sg.plex.duncanleo.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b6:d8:85:98:b1:18:1e:92:e4:10:0c:04:e3:8b:bc:83:64 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sg.plex.duncanleo.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:d8:85:98:b1:18:1e:92:e4:10:0c:04:e3:8b:bc:83:64
Serial Number (int): 410668341426180623019213106810662569149284
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 81:75:72:65:e0:49:86:76:12:e8:8e:d0:02:a1:8e:2d:70:52:ce:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:53:45:47:66:ab:c6:11:ed:5f:09:33:de:d4:9c:e7:b5:50:52:64
Fingerprint (sha256): 77:d4:ef:0f:10:e3:33:f5:64:1e:2f:eb:85:6f:b0:68:2c:2e:14:95:c5:94:5e:40:43:7e:21:8c:d1:2e:d6:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sg.plex.duncanleo.me

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sg.plex.duncanleo.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bazarr.nas.duncanleo.me
download.nas.duncanleo.me
dsm.duncanleo.me
jackett.nas.duncanleo.me
leocave.asuscomm.com
lidarr.nas.duncanleo.me
ombi.nas.duncanleo.me
pihole.nas.duncanleo.me
radarr.nas.duncanleo.me
sg.plex.duncanleo.me
sonarr.nas.duncanleo.me
tautulli.nas.duncanleo.me

Other certificates including the domain name duncanleo.me

(limited to 100 certificates)
sg.plex.duncanleo.me
sg.plex.duncanleo.me
ombi.nas.duncanleo.me
sg.plex.duncanleo.me
pokeradar.duncanleo.me
sfplex.duncanleo.me
sg.plex.duncanleo.me
duncanleo.me
sonarr.nas.duncanleo.me
nas.duncanleo.me
sg.plex.duncanleo.me
gaon.duncanleo.me
www.duncanleo.me
nas.duncanleo.me
www.duncanleo.me
sg.plex.duncanleo.me
duncanleo.me
deluge.nas.duncanleo.me
www.duncanleo.me
duncanleo.me
sg.plex.duncanleo.me
plex.duncanleo.me
duncanleo.me
sonarr.nas.duncanleo.me
sg.plex.duncanleo.me
nas.duncanleo.me
duncanleo.me
duncanleo.me
duncanleo.me
duncanleo.me
highlights.duncanleo.me
nas.duncanleo.me
nas.duncanleo.me
tautulli.nas.duncanleo.me
duncanleo.me
nas.duncanleo.me
duncanleo.me
www.duncanleo.me
nas.duncanleo.me
dsm.nas.duncanleo.me
cardigann.duncanleo.me
gaon.duncanleo.me
gaon.duncanleo.me
couchpotato.nas.duncanleo.me
www.duncanleo.me
sg.plex.duncanleo.me
duncanleo.me
www.duncanleo.me
nas.duncanleo.me
duncanleo.me
nas.duncanleo.me
nas.duncanleo.me
duncanleo.me
dav.dsm.nas.duncanleo.me
dav.dsm.nas.duncanleo.me
tautulli.nas.duncanleo.me
plexpy.nas.duncanleo.me
chickfila.duncanleo.me
nas.duncanleo.me
plex.nas.duncanleo.me
dsm.nas.duncanleo.me
pokeradar2.duncanleo.me
duncanleo.me
duncanleo.me
sg.plex.duncanleo.me
sfplex.duncanleo.me
nas.duncanleo.me
couchpotato.nas.duncanleo.me
deluge.nas.duncanleo.me
plex.nas.duncanleo.me
duncanleo.me
plexpy.nas.duncanleo.me
duncanleo.me
sg.plex.duncanleo.me
duncanleo.me
duncanleo.me
duncanleo.me
tautulli.nas.duncanleo.me
gaon.duncanleo.me
nas.duncanleo.me
ombi.nas.duncanleo.me
nas.duncanleo.me
duncanleo.me
sg.plex.duncanleo.me
nas.duncanleo.me
www.duncanleo.me
www.duncanleo.me
duncanleo.me
dav.dsm.nas.duncanleo.me
www.duncanleo.me

Certificate

The complete raw certificate details for sg.plex.duncanleo.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410668341426180623019213106810662569149284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 17:08:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 17:08:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sg.plex.duncanleo.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801128777361763643736729108059548905348758446990454371472014297693798945158768630875896082609821062786646348069275892353369501183045398594329664483744117119347179422132721720970848731114777238585597927079109759659061553871113393189442182561640990691088699595623759129315524185199120018661012943689636956336230041641080794447776138921524208102372566673956530963248257629687267767374350247974058054100129821686348296511047457919692438904343214860855183415793001517571720131631468108776091589968289882152043567859035217290762420951407270616067466264168555975713659472159772254633498745866018481312874304522999507923866748577198503014981902854339851956291410566160475933445185571596512227633756036035873471979791862360445261414545570612585505990924315037766536448482615774711886943201160036433332154478393155687234800579636591544668231443089561564694846241362909263672528805549080470053487443765148771179579613160280085222598919678646543238173594644079201850160840330525996160779801037621658754694798386925059829883290080264193746511865583741985024012451510002916229740045559567548126327982969454379796371040936705279263417461546602041305269026360238887530641247567237067480927015747961624495471529312893706805041821264567232733850680571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81757265e049867612e88ed002a18e2d7052ce7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazarr.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsm.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackett.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leocave.asuscomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidarr.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ombi.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pihole.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radarr.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.plex.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarr.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tautulli.nas.duncanleo.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ea3bfec10000004030047304502206ea88678a8d8e7c0447fe1832b938457ceded8df5d4830923f60450c4721cc960221008f0f8da245686e8a16cb83c14eb13e2c53e69ac3c4a6b783ef8700c723f8e99000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ea3bfec37000004030046304402200ff41513df25c26965c5e3b18b9b3fb255d04eef8577c2faea6637b69fea79ed022011ea92901da72994d5a66f2cb4b2b043be812a9f898a6e8f1d170522d9336fe9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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