sandrtest.xyz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:eb:06:bb:26:90:31:47:b8:3e:d0:cd:12:d5:94:49:50:e3 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sandrtest.xyz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:eb:06:bb:26:90:31:47:b8:3e:d0:cd:12:d5:94:49:50:e3Serial Number (int): 341312161131344206171874845252966909825251
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:2b:ed:9b:22:a4:f8:d6:d1:c6:2b:b1:cc:b0:86:a8:f7:38:20:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 33:23:0c:34:8c:49:86:da:71:7e:7d:19:7c:d3:fc:13:b9:eb:3d:30
Fingerprint (sha256): 3e:f0:bd:35:30:70:7a:e2:69:35:3d:bf:79:fc:9e:6f:78:83:bd:66:03:5a:60:f8:fa:d2:9b:0d:ce:b8:51:05
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sandrtest.xyz
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sandrtest.xyz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.sandr-test.xyz
mail.sandrtest.xyz
sandr-test.xyz
sandr-test.xyz.east.u-host.in
sandrtest.xyz
sandrtest.xyz.east.u-host.in
www.sandr-test.xyz
www.sandr-test.xyz.east.u-host.in
www.sandrtest.xyz
www.sandrtest.xyz.east.u-host.in
mail.sandrtest.xyz
sandr-test.xyz
sandr-test.xyz.east.u-host.in
sandrtest.xyz
sandrtest.xyz.east.u-host.in
www.sandr-test.xyz
www.sandr-test.xyz.east.u-host.in
www.sandrtest.xyz
www.sandrtest.xyz.east.u-host.in
Other certificates including the domain name sandrtest.xyz
(limited to 100 certificates)
Certificate
The complete raw certificate details for sandrtest.xyz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgISA+sGuyaQMUe4PtDNEtWUSVDjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDcyMTMwMDBaFw0x OTA3MDYyMTMwMDBaMBgxFjAUBgNVBAMTDXNhbmRydGVzdC54eXowggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMz2RLgAxsyU0AY1nUlvxCBzxY0cSUjwR 3Nfd/V7kFT47peM+ATE4urjysDcmHMuE6F2opgH35CsxDh969pIUfR9LwC1TlHSQ cs/nGBWRPVewO3knoixLIfwrmKHePUFEMdWhIC8FRAiMabQZ+huU3IBSLyXo7EZo AUxlAzaQh5I/qCZFBl0YnPoXoWs8r36eQYwXcDE5b42bwv7OFoDmhbUqpvo4kbML SNZ+93SQwu/bXy8+cQpIBBtG357Lsm/qy+L682PNSQxwduo/rKk7P6gOlllSyK76 mISwdODTUx+3V4RjDpk6Piv+ZD3cRxYfyAqYv9A5vduofkMvtDzPAgMBAAGjggNI MIIDRDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBIr7ZsipPjW0cYrscywhqj3OCA2 MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wgfwGA1UdEQSB9DCB8YITbWFpbC5zYW5kci10ZXN0Lnh5eoISbWFpbC5zYW5k cnRlc3QueHl6gg5zYW5kci10ZXN0Lnh5eoIdc2FuZHItdGVzdC54eXouZWFzdC51 LWhvc3QuaW6CDXNhbmRydGVzdC54eXqCHHNhbmRydGVzdC54eXouZWFzdC51LWhv c3QuaW6CEnd3dy5zYW5kci10ZXN0Lnh5eoIhd3d3LnNhbmRyLXRlc3QueHl6LmVh c3QudS1ob3N0LmlughF3d3cuc2FuZHJ0ZXN0Lnh5eoIgd3d3LnNhbmRydGVzdC54 eXouZWFzdC51LWhvc3QuaW4wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7 pI8okwGd3fHb/gAAAWn57DS6AAAEAwBIMEYCIQCc2UvhqheCy9VMYEI8F7lGijOT xlvOaoSX8UA9O3TmrgIhAMpcSmb9epUYEV70JpdwQiKL0OEn2nJtX8rUqysjqNU2 AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFp+ew2qgAABAMA RzBFAiEAp1QnsVfcJLvYCCiBTKGDJ1uohXZlGN5cjvxQqPIUHD0CIDETk25uzv2+ yeNZd86Tqtya+lFK/V3P4FNDeqanT46oMA0GCSqGSIb3DQEBCwUAA4IBAQCJOhRf g22Eelcmtjszdnz3BKwC29yACRHFWwlF8SwA4ByXDO7ouQcq/T217KMYjD6/8ZJf XWYA+yCa3+UcDJ5ExE/l9ZHkNNgqBApUTleItym03F9BPDAqeG2+skoZgkTJTFKE MbghaDKicBxcJ+ax0GgIDV4QIIXYgmZql4g/qy6a5TUkesZpoVOu+yGMpI51a9xl XPUxo1ctdPpbT13HvqESpPJGnGuKxXf8ZFvN9sPkg3F05tuU/rVzMRXLc5dblqLP x4i0N/wsN6xlXPNhcTcRvAgAdj2U46zffuVbEqmHNrU3r7xh3xp3urWD19G3dffh YToZXUhXOLPEe+sl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozM9kS4AMbMlNAGNZ1Jb 8Qgc8WNHElI8EdzX3f1e5BU+O6XjPgExOLq48rA3JhzLhOhdqKYB9+QrMQ4fevaS FH0fS8AtU5R0kHLP5xgVkT1XsDt5J6IsSyH8K5ih3j1BRDHVoSAvBUQIjGm0Gfob lNyAUi8l6OxGaAFMZQM2kIeSP6gmRQZdGJz6F6FrPK9+nkGMF3AxOW+Nm8L+zhaA 5oW1Kqb6OJGzC0jWfvd0kMLv218vPnEKSAQbRt+ey7Jv6svi+vNjzUkMcHbqP6yp Oz+oDpZZUsiu+piEsHTg01Mft1eEYw6ZOj4r/mQ93EcWH8gKmL/QOb3bqH5DL7Q8 zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341312161131344206171874845252966909825251 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 21:30:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 21:30:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandrtest.xyz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20602111340037217639822825738780154269281834691915975629971940302040686763890871813546852359030202834022335132407896396293608570880806237971291758645985360579644697260888770425355948842152648005250871425059488866179703442166540658949966768798009777158556565246652327225852251854668622066868147116824277871683534669464151523714821925867918924245168141783721837345314267249375353172525101288297037848387755210142986789598120803213646342077318515309322532840285479520952174845988402868636335898514876596487902103129304900883565826959148214114644519823476507056402996749097828132564519657730926435791093742230204436462799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 122bed9b22a4f8d6d1c62bb1ccb086a8f7382036 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandr-test.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandrtest.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandr-test.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandrtest.xyz.east.u-host.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169f9ec34ba00000403004830460221009cd94be1aa1782cbd54c60423c17b9468a3393c65bce6a8497f1403d3b74e6ae022100ca5c4a66fd7a9518115ef426977042228bd0e127da726d5fcad4ab2b23a8d536007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f9ec36aa0000040300473045022100a75427b157dc24bbd80828814ca183275ba885766518de5c8efc50a8f2141c3d02203113936e6ecefdbec9e35977ce93aadc9afa514afd5dcfe053437aa6a74f8ea8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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