ams1p2.hostingprovider.nu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:98:1a:c0:79:e5:88:38:c6:30:fa:a6:5b:3a:f2:b6:fd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ams1p2.hostingprovider.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:98:1a:c0:79:e5:88:38:c6:30:fa:a6:5b:3a:f2:b6:fd
Serial Number (int): 307136876521644411476779385909982281250557
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:95:e2:80:45:57:79:51:3b:e7:92:e4:7f:ae:fb:1a:99:a2:a3:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:2a:17:39:3c:2d:8d:81:b7:92:a8:3a:86:89:79:58:68:77:c0:b2
Fingerprint (sha256): 33:e2:c8:bd:27:82:c5:e0:21:1b:3f:5f:ba:e5:22:bf:f7:c3:7b:41:d5:2e:3c:0a:59:f2:5c:c7:4d:19:59:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ams1p2.hostingprovider.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams1p2.hostingprovider.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ams1p2.hostingprovider.nu

Other certificates including the domain name hostingprovider.nu

(limited to 100 certificates)
ams1p1.hostingprovider.nu
ams1p1.hostingprovider.nu
cdn.hostingprovider.nu
hostingprovider.nu
support.akzenta.ch
rtm1p5.hostingprovider.nu
support.vpurple.com
rtm1s2.hostingprovider.nu
support.akzenta.ch
ams1p2.hostingprovider.nu
faq.liverpoolfc.com
support.reflektis.nl
rtm1p4.hostingprovider.nu
ams1p2.hostingprovider.nu
help.riaki.com
cdn.hostingprovider.nu
rtm2b3.hostingprovider.nu
support.smartservices.farm
ams1p1.hostingprovider.nu
ams1p2.hostingprovider.nu
faq.lfcstage.com
rtm2b3.hostingprovider.nu
support.akzenta.ch
ams1s1.hostingprovider.nu
rtm2b3.hostingprovider.nu
ams1s1.hostingprovider.nu
sni.cloudflaressl.com
ams1p2.hostingprovider.nu
rtm2b3.hostingprovider.nu
help.pingproxies.com
ams1s1.hostingprovider.nu
ams1s1.hostingprovider.nu
ams1p1.hostingprovider.nu
ams1s1.hostingprovider.nu
supportocobo.digi.it
rtm1s2.hostingprovider.nu
support.akzenta.ch
ams1p2.hostingprovider.nu
account.hostingprovider.nu
ams1p1.hostingprovider.nu
ams1p2.hostingprovider.nu
account.hostingprovider.nu
support.akzenta.ch
ams1p1.hostingprovider.nu
support.setupservices.dev
support.autochecksystems.nl
soporte.tresmastres.com
desk.hmpartners.fr
support.hostingprovider.nu
ams1p1.hostingprovider.nu
rtm1s2.hostingprovider.nu
rtm2b3.hostingprovider.nu
helpdesk.bwap.ch
ams1s1.hostingprovider.nu

Certificate

The complete raw certificate details for ams1p2.hostingprovider.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307136876521644411476779385909982281250557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 21:10:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 21:10:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams1p2.hostingprovider.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767958828157534479077875956530405307570339529101954968709540865188901512110313974607702320874625562971968914576731875842445230782884216456606116542247771873711330774947291500039873405756102544053505538028322686012571911729492157160804795573952404326113330782439196017459852870520637811870781115275960907910443098514786092460353370904565362750322411608667945776011530301891061851824267188844127186475027002229154291069200165999047752760749219304167910544484443219601688279770469099671589121372630758598185161307357103118618171160355644033215385381896614904536625040308594133175197591509696426961193868576824375912247382017249510221910461806297265471525994350940999216008937254833605282011866766663865044430035298640296723142108149577738924419099764675311311690698559978913694124575740590669979516423218423768656795481559978963004215258437756278032021896523039894915995663598868484314837044538647141037511991966164847889779962145460018763743944612072559755884488483439034658083451771499657000398229777941804854203863839249606525560119108204918996062066050214109896910765172527081887293404900522342122896798536572741430068963866457453653347031130783599622053055949718215619830633193512600352733490333595299878304263586605089694817988579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f795e280455779513be792e47faefb1a99a2a3a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams1p2.hostingprovider.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cfe548b5f0000040300463044022050844af71d15d6a63fd8c40e164c3d5b67b26a0cee19746ce22f6a629e0a267d022048b8d543922fc39e41fe986bd9f66167a9474373dfee2c9e032ce31b875d2bc8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cfe548b7f0000040300473045022100ef8a2e977e9938adaa552e4b67637ca03310525845a0145ddcd328f3e8d5fd930220735d67cde9562e1bfbe2e2f2133f07d7ecfa80ae8bb276ae5e98b5ca52927fcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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