karissa.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:b0:5d:ae:03:69:8e:fe:f7:60:76:c8:c1:d2:fc:fc:9d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=karissa.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:b0:5d:ae:03:69:8e:fe:f7:60:76:c8:c1:d2:fc:fc:9d
Serial Number (int): 342558491662739707497230835143193875250333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:51:81:8c:52:b5:67:f3:74:cf:04:b6:5a:e9:89:9b:77:84:7e:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:f4:60:56:df:89:d1:17:0b:4f:8f:e9:e5:1b:75:b7:2a:af:d3:c0
Fingerprint (sha256): 2c:1a:da:52:ac:d5:9d:a8:3c:cf:e6:b6:15:2a:0f:a3:77:31:40:71:9a:5c:d7:b6:26:11:58:ad:82:57:90:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate karissa.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karissa.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karissa.net

Other certificates including the domain name karissa.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for karissa.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtqzLXnx9K1BXOPFo9JsB
mJ0/bXDK3mYMmONoUMAmIi+0TrYezwAtuJ7SC1OWQahE2UUMnF/9FxGYRThnc+bE
yPehKFsEAPIaSMfpUvlQxrIAUmJaVPJCLUIUfk/ciRqzS2v0xYfSUBNExcVl/qSH
v8wRE0y2r1rUFAoqyxoiJ4rMzN/yvs3xNHwIuusSC1Kspn6X23/H2FvXZtoPCNIV
HY0CwnltAqfK9MCftpZ3s1iOqdiLaX2C4PBS99evmH3H7CPqLjDliBmc5kSEzPF+
qmMvDmEtBE2lj52HKMl2NtdM59Wdou5dsWP/uHHgsPlFzuhpxvVrgvkCbWWgBmQZ
qZ3eUdksinmrFntcwhcE4ZxhSOz6tDNIKa9eYMxTmIwrEQEObbHp6nuWU6UNQia5
oIsy9N23+SHtCnlL4/30lzeFMZDPsnHnYdiHRPPzf0m3mKqbAVP9Yl9mMdyNAbnS
C3rV2Gbe0zepDVxV41DK8nxRkszqKetHZOtoAvfV3gWlOuEpeTmXrrztbYYatZb9
5Gqm3Tgj4sCBVwFA+DMv/nNiBe0qTOxpaoWnUF0OQQB1LPT6Owaq3lLiBm04tAJP
RuqcqmjEdUMB3BzVMU7kHb8QyX5oPa0U4PCzy37m6irO1SIPUbtiPScJJ5qc0cw2
yTMjW34ybhOcut6sZ4XGl88CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342558491662739707497230835143193875250333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 14:07:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 14:07:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karissa.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745248891050632753011225017568749815418732301202297114715440159814613651502343379483221360581639203626929270822388861555037118972133658235869994876102765675581724569881154895973516097731225049303293360314846334902129070323816987469199409897305041475504430963160455278855537140054896629825753339094862370050467315116996499753263429375682851561052759083709071451514273801373231154469285465146653723159870917271090679741386604049872000442131770261050543724669546241595301621205160921563378655429690255982128711539865730460691780888880860139228772970935198869525091646095147251508270830988011775033182465027954293880862200357993837269011203678894125800085613663527106757960849342343301576893177982072640535639122237894304161358979853234502013410629223055924145543965228518986605557988547054695442809513149061876510641325196800948196263187010510858939389737696431683575823547314122971068453469249644242670273035441680793003827424255018718989202616844221521050799939819094760938542828360207465802663349736640982191576106255078903781718910191375363552110203290630530092859111692413084589610426935646076217520935550686979967335296881750241188077121984315293714492127285218540878465357937995878083503987904352534574892327980734711247648757711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff51818c52b567f374cf04b65ae9899b77847ef5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karissa.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f198ca98f000004030047304502202619492755435072ad6ed72c370b5847bd6c5842a0d11e4b88e4fdfc6d932ab9022100961297464f11a2cb648d991f1fd924f294105342614a968bc945788d0be588380077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f198ca9c70000040300483046022100a551719ffb43f64fbfa5e86fc5c9d5c19ec9d4da6aba8634ab1010089346812b022100fa6070550ba82d7b68436093983a3d897c113ccde9296a256f015dc21ec01f7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005688a360c1e1c38d4dac8e4b6bd69065fbb8c0bb6dbeb85bc9f113c067d5845bd6fb4fd60708e5091df553b56485317c02c2b15c98f6a45afd988a4eb65d93947eaa18f0612825e58d93c61cef3aebed510649ec4205be2ffb74d41e2d2950594d6393fccd55258c5b7f1cdc851a38b3342c0390f6e9bc1006bfef29b5b71c9792dcaceba76776ef3a41840e95917541b340d08dcfd2b870c90871374237606b961c62cbd27cc8ee79e222d6d0e1c78bd85647f6c2f0a1f5533600e53678921f7c40eb9e11b6ec9d9fcd5fc31f5df17ebe8713b8c96f36d6141f6e7fb8d9413176b4a922bf94d538909f417997f61737a09ea303b9a20996abb2706e31653300