project.ifak.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:12:84:34:0a:70:04:10:9f:38:a5:8b:4a:a2:2f:09:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=project.ifak.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:12:84:34:0a:70:04:10:9f:38:a5:8b:4a:a2:2f:09:07
Serial Number (int): 339626414729718289869734845152335647148295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:14:f9:82:f9:ec:8e:02:2e:36:61:3d:c5:b7:3e:c6:6e:38:a7:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:4b:03:cb:15:cd:64:2a:1a:6a:47:e4:f4:85:a0:6d:ce:62:b6:e5
Fingerprint (sha256): 40:f0:84:36:a5:a4:8e:45:b9:81:6c:a0:be:c1:8f:9c:0f:9a:43:3f:7f:c9:d2:9e:a0:b2:68:86:b1:83:e0:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate project.ifak.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for project.ifak.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

project.ifak.eu

Other certificates including the domain name ifak.eu

(limited to 100 certificates)
service.ifak.eu
ifak.eu
www.ifak-ts.com
project.ifak.eu
simba.ifak.eu
project.ifak.eu
exchange.ifak.eu
exchange.ifak.eu
project.ifak.eu
ifak.eu
project.ifak.eu
mx.ifak.eu
exchange.ifak.eu
ifak.eu
zebra.ifak.eu
www.ifak-ts.com
nextcloud.ifak.eu
zebra.ifak.eu
fw01.ifak.eu
service.ifak.eu
fast.ifak.eu
project.ifak.eu
project.ifak.eu
service.ifak.eu
exchange.ifak.eu
zebra.ifak.eu
exchange.ifak.eu
nextcloud.ifak.eu
service.ifak.eu
service.ifak.eu
mail.ifak.eu
www.ifak.eu
www.ifak.eu
nextcloud.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
fw01.ifak.eu
project.ifak.eu
mail.ifak.eu
mx.ifak.eu
project.ifak.eu
www.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
project.ifak.eu
zebra.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
mx.ifak.eu
service.ifak.eu
zebra.ifak.eu
project.ifak.eu
www.ifak-ts.com
zebra.ifak.eu
exchange.ifak.eu
service.ifak.eu
service.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
service.ifak.eu
ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
service.ifak.eu
www.ifak-ts.com
service.ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
mx.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
www.ifak.eu
ifak.eu
project.ifak.eu
project.ifak.eu
ifak.eu
www.ifak-ts.com
service.ifak.eu
*.ifak.eu
www.ifak.eu
project.ifak.eu
zebra.ifak.eu

Certificate

The complete raw certificate details for project.ifak.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339626414729718289869734845152335647148295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 03:47:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 03:47:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'project.ifak.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748763892592818615735697225218500461899782648146949840385727041942695162898254784405809187595267598747912892549477253014939411960136253739445181931532863599051024144696446859124600803710690879517447706906687738973077668935979594583743063280235884829183238626858981908051434373434666626105383267023072286415698773437968790200939439550963817450259986871458766118525573748368144092047506596176443031286043576830772058113740272607141647019380603354533142130732363921620415434445680792877889014131403344332039523166501345688098830515738571498751924744496278874891657510940870261185457619363776183354904317380030932668096762712990992054912700962404800364987024814455916219030059570467784372878449636932190248960568017334394609996361323312180509469176031358103482471136748933520120799608567765779929549790710931578900254817285427615055219608045248222079541013025275916101175145191732066437998295111845197719834742576383936792186624136049807885962957474164594307846533228046832978747359057503432598378406891718423064391291545216279344059724808594151614870761455536186954831813212865314937026386829089455562150367969654656313065916174964238525343260543239731259820109682799589612427241975470807506145187076096283877626157779822851646135068187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd14f982f9ec8e022e36613dc5b73ec66e38a7ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.ifak.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016694f2dff80000040300473045022029106c231362f58edee97e646c09cc32fa0c352fbcf9db25907352fc2cefc084022100bba802c6523c69335cb8911a6b17168dbce847851777409436a33262f5f6d4d300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016694f2dff90000040300473045022020a4ffddf2bbc5a618e0ca7a4c17aa94f35f2d805e3e3fe81f42183f41591301022100db8fd806ddf1dcee81b5e6b0340d2e8bf98ea7ae6f7fe741b8187e736b4a3f90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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