boersimat.tk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:77:29:bd:a3:f1:94:8b:57:3a:23:4b:06:e8:4f:ba:c9 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boersimat.tk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:77:29:bd:a3:f1:94:8b:57:3a:23:4b:06:e8:4f:ba:c9
Serial Number (int): 287016430176385100662830158263826986810057
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:e3:3f:d1:94:14:05:ea:3e:61:9c:4b:0a:53:d2:4e:90:ba:fd:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:23:45:1f:5b:82:26:26:06:6f:2f:44:fe:3f:b0:f2:ad:00:95:3e
Fingerprint (sha256): 6b:b4:96:65:81:19:6d:39:c0:54:da:ab:7b:c8:94:b0:8e:fa:7f:96:18:54:e5:09:7a:6c:a7:cb:b6:31:07:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate boersimat.tk

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boersimat.tk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boersimat.bot.nu
boersimat.compress.to
boersimat.no-ip.org
boersimat.spdns.org
boersimat.tk
www.boersimat.compress.to
www.boersimat.tk

Other certificates including the domain name boersimat.tk

(limited to 100 certificates)
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk
boersimat.tk

Certificate

The complete raw certificate details for boersimat.tk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgISA0t3Kb2j8ZSLVzojSwboT7rJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA2MjgxODMxMDBaFw0x
NjA5MjYxODMxMDBaMBcxFTATBgNVBAMTDGJvZXJzaW1hdC50azCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMBayJEo2kpPO2CT1F7SGBZfFliyMKBBGlA2
uhm/CIIEve0pexPMWOgCq5O7fTtaP7I++YpeX2RPyY9S7ZTf35XRVczaY+amc8FM
VRpA9IwmHa7Aiy1saC5tH6uOmNtKVWmmdUpklogcP7wmE60HDK6CaKLganQfzlpE
BnJo0McJKU2gFGGsl2ngk8I4JlEDHJuPS/cD3+Oy7rJdqJJkqu+XCTwoVAVf/fBU
2GzYwqrjUrxMJ5z3kwS9bwQO54yJeSigyKALPFgtlnp7zHo25PqW6bx/hqbB/tbY
6G5i36xpq7VH4qzFQlNjY4xOvXh+E6Xsir/hDvGDL51Enpj6JV9B/0IEZa7hKADq
odoWot6BQMANaHG9hyUjCW+duhD+PLw0+yvq7Vykyo1+fh1p1jwB4+SoW3MN1b8P
LTSCiet+X2HeoHsDC83nM+Yk6D2jKCnxXsVPnbaBGEmzcY1zjv1Tcw0d3FevHk8q
ig5t+/pluYjAXarPWPOu3t0ayeQUozYYpMe3NLyR2cnhb+W1aZFrFjIR1bY34SgM
Ia2P3rNZhbbMSDHhdhwFekb+lLyQH1s0AgIHHEJxZZLOznOBwT5WJ9gfmEUtEOn9
+pfsESyIQcG/mNA2ep72OUvM80RWCDM3uTHO5q/Pgp0eWf0YgjcfwLlhk62Cgd8O
g0v0Qw11AgMBAAGjggKQMIICjDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFrjP9GU
FAXqPmGcSwpT0k6Quv2AMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIGZBgNVHREEgZEwgY6CEGJvZXJzaW1hdC5ib3Qu
bnWCFWJvZXJzaW1hdC5jb21wcmVzcy50b4ITYm9lcnNpbWF0Lm5vLWlwLm9yZ4IT
Ym9lcnNpbWF0LnNwZG5zLm9yZ4IMYm9lcnNpbWF0LnRrghl3d3cuYm9lcnNpbWF0
LmNvbXByZXNzLnRvghB3d3cuYm9lcnNpbWF0LnRrMIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
DQYJKoZIhvcNAQELBQADggEBACjZpmOeDR50z79a9otSppqpd4BRxlGTHF1zxzZR
oAc0Y7GrROFpTVRrYlQok96wQC7HySAq5Bx7V+PpC8U9C7/c2kYcXEiLGRqPijDE
+JXls60VZ0Zxce74VQvAHmo2USzteEif8GAhJCqU6uQXzYJLeDCyFdgdg5Ll6drL
hjU2JrUrskAw14qF3xmI+Mnj6649flSLKPzLQpGlhUEHrxexyc0wOnCkn3FdWYgC
WsPkHGy9Lz9DBcZ/AC7uWg+FD8FuBjqNtUljBjkQjL9kZCIiT52YigCG758Vvbss
2dPOczCrHUQ7AEwoC8N71HS65fX5kA1mw8eFrIahX9BctDM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287016430176385100662830158263826986810057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-28 18:31:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 18:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boersimat.tk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784738396311020744441383278198746833665394404726181518459872881460986179239278275625764233293304377703962370298813839859454471469359191064330888363097069270843855427284486791636211131663020834965522366813082809270678330880712693701244569455591143138180407778686197082227653146347788065228739433664906375101439870688338536270335543388876771888254333605981468511664267643189087879637446686387320865552798992167718670193543651568753334864794154393987306971608735542508627843418661620394976600075874223094557022138346872456140377085109749395775615296032108686589133554534002163537732871845818713631461452969601991881939368463463330194118275624369797987721795931991100673787888832984617122049884607506932930611515185987744950834011195620145466128285763577324164666812864411633722825152123274380368854194362506945654158376125010523073030781028256211171740349330930831220806726841330524388524490209767498740243605977249574707740265842958171191658138897585215933971128834521687539570702669998325694064537264506774699845502316753207967560797895594313345520802167689054301840044405795163738614572944566872935665590343258749339053089925625140808438841076313696410544343957092759565861945547995672227213813246915966815115693233576240796427029877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ae33fd1941405ea3e619c4b0a53d24e90bafd80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersimat.bot.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersimat.compress.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersimat.no-ip.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersimat.spdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersimat.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boersimat.compress.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boersimat.tk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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