holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c8:c2:e6:e4:de:76:bb:c4:8b:b4:b0:90:31:82:fc:00:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:c2:e6:e4:de:76:bb:c4:8b:b4:b0:90:31:82:fc:00:2c
Serial Number (int): 416764686212703203908064094473600785711148
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:a4:fb:de:30:b8:b8:c9:41:81:36:a8:88:13:bf:15:5d:11:08:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:88:74:3f:22:d5:8c:80:59:23:34:17:d7:e0:fd:b3:30:ba:d3:a5
Fingerprint (sha256): 6f:50:fd:50:df:16:45:30:c1:71:42:de:b6:8e:fe:96:16:58:95:4d:f6:07:47:bc:43:a6:be:8d:b0:37:bb:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holdur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is
www.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416764686212703203908064094473600785711148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-01 05:01:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-29 05:01:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704853451827414788274869252963501825228244857066326150684071737284286324490361630163011212518343687605731033508124286429577129955576283422546670657994592766706938567619181237551615721825696044998959699734370454936207309470979645287135713773739598373633919557531907060927264629965305986547022410375309276609344172794380081514208206072293274850375822694621232454859309012997543498536728864158989769581476501625320705919241092399222380378925735236284087325470447920645458987768256395671932157483770313669602542939666511579622827114182274810172569238170378758524023691828004313356122749141389521651315416543342924132295643601151060381029810649716361679039287462659504256731039962350287490220272342338290054400268683168488731693010535022196534096598564551873164976751188609270679828215923540933900881766416289418484597603851262828456153544531315076942151287917476122049598864254533952888754876040341347195730542236011469865431509377201763385564059846188184290540566935549495418972550434679883908956228346497354285513484134370485427798866137979567847133434443795186913670087646490602448259997201865525763303441737301338261947999709957777093488319280895728947442578401122615636859662568260846855011067815388837509025351913628911016070820059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fca4fbde30b8b8c9418136a88813bf155d1108a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164546e701000000403004830460221008eca5c774f88fce929e70a5833f3d357f5dbcc40af7125abcc86ee9a322680ca022100c9f33551fbf2d58d5e095d9b9d04bb9f3bb9ad6c512269ec9bebcbb758225d840076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164546e70220000040300473045022009f6641025f087a9eb53c52b422b7cee237110ba1308546b0e1b50d3716a4690022100f3afc3d617579f6ab5325891ff4fd0c526415b3e8e5d0e156863fbfe2c1aae38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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