openhab.ci.clos.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:7f:fd:57:a2:f0:1c:68:e3:c4:58:a5:ce:98:4a:a2:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=openhab.ci.clos.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:7f:fd:57:a2:f0:1c:68:e3:c4:58:a5:ce:98:4a:a2:cd
Serial Number (int): 280903080093823034577146747806822783689421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:93:82:e9:18:9b:0c:e6:22:aa:2c:9a:75:e9:7f:dc:2e:b4:1d:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:cd:08:b6:f2:be:de:7c:95:34:af:00:78:14:c2:8f:5a:b5:e2:f5
Fingerprint (sha256): 79:78:93:6c:f8:6f:22:7a:a1:24:e7:c8:d6:c9:6d:cb:15:77:06:4f:9c:3b:d3:00:1f:e0:bc:34:f8:f9:13:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate openhab.ci.clos.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openhab.ci.clos.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openhab.ci.clos.com

Other certificates including the domain name clos.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for openhab.ci.clos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280903080093823034577146747806822783689421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 19:51:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 19:51:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openhab.ci.clos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696623159579125006461996958755212729597437251695347902591057241749495056330594522728019756264041080162932855892641684642414931507447567374879079000237723326742701149955121134209894410696809575697763071517155953239656796228147636843653027390683458449072492829985670296975726191261080701809253605990367986386553952124871127697947964523602646862132942367626774565265816585641754454021995818035930427137501350052601104660863455721367426631380315664152222773434270438471512403174434436202297166542177096228717827971544508573286142172937834465078294680201398772690393216631237484881392456641746052910723276289739534991069587278500241782544260899029519147199197732535571114401371702173516447993261020214739876679297887739873160917854774337084234373595479330112010896545762376683556864159461762960689362743022768597949807775667430929454247204844134806225280505265619334587979499515766237961508773439256009041703944354186259107002300549712975933859416299625545768066126932554488904123654161208633167337507381576920612038246117988269184992518798724054774220497607235510064861245471472960661330222589847074482079979083683160819786847867157264683449546055768220740426741419262280809686481949000284406297345137676548740257778506334387256372027461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c9382e9189b0ce622aa2c9a75e97fdc2eb41d42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhab.ci.clos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ea97b88020000040300483046022100e4d5eff59f502a4940084907ae9a8db4a76bb697d9e55b2d6b79edffb4afece1022100b6971a3260978ca95234f668fa34b9cfc63711231de55188f950f7bc5f5c663a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea97b87e20000040300473045022100e9e1080ea5ea403dea9118fb8aeb23559bec21e2bb12b05b82a834c92b484bb9022073f40a58c20726b532b9b596b89072615e30c6e4a4431561891887de67799bf7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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