916cc522797bf9838fa2cc115674a9d15944cb88b9afa532bafaa5b3a4175fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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