skyloft.nu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:70:a5:3c:46:f3:09:86:1c:e7:d9:7f:b9:08:a7:0a:21:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skyloft.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:a5:3c:46:f3:09:86:1c:e7:d9:7f:b9:08:a7:0a:21:ba
Serial Number (int): 386780404418326180947314910064733460242874
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:da:b2:aa:f4:64:f3:f3:5c:56:f5:35:e5:4d:e1:d5:6c:46:7c:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:e6:13:ac:00:40:15:a6:3b:b4:e0:1f:9c:ec:25:49:48:2a:c4:8b
Fingerprint (sha256): 6d:a6:e0:22:28:53:c1:dc:01:a8:47:a7:9a:2a:27:72:78:78:d3:7a:8b:81:c3:b2:23:ab:eb:e7:54:2f:0d:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skyloft.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skyloft.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skyloft.nu

Other certificates including the domain name skyloft.nu

(limited to 100 certificates)

Certificate

The complete raw certificate details for skyloft.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgISBHClPEbzCYYc59l/uQinCiG6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDgxNTA3NThaFw0x
ODExMDYxNTA3NThaMBUxEzARBgNVBAMTCnNreWxvZnQubnUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDBAatFh4afWV8OhJdVRWASfZt4RgdqAloPlWnW
w/il0ec80K4a3pgRyE+EHgZO2rsZMMzs0Nz0yp0OG4fWspEy87NvXBzCJpAnTihp
cLdfw+f6tMAicq3QTlZRbg+N7o5Ppu49d28ALt6eo3W6c9nxRQJjiSYZCRuy+Y0V
SFjYrvWXvMINhJVGdLHHu7eZA+9ActWBANH0j3kpSgCCknbxnOlJRzhUIgNfnxbJ
7QSePay3arW6EjKIi8kRso0AqLm9RhUUaqHbxDR7fq2mbJsS3Kipa/xOYeV81IqD
PPbNl+TZG/jN7icf2rTkhx3/CGCIwjYP6h9eXCHCe9a32GLMFRrjr3ehh/hewp6N
iXiiOxBvxcyizrYL1VUKyhSsGjBNoFZvsh9Ehhi6wt4ZWgVxp+rzqoMB5fBNhAB8
prBR9M1z7LVPl+q9ZQvq30U748O7ElzmdKmUoroH2g+FEgiKEzpuncs4gh9s/LAb
NPc+6zy0pTpsbSyakmzqGjtAfVkEn+RtW6fPtWsfFAPPMo0SvaN+0EuVVK83RBRu
fBcO9XW32LaFp9Ykqqb1VUTUa2xdpb5I077s2dM6RrtRSWZuP5c23Zd/mu9xCvIY
NvNdPHQmcNTjuRxV3nE9VnTETdP/yXIPlHm2TEadDiNwHc2Ygp8+LoJnqNTF+9IR
a6128QIDAQABo4IDEjCCAw4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT42rKq9GTz
81xW9TXlTeHVbEZ8zDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnNreWxvZnQubnUwgf4GA1UdIASB
9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlz
IENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcg
UGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmlj
YXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBv
c2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AG9Tdqwx8DEZ2JkApFEV
/3cVHBHZAsEAKQaNsgiaN9kTAAABZRpLeIsAAAQDAEYwRAIgGH4wLN94lux7q2TG
bJlSuVjtfKYr2Sqd9O49GUo5jswCIFvs0ste2uSO7Iwf9LenRVNI1DJ+KLVk31Wq
yfBz4vgUAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFlGkt4
HAAABAMASDBGAiEAsL8/nLYjoPehg/1tzm7W9DSWRwDRrU33nVol1mFZmBICIQDQ
MTaZHppBQxEHBzIp1JupBIPA9RhXhmr8ZadozKppCTANBgkqhkiG9w0BAQsFAAOC
AQEAVXI42ogf3cqCfZCJL34+k/RgeKgFZZ9B5Ngey5/3Be+86B7wZxTnG4nRd5hu
tWcfGtNZOYwsHMNbkZFIdmFIbuPy2XsYG8AKUt31DL+mPd03/EvHRlHgLOdlClaY
fyq4dvA1aQQXuX6dkMTFPficElGU3h0ite4ze22oYkpfwCY5DJaoF8p88RA74Wm0
irw3lNZBAlfuS8IF2ALQOvxqjO3lUjFo9fXVEcNiLoDzaJuJUV+RLr5EeetZl+MQ
0I71IZ1OCvHl+hbJ5qscsSWcJLEHMSby4JvkzcukKQgxUkKI7hKSyOlxKDsw/9EL
e9WB8EX8BZrgRplr8gHxrXCHHw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386780404418326180947314910064733460242874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 15:07:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 15:07:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skyloft.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787397902967928958749602993212894680974462790937389106921608656702916983804287764605621792629786102502592143747736069665251732996503400594353633553059171907296550691310276522280150719489155407794017187458661968382543131344830060378258168938048673732995490371951387228581441114968018618672154680519226086785837188783405193091763887935609190863443699521272907670169268309000028823621636940429850965816217361382410323118948507332476433672625979016652539348132011008629347222527742651752079443442278630586956191728216845943768752857546207762397097861870491664265374608365334795378810188357155322280077661639242447193462731033993585090673777771204301496592427303487832362313094834191424834032595708128583744355927627216426545069231301481857652385962277207927809518812932108719300298121476511446683768530388546134333857540350222765435805175109875700109459845467075662577258100719655526994509637869102089412330524446889911169626256694283636368139639298540861663981019130379879939432221588559412331592693766694435457986813614374815702496934155306331776473467230920466972970856029059309149503144822040008655472731446091040394627606245460475730046139031103258809296038197360391864070265064065158513509413249602555507831906339401555369035396849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8dab2aaf464f3f35c56f535e54de1d56c467ccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyloft.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001651a4b788b00000403004630440220187e302cdf7896ec7bab64c66c9952b958ed7ca62bd92a9df4ee3d194a398ecc02205becd2cb5edae48eec8c1ff4b7a7455348d4327e28b564df55aac9f073e2f814007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001651a4b781c0000040300483046022100b0bf3f9cb623a0f7a183fd6dce6ed6f434964700d1ad4df79d5a25d661599812022100d03136991e9a41431107073229d49ba90483c0f51857866afc65a768ccaa6909
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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