karnott.farm

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:b0:90:92:dc:20:99:5d:67:42:01:3e:cd:8c:6e:0f:10 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=karnott.farm

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:b0:90:92:dc:20:99:5d:67:42:01:3e:cd:8c:6e:0f:10
Serial Number (int): 274162000168033324110157711362198552317712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:7a:d3:f5:16:4c:8d:5e:20:cd:42:45:66:4b:49:07:59:48:b7:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:2e:b6:e9:a7:b2:4a:ec:60:90:3b:16:8c:4c:31:a9:53:17:50:b7
Fingerprint (sha256): 55:84:05:7c:52:08:71:b7:3f:d8:d1:53:73:2b:79:55:09:71:70:bc:7e:12:b5:ac:92:8e:ca:c1:17:66:00:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate karnott.farm

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karnott.farm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connectagri.fr
karnott.farm
wp.connectagri.fr
www.connectagri.fr
www.karnott.farm

Other certificates including the domain name karnott.farm

(limited to 100 certificates)
karnott.fr
www.karnott.farm
www.connectagri.fr
www.connectagri.fr
karnott.fr
karnott.fr
karnott.fr
www.connectagri.fr
karnott.farm
karnott.fr
www.karnott.farm
karnott.fr
connectagri.fr
karnott.fr
karnott.farm
karnott.fr
karnott.fr
connectagri.fr

Certificate

The complete raw certificate details for karnott.farm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAyWwkJLcIJldZ0IBPs2Mbg8QMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTgwMjQzNTRaFw0y
MDAzMTcwMjQzNTRaMBcxFTATBgNVBAMTDGthcm5vdHQuZmFybTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALtkmWcifRlsX75LV7P6pRd6ttJVFFJZ4jvv
ccE6OYlQcowBwPeZ4YP+oJZy+wLaEiItZnVUTfL1DE+6VlgLXQfVb117jTJn/e/g
17oITovF0LgeAUV2V3CMC8sY1JwBgFxxYxg6hEQky91GmXAMW7JldSR7wbT/TWsh
ER7HCzCrbQdqZQqqDiGsCmaCbiTimrGLKM431lnLx8GOoQ2EQ4bCdZFRYAqmSZ+h
NrKWwtJA/qHCMFgdScZeqVTWjKA68MHrmlU64FemL4jnqf64HJui1zzL90Vqq5RC
JjAFA8FBmf8+4ptWokBIukCiApVZ9D3FEiL6fBSb+BfoNQ9sJqECAwEAAaOCAqow
ggKmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU2XrT9RZMjV4gzUJFZktJB1lItyQw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzBgBgNVHREEWTBXgg5jb25uZWN0YWdyaS5mcoIMa2Fybm90dC5mYXJtghF3cC5j
b25uZWN0YWdyaS5mcoISd3d3LmNvbm5lY3RhZ3JpLmZyghB3d3cua2Fybm90dC5m
YXJtMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFv
FxrfoQAABAMARzBFAiEApat5Pl+fT98ZBjyZjar0vGSWuuMamkHDoaRgqDBuI9AC
ICWK2d7DKpkIwslgdqUstrAUgD1EDMZCySsbcxd97pfRAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvFxrf6QAABAMARzBFAiEA7QByfN73pV6o
IfOXZ0v7SmYrauwqyCj5/K2yuQWS1QkCICi0Fx73vvvLw3lYjJvLk33N4pF2Apmt
LVzP+gJx2ru4MA0GCSqGSIb3DQEBCwUAA4IBAQB3q06ufeMD0D1iMY7pLrc//dZY
IGW+DfsutjrjZQ24Vi6I3uLbzsjxhzPSawFyGwapoZ1bthL055mD+1BnhhxT6Bfo
+UZ7MoV9luelfQwu5iTQD/ZkvJSl6znpk/FIitVyzWNC/hvn7pz5dI/f/SHMTEPH
4wKHm/MBBg033xluC28yc91Cyvo0rn/lmmY98Ywg1zgnIdnuS9SF+TyMvPCTgdEb
LfdLgUw7giuVF8g+ndQK3mkSP7JkHq4yzLtrUf4b1c2SNcrNzqdVmC3oWy/IOlXH
y7WIozEe9SU6l+LZeX74VYoPzvx0wnhARO28uX6eZ8MopLhj6Lqpk4sE0PNJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2SZZyJ9GWxfvktXs/ql
F3q20lUUUlniO+9xwTo5iVByjAHA95nhg/6glnL7AtoSIi1mdVRN8vUMT7pWWAtd
B9VvXXuNMmf97+DXughOi8XQuB4BRXZXcIwLyxjUnAGAXHFjGDqERCTL3UaZcAxb
smV1JHvBtP9NayERHscLMKttB2plCqoOIawKZoJuJOKasYsozjfWWcvHwY6hDYRD
hsJ1kVFgCqZJn6E2spbC0kD+ocIwWB1Jxl6pVNaMoDrwweuaVTrgV6YviOep/rgc
m6LXPMv3RWqrlEImMAUDwUGZ/z7im1aiQEi6QKIClVn0PcUSIvp8FJv4F+g1D2wm
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274162000168033324110157711362198552317712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 02:43:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 02:43:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karnott.farm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23656170357837189384149054890955305779964847018512194891680161267406621979862850727434334768469809244034354579029430405609712566366378899942340306757815843577162614156377686109313644948634895428557581552280342519957891433302529184577532001387207109502853907859429429400499622954096954669682718664327322198310389877190600043625425652400358561765858019155218035880327674468947383111094524119928111733626169324892760642933200675655210371027262655563276763778103688678867486190203114579166469385175697136074864449581726492956838631796123370834078452006850142648044472023921741295960983541784663045694973275917495953008289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d97ad3f5164c8d5e20cd4245664b49075948b724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectagri.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karnott.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.connectagri.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectagri.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karnott.farm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f171adfa10000040300473045022100a5ab793e5f9f4fdf19063c998daaf4bc6496bae31a9a41c3a1a460a8306e23d00220258ad9dec32a9908c2c96076a52cb6b014803d440cc642c92b1b73177dee97d100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f171adfe90000040300473045022100ed00727cdef7a55ea821f397674bfb4a662b6aec2ac828f9fcadb2b90592d509022028b4171ef7befbcbc379588c9bcb937dcde291760299ad2d5ccffa0271dabbb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077ab4eae7de303d03d62318ee92eb73ffdd6582065be0dfb2eb63ae3650db8562e88dee2dbcec8f18733d26b01721b06a9a19d5bb612f4e79983fb5067861c53e817e8f9467b32857d96e7a57d0c2ee624d00ff664bc94a5eb39e993f1488ad572cd6342fe1be7ee9cf9748fdffd21cc4c43c7e302879bf301060d37df196e0b6f3273dd42cafa34ae7fe59a663df18c20d7382721d9ee4bd485f93c8cbcf09381d11b2df74b814c3b822b9517c83e9dd40ade69123fb2641eae32ccbb6b51fe1bd5cd9235cacdcea755982de85b2fc83a55c7cbb588a3311ef5253a97e2d9797ef8558a0fcefc74c2784044edbcb97e9e67c328a4b863e8baa9938b04d0f349