www.tekloc.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:f7:d5:28:45:9b:3f:44:88:96:fc:b2:d5:4d:ad:9c:b1 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tekloc.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:f7:d5:28:45:9b:3f:44:88:96:fc:b2:d5:4d:ad:9c:b1
Serial Number (int): 271194190160067933077778863111019191704753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:dc:3c:ee:ed:6c:e9:b6:a9:a7:0c:0d:bf:86:02:6b:b1:08:28:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:88:7b:73:87:02:bc:b1:31:61:e1:6e:40:a4:89:80:f9:be:d0:f6
Fingerprint (sha256): 40:b5:dd:93:18:e2:b8:5d:33:8f:70:ae:72:53:7b:f2:76:65:a8:92:a9:68:1c:87:fa:57:d0:ad:f9:24:f6:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tekloc.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tekloc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tekloc.eu
www.tekloc.eu
www.tekloc.net

Other certificates including the domain name tekloc.net

(limited to 100 certificates)
www.tekloc.net
www.tekloc.net
mongoose.tekloc.net
mongoose.tekloc.net
status.vleo.net
status.tekloc.net
mongoose.tekloc.net
status.eurabo.be
memoq.tekloc.net
www.tekloc.net
memoq.tekloc.net
www.tekloc.net
mongoose.tekloc.net
status.tbft.org.uk
www.tekloc.net
status.cs.redwood.com
status.tekloc.net
mongoose.tekloc.net
www.tekloc.net
status.eurabo.be
www.tekloc.net
status.hotel-spider.com
status.cs.redwood.com
status.cs.redwood.com
status.eurabo.be
www.tekloc.net
status.eurabo.be
memoq.tekloc.net
status.eurabo.be
status-mena.obrela.com
status.eurabo.be
mongoose.tekloc.net
www.tekloc.net
www.tekloc.net
memoq.tekloc.net
status.eurabo.be
status.premierforestgroup.com
status.tekloc.net
www.tekloc.net
www.tekloc.net
status.eurabo.be
status.cs.redwood.com
status.eurabo.be
status.tekloc.net
www.tekloc.net
status.eurabo.be

Certificate

The complete raw certificate details for www.tekloc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0pEI21dNwlOOEuO1eRVy
a97IFuo8P8KDe14NSTnGYCXcuSsL3Ohuyn6l+Y0+APCKFrJcJv5okESdKWfHbY/a
LM4gPK+n9gNRv87VZdP0UMeSNm0fbfuUIa0lDyXnGuTIkqwu1h7tMptwDTdyVfhh
Uk8HkRt7aWCA4V0X8k+5n5u6C3Vg0/HVNYpvQYeCMCnofLchDxIv4L6H0QOBJXpo
GwO5GpQWQNTaSmYzBqddgw1rz0eiNGzLduh+1ikQEJEFS9YFFK79e/nTSAntWuo5
RQ61YrMY6BZi0jw7QOHPlQ2g7wLrXVwnJwqIVW2S5BFXxuowKZNZCPuGQaPgy9uA
90e3u4QWqcPJrux3NFnqjGW+4EMGI7hNgqH2TvGpsG8dCHe7Jmhg7+4TsVdIlWTc
Nm5w2qlPN9VxnEYt/uQ2rkn80CdMlGdgDs4aTsp4PG6VTGn3eJjwTuln0/A/C0Un
cx2OssaVcfyRH+jIZ9w9DfxN4KPR19SrbSdtThU0vf/p5k0e7R1JnBaNom63w3jX
5j4ZzniWloEWERdepuXR7jjO3mBT5Xve4dfD6Kg16ERNX/+fSXLT1Z2EWs3VwoUk
dKJerRyck5D7f9B/UgH7u/sYXcnzrPGPWQMGk1YrN0Jk8WZNE6ZbLDoVQvfwxnWn
P1Zl4EYGoIt6p/exdn2YW0sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271194190160067933077778863111019191704753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 18:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 18:16:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tekloc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859036541521777907634360694071403176460724556128726958803152550724320250267178061506415827517481401639339532758512781151458032162861812368644215870467722144385385608006891463136959403912867717275782547882996981717656273725948837990886829635082667308854749992056328688010037383282977388300379426389980530897676263694595712871448967733865900705734053594250798148127237065910107366693617548247789273938374483623469062529099996208883271376762842466454030102655234177540365298392373419015637244538036897316452108747073809124692113712293385449352957377120987740011595250538077670498189454450179995710943820031268440839167301178912537659507037683080600562669751128869527957970015314928587484758288651411640817040121801282277938044793656191565130367643181782942744751311204731879921813140008985070975559814414114455603486295694847476863473989976934508605095651404206262509791861079386627093285028470766634978730976160663197749683641980512691179137322132582239975903107019780721171990794578353591922375758738844774637783035351186874071496354300509921651184035913377255211279092868412203609257008483568741033579868247126915207339541515088677003394105017870684799670870697186115482789255530867642198953936825423357095529794529971523114497497931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fedc3ceeed6ce9b6a9a70c0dbf86026bb1082855
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekloc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekloc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekloc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b4d1e6ad30000040300483046022100e48845e6618db772db3340d5032bdfa90437a247f8fb86874ef9832bcf7810bc02210096c235ac8efa09b51e5a659c1d9364d8ebfccb965ce458af149814f81ebb8c7800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b4d1e6aca0000040300483046022100d464a969fdd76dabcb7a5d7b2816532e91ef2593c194547661fcac7cc3bd2804022100a634036bc9aeacd296d0eb5256b2159b193dc207fb563ee675304890e7ab0800
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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