saetarsyndir.is
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4c:bb:75:33:33:57:0c:aa:2e:35:ae:dc:97:43:ee:90:06 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=saetarsyndir.is
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:bb:75:33:33:57:0c:aa:2e:35:ae:dc:97:43:ee:90:06Serial Number (int): 287447491853686757587235404482767544553478
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:ec:68:fe:b5:43:e3:e9:c5:bd:84:e6:bb:7b:ae:9a:7f:21:b3:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4b:55:e4:82:b1:b6:38:51:09:f3:c5:4f:95:04:f6:68:9f:d0:a8:4d
Fingerprint (sha256): 3f:0b:5d:12:f9:df:eb:58:34:33:39:e0:a0:c9:f7:38:98:ce:7a:d2:f7:e2:d4:44:0b:4f:62:9b:4a:d9:fb:f9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate saetarsyndir.is
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saetarsyndir.is
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saetarsyndir.is
www.saetarsyndir.is
www.saetarsyndir.is
Other certificates including the domain name saetarsyndir.is
(limited to 100 certificates)
Certificate
The complete raw certificate details for saetarsyndir.is in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgISA0y7dTMzVwyqLjWu3JdD7pAGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTIwNTMwNTlaFw0x OTEyMTEwNTMwNTlaMBoxGDAWBgNVBAMTD3NhZXRhcnN5bmRpci5pczCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANhh2VzRj5tk8b9JHHDWuzgX4Co/IjSO l9ucWaMdMwl0DONStGRu7m85bT6prnBZFggf8jcCuNQkdrd8QyobUJnAJrLIYL/b rHh3I1wRdLwhOGIX/lYU+SCV0t9OZsir8E70uMEaZPiYDkFEveO/+JhlpIxzACyT 6rqu0a19H36RbXB59inCTzEMToCfghKQoxQc/9+//7gjxNGsx0At3yekX/Anq8lk hqSX7GcM9xLKtUtuMFvSkyBSWPAslbRn+vkzjbXR+M10kctv0rdemquoFp08LjXo VkCZYjmbzp6pzqIApXkiWRkmhh2o+u5LhcnfiU5Nd977fcFX7M01RoQ1s8HjH53w ikQFSS7Q1wxqVoAszW4yvaGBXvDHGEmmdrL5ctcGPkjRDOYL4GRw1UOAwPotoRLA krCrL/ZuwTjA97PSH2mPfki9b68RfjI5hRAiT5sfIHygZ8ftsF5LQVRpl+h2hAl+ nYx+YvKHibpbchKxweoFrA01kbdlRF3T7GgGEk9CYNj/RytTrmAwWqSBFVM9JcUt U8i5KllfoBXJwZw/pRf1e+Bl9RxLH5SDEkwPjBf8e0hUuw3hs/du469Y5SfKLFwp RckUmAoA35FITYRPLie+B+zs5yKZg59lxsuQjeNbhWmo5yNfsPLEjjwmlv0+j5V/ T/uhnfCetcw5AgMBAAGjggJ4MIICdDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOLs aP61Q+Ppxb2E5rt7rpp/IbNlMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPc2FldGFyc3luZGlyLmlz ghN3d3cuc2FldGFyc3luZGlyLmlzMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n /nSI+6SPKJMBnd3x2/4AAAFtJCr8ggAABAMARzBFAiEA6wnY/DRvu3KXlju0ZVzu OeoDpoDaZyD0FAIpd7/Z5FcCIDg4ORv08JhhD1/01pdbwmRqo+4cHY0qcnKTbpwk mHNOAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtJCr8ogAA BAMARjBEAiB+UHKe7TmESD6gGPx/3KtT7Z3tWijcntR/eL0zKXvz8gIgQWhBZQ1T 8R7EGsOyuDqFWOmPfEyBSfLit5zLTbEAj6wwDQYJKoZIhvcNAQELBQADggEBAAAp ZULmLRsJ55qZKpwzYnKaDdIAtwdRirnTcxjeQJbpbGDflGcl0VxrqgYp+nf+Yw4Z SpUwhB9LAz6tcVNq/xqXlJxOQB+C5rQqfbRVkCNI0AXTzdTcU9lEAxAzmtfNFqnk N2QPUpcGd0RSkKrjsY2sioppuZZDoKfVkgdCnX81ueD+UpI9KlsPBolBWreTS8GC Ed2XHMPbKF1tUancgS4rngYYjnMP+KnEYxxrZei8dlL2wJvIA71TvPDad3xrywpL rylDD6NcTfguMVzgNWfs1SFdyvBbxoBpOiBg4R6sU5yXd/Fq/Z+Af9h5JDcRlQZ4 7+5wLZJkRrKgW7dAsqE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2GHZXNGPm2Txv0kccNa7 OBfgKj8iNI6X25xZox0zCXQM41K0ZG7ubzltPqmucFkWCB/yNwK41CR2t3xDKhtQ mcAmsshgv9useHcjXBF0vCE4Yhf+VhT5IJXS305myKvwTvS4wRpk+JgOQUS947/4 mGWkjHMALJPquq7RrX0ffpFtcHn2KcJPMQxOgJ+CEpCjFBz/37//uCPE0azHQC3f J6Rf8CeryWSGpJfsZwz3Esq1S24wW9KTIFJY8CyVtGf6+TONtdH4zXSRy2/St16a q6gWnTwuNehWQJliOZvOnqnOogCleSJZGSaGHaj67kuFyd+JTk133vt9wVfszTVG hDWzweMfnfCKRAVJLtDXDGpWgCzNbjK9oYFe8McYSaZ2svly1wY+SNEM5gvgZHDV Q4DA+i2hEsCSsKsv9m7BOMD3s9IfaY9+SL1vrxF+MjmFECJPmx8gfKBnx+2wXktB VGmX6HaECX6djH5i8oeJultyErHB6gWsDTWRt2VEXdPsaAYST0Jg2P9HK1OuYDBa pIEVUz0lxS1TyLkqWV+gFcnBnD+lF/V74GX1HEsflIMSTA+MF/x7SFS7DeGz927j r1jlJ8osXClFyRSYCgDfkUhNhE8uJ74H7OznIpmDn2XGy5CN41uFaajnI1+w8sSO PCaW/T6PlX9P+6Gd8J61zDkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287447491853686757587235404482767544553478 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 05:30:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 05:30:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saetarsyndir.is' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882762452240735838787735861409581667753821514118052734994422675103654345190522856193797403612806380655737557291688471268554680397430578009350217950731921764845757725183872719890544917011467174856339327134059193992673278567775282107821572387531036246051734962866812813760607803020350765237793257037373771275215389441682916758661382870634176546754718269237433420343761542904978336900991425457665659516464469671060221225022745349972938139815454527456307411520323554046324191404782164060352284067623847221718818499458996739997496808457909142728872605319722964158129001558531144542237569879020693400270155735227252227982159771137666331087260742340292371118361567548617380957210000700686186920371012577395726805615355920844935081402422486724859624404774628843424282075872934435204099754014755970468735675524452119690965042318764965666105357432513769501119526970653236497505358315149088965863171132655465234840253852750769765252800310506792684588713228772854124180123307752856417837272357928423929268911566328047838286568322360933591747911176918982254872818021978555925543905183538049607823557427807517928903030869699561658728097700976891563442684593350021142906371310977587207076760645157639498238914945230844913203080773908715185483664441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2ec68feb543e3e9c5bd84e6bb7bae9a7f21b365 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saetarsyndir.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saetarsyndir.is' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d242afc820000040300473045022100eb09d8fc346fbb7297963bb4655cee39ea03a680da6720f414022977bfd9e45702203838391bf4f098610f5ff4d6975bc2646aa3ee1c1d8d2a7272936e9c2498734e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d242afca2000004030046304402207e50729eed3984483ea018fc7fdcab53ed9ded5a28dc9ed47f78bd33297bf3f20220416841650d53f11ec41ac3b2b83a8558e98f7c4c8149f2e2b79ccb4db1008fac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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