matrix.6clones.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:97:2e:e2:30:98:ad:22:47:b8:1f:d1:6a:61:d1:c7:70 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matrix.6clones.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:97:2e:e2:30:98:ad:22:47:b8:1f:d1:6a:61:d1:c7:70
Serial Number (int): 291482662945017112877033339828472766383984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:a8:0d:c1:ec:3c:f9:38:31:37:73:00:24:c3:aa:d6:66:4d:62:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:5f:b8:3f:be:62:51:e4:70:e4:aa:bb:86:ad:1b:be:76:e9:29:d0
Fingerprint (sha256): 54:60:0c:04:aa:75:9e:17:1d:91:ac:8d:66:e1:c9:4f:99:a8:b7:ba:87:74:ed:0b:32:8d:5f:9c:96:ac:be:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matrix.6clones.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matrix.6clones.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

converser.eu
matrix.6clones.net
www.converser.eu

Other certificates including the domain name 6clones.net

(limited to 100 certificates)
6clones.fr
6clones.com
6clones.fr
openpgpkey.6clones.net
matrix.6clones.net
6clones.fr
6clones.com
web1.wildfire.6clones.net
6clones.fr
cloud.6clones.net
6clones.fr
openpgpkey.6clones.net
matrix.6clones.net
6clones.fr
6clones.fr
converser.eu
cloud.6clones.net
mail1.6clones.net
6clones.com
6clones.fr
matrix.6clones.net
6clones.fr
openpgpkey.6clones.net
web1.wildfire.6clones.net
cdav.6clones.net
mail1.6clones.net
matrix.6clones.net
6clones.fr
alertes.6clones.net
matrix.6clones.net
mutu1.6clones.net
6clones.fr
openpgpkey.6clones.net
6clones.com
web1.wildfire.6clones.net
6clones.fr
openpgpkey.6clones.net
6clones.com
mail1.6clones.net
cloud.6clones.net
matrix.6clones.net
openpgpkey.6clones.net
mail1.6clones.net
converser.eu
cloud.6clones.net
mutu1.6clones.net
6clones.fr
matrix.6clones.net
converser.eu
matrix.6clones.net
6clones.fr
mutu1.6clones.net
mail1.6clones.net
cloud.6clones.net
openpgpkey.6clones.net
mutu1.6clones.net
6clones.fr
matrix.6clones.net
cloud.6clones.net
mutu1.6clones.net
6clones.fr
alertes.6clones.net
cloud.6clones.net
mail1.6clones.net
matrix.6clones.net
mutu1.6clones.net
cloud.6clones.net
mail1.6clones.net
matrix.6clones.net
6clones.fr
openpgpkey.6clones.net
6clones.fr
6clones.com
mutu1.6clones.net
6clones.fr
openpgpkey.6clones.net
cloud.6clones.net
alertes.6clones.net
6clones.fr
converser.eu
openpgpkey.6clones.net
mail1.6clones.net
openpgpkey.6clones.net
matrix.6clones.net
autoconf.6clones.net
mutu1.6clones.net
6clones.fr

Certificate

The complete raw certificate details for matrix.6clones.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291482662945017112877033339828472766383984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 16:36:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 16:36:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matrix.6clones.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768611016644333301590435610003181874509959191523274938675594963376299058257976709577651371886345034495471241686397693843599849009853519332437513641710597118192240434380793671801589084714699527659716591183442951360283606112857998110960805918367943272133531451182971220052346496778138710187022663515400148179393064676017103983378491625483139988735408705060251137325937723508844548705703732053941360605543619284933943726577576948933313234388638398641409125602570812656824815774479732384024068054885909033826444155612904250774816903851567553903814564148413374982563786243695136096218664604312397257018619130783065907945686536464836520139900864993576704350011556692155860502388291378229178421650466557795063164085078791899708927224814125859992427543559360936563418660283694611140376318409589903908913553504233373422978534178361136846594303804361807881130156069045092153495505930895454767662279491703572604286066857068367510299752664718362316455610545915500550387332634881494035833328371349103964199536713746345016524418175441019789564516220352744093621704817607152247507402890312268328400183932055592345401624413604403722207612985687118649694428978134468934178281273920905943407791735941157514572292441461075820103212489223342444049787241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a80dc1ec3cf9383137730024c3aad6664d6246
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'converser.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrix.6clones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.converser.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a31855bfe0000040300483046022100fae18509a02728decaf598ad375f4730a77eb686adb20b7d5913c282c0334977022100a7ed7599e2321b0885fe014f6a3553bb81afff4a5862e2cc4aa90762290e133d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a31855e2b0000040300473045022100f86bda24f8cfaffba9fb3a9d3000690f049b0d905b97d2200d3f0aaac46bc8f9022006be0062ab2f01e2ad003c9f3d2b22bdcfb9918537e56117ec92885673042117
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004816dbdc2d32a6f05ef6d51d16c6352711fb3c3975eda05eb35c6601bb69587141e4074533058bde3ddc44b40f4ead71af5b254ef6c2e344d2978ce730e70dfdf1bb0a5a1066bd2078767ef484ea7aed1859ef112404fa719c71ea09b8b4d42094244097debbf51587dcac0ac29425c559e85b73b9431d8e5b3270c8491fe347dc3724a738e862ea28135c065830870707c2a6b0d9cc428e97d4b221db5451165b229921b5b04f9b6a182528f7ee52b682770bab15f492c8bd57cca283dcf7bff24b6075271449aafccd1b639c4e821b0699530cf6ef8910294fa11517a2d7cd0be23c68f6012b92960601b4725ea48d74b54014a540c4ff47513e579711144c