*.tekxiph.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:29:d8:42:e4:85:f3:0e:2d:10:97:05:ac:88:e7:20:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tekxiph.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:29:d8:42:e4:85:f3:0e:2d:10:97:05:ac:88:e7:20:24
Serial Number (int): 355990977039994768092734009925141252218916
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:62:d4:4b:49:c9:42:3c:bd:85:ac:7e:46:a4:8f:30:c5:73:1d:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:c9:95:2f:a2:18:90:42:43:4c:40:7b:f3:e4:6b:f7:4e:31:8b:e4
Fingerprint (sha256): 56:3b:cd:0d:f5:16:43:b8:e0:06:07:88:55:b3:c1:9e:48:f6:bc:ce:f3:bf:77:52:1e:a1:21:09:78:7a:39:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.tekxiph.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tekxiph.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tekxiph.com
tekxiph.com

Other certificates including the domain name tekxiph.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.tekxiph.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7LEPIWCaPmPyA7jENQg
HKXiFbwg1gdFiy6Ed24CDIdoJIfZ44hYXF9FJRi4gtknnegozflqcEbyegcxHo1E
+ZWK68Pugxvuo7N9P4B+EmTE2xUWf+Gg8eN/1tv0dRgVVtYkpBwr8KPczHHOC4bB
VkRIefLRyUEH/UJ0ENAeWsBVAslCx/uGYNmakcacDC7BQ8E+GlbadtxBWwyH47Cj
ZFEE0R43QuCmtKF94E9Xf2TZyKdVlpA5lUVxcisuDAY8ptRNf4KGI/ZPfGkGwFmY
/rkwVWpvmtk+UFM0Kq4hfNyKbHAMkzb75xcpYbEQQUI8htPYjVVWZlBuS51+1X2d
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355990977039994768092734009925141252218916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 16:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 16:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tekxiph.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22179856439628207764466209735155776433860693316568496882948567905709254689405741341125396177725147015736532404834882534537215533745705619860402787402952151229574516618539946430371997643638058064826678653932074973170201767260930779346195182358326584168183607205815861416208103728737480896618028863120126654836005763955681369766581819817238349187064539018049788328084340274140972202579382751530794508604489994394329185778983494564935359135174886205250825382977165883302733660068409642732225163597237822533932656860758817205581831175178816849869176833012168785955031748845294632832569790064721450920879431976474537467377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c362d44b49c9423cbd85ac7e46a48f30c5731d72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekxiph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekxiph.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a6b9f18f100000403004630440220326c98f3a28e320048a33c22a49af0bfda6a8e57891a2abb581721f1258489bc022046e7b7c5b603f44e0d3c22cc3e83786115747935e67821975d9ae28187b3edad0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6b9f195e000004030047304502210098a52ebcf47b13e4ef3ca31d9b090e2a1cf55775835ba482eba7ea48fd25af0a022017114ebc1a057ada7754111cd6dacecb4ca9eaad528ce14db680fd2afd858f1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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