taak.xyz

Issued by R3

About this certificate

This digital certificate with serial number 03:46:65:8c:a1:93:3d:85:ae:21:4d:90:92:e1:13:2a:d7:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=taak.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:65:8c:a1:93:3d:85:ae:21:4d:90:92:e1:13:2a:d7:3a
Serial Number (int): 285291605706014430033894206189410668173114
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:5b:ee:1e:12:41:de:73:a7:3e:2f:59:81:ed:b7:b3:0d:9e:36:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:6f:98:81:be:00:3e:ff:51:3d:68:7e:26:7b:e9:d7:12:24:47:ba
Fingerprint (sha256): 77:f5:c9:5c:de:3b:6d:de:9f:84:5e:d4:26:9c:11:ce:c5:ad:a8:28:fd:99:30:7c:0a:ae:d1:e1:4c:37:5f:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate taak.xyz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for taak.xyz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.taak.xyz
taak.xyz

Other certificates including the domain name taak.xyz

(limited to 100 certificates)

Certificate

The complete raw certificate details for taak.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285291605706014430033894206189410668173114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 23:12:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 23:12:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taak.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875644725529422482751905157293723710556053332412083303560555193257832887012989450888820370770977764745724456401482041818484916643616727860864155300620768297015178196190595234511372747558128548725589591789247057050429730662318491090109113120574126000509066413392587276384925670045656025261907838212101052881930121135365823715209639723277457362918646421077355583097673316568420198317358327906122782728920680779772587576252933785708572346411185466607248749428955384172245760610408664316386836922149187500012886053751689198586928441723525266324631974691768096076231303122850895398149268510481517948469101604804975583516912403361068259615858997481441156006422664212153637090558549422594930874023124860465219762767522492445421410300071022376574823994658076261806743679106042263159729199952980234349490950917508640276971635976186031683995653749866511020868536646336780124939726528151512850992883989365768873178243315948923566272141993308232400895489848454935477546340545459898822814444484208921132735214045032242433443826782723840884940318552539082680688297338131919689521155029430610309479648348549498707137252753890239789576055161460606115375637504867805063010151341920620286484610766582312925858295958574376135939962317022585816253098353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							545bee1e1241de73a73e2f5981edb7b30d9e3677
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taak.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taak.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894c977c500000040300483046022100d13f4eec693e765263207351f085f15d6ac0ba825f226ddaf29559815414552c022100951511d6c2204bb2c3653c7f2cf47261b457382b5e1f005ab0d7f0326e361538007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894c977c68000004030047304502202b15f89e70662b93c1a4cdb823d7c32fcd371eee9d7375df8ca348ed4412618b0221008a48fd1c65a06da5e37b4f5ef8fbec7e6083efb9c3bc702ee4da252ea8ae3a72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00751474e9a191a36de2b9ea90f6ed679051910514b27609fa6bb522c9ea649637b3d4133268c1fcd89d6bb6f7f20e804a5aa5a332b47d5090d8a1bcd06bc7a03fefc89d0986165a40979a09871b255639c48e1cfcd1ef4f718276586eaf2080ea7e642cc5be1223f86643094b60dfa06e12ee2e44d5f9238321cf2f9d599236797e25c952d99c0c0ee87285bbeaf3a0758ffc858a30fe8d0efd4d53717a44f2d62ab7f28c03f0ed2df3c48a54ff767dfa3b993981d9b83987ebef6a274944fc3555f746d1c7bb0fa2e36cdb6a9c936e7b71ebdc090e29016f1556beb3dc0fd5e53e3690a290a1236b696472f592a764aa04b381ce7606eb07ebeca3e6dcc1cda5