bandraum.rockt.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:33:88:90:8e:de:95:e2:d9:32:e6:a9:90:e2:92:8b:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bandraum.rockt.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:33:88:90:8e:de:95:e2:d9:32:e6:a9:90:e2:92:8b:cb
Serial Number (int): 288627946861099877339272215979326946053067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:a1:55:3d:2b:d2:17:2f:99:06:7e:aa:5d:5f:b1:46:9d:81:61:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:0c:5b:95:c3:52:44:de:ea:79:2f:f9:ac:54:22:f1:d6:d5:30:dd
Fingerprint (sha256): 8d:1e:9b:4c:26:0d:47:b1:12:39:9a:d8:93:f1:79:06:9a:9b:d5:1c:19:72:17:58:b9:66:88:0d:04:92:33:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bandraum.rockt.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bandraum.rockt.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bandraum.rockt.es

Other certificates including the domain name rockt.es

(limited to 100 certificates)

Certificate

The complete raw certificate details for bandraum.rockt.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA1AziJCO3pXi2TLmqZDikovLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDkxOTE0MzhaFw0x
OTA3MDgxOTE0MzhaMBwxGjAYBgNVBAMTEWJhbmRyYXVtLnJvY2t0LmVzMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsQ5w3HkgQY10otaRPwKjAyXk61as
VWyq3XE+4El75BgA/J1hVXQklVnFVwR7e4K4/XoPmJL4KpYaHlMNsQR30OI9WVlT
UfC2o9Pw/fihr64UzhC1c8kZO5xi5VQoo0hg8gWqMiIoKKUEGtFTVQM+ZOSYqVFd
etOOD2qz/hvINBXqka5NwFQx1eLCZLrn+5Sf2qn29TQjJxPoHi0m+NhfmINejP5o
wTP99/zCtvEp1jZAT1ryX6nUXxhr/Ceeszr43hF+IvXCwbeoQ086O6qYQXVEBMqZ
pCEIQGlN4MyRsPjO6LTQRlZrtip0ezgfXbnQhetRaL5ZhRyNQXNlHkzwqX+oCN6E
smSVnH95x0LwZhd1Mva3KQ1pv/DYkIDQTfUg24dL7y5oO7ZpsYZYLqCjtS4yAhwK
WVwuK7zegcashZ+WnZlO84McEEHJzWMGvF3qN6INWxT3EDib4EE9yAUZxE3bgLLV
VB4qulVNmheRhSrYVQPYsi4Ha90ASpelSMneBkg9rwOQC2hu52DZE5vk6aFI3KaG
QhV1WJRA4+jOI4vAPzgm36Es3en0TAEngIQnIEcVczQa6frnmVnC5JUJu/akEW89
nvWqkPsZ84prVsozx1lSVKRuhEa9JeV1P5c/a9NWPiiqg7h46dhGwSz03vz6xUDp
Gwn8KS+eNmXmoTMCAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
s6FVPSvSFy+ZBn6qXV+xRp2BYVAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFiYW5kcmF1bS5yb2Nr
dC5lczBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
agO8/ywAAAQDAEYwRAIgduYbMEodAkjxpdaDGTZ3Klm+mYbt065xC/TV+VKicJAC
IBCgSfjHTQXXQFJSC+tRcOZwhB11t2V8PBnMhqim5ZhuAHcAKTxRllTIOWW6qlD8
WAfUt2+/WHopctykwwz05UVH9HgAAAFqA7z/uAAABAMASDBGAiEAtZaB5WUS5k8O
Rcakd1Sy2y6iD4pqLbslYWEQRZLBm5cCIQDKqTHlPSeEy2Mj6eDKW2pMFc8ojHKm
1Nu6zaOnuB0rXjANBgkqhkiG9w0BAQsFAAOCAQEAO3yzdfhlgYZdwrKg5qY1q89D
JHqyVECkmOpQKp/tEud7Pel/m2jSzBSgXQgryon8MbZCmF9yHeHKgiZ/4/Lvl043
dhrD8zLpqiaqWEt+568Fc59HU3o5ls4+DAnCUNk9fzbqwT3tDs6ngI+p+rumXCmJ
7K4hqeBNil/Bea4Jx2A0RQcVn3fvl84l6xbQbMMUReqWa/u0GhVM7+QHUbxal/4o
lERioqb65uzCJahfkQL/Tq4QXNjE4izqHnjadh+FVgZdFksm7EFz4c1Te36mS9vl
0Us0gaAsAV76OPN+MoMKBVTkwBcYyrersciz4RwJVmc4iEh5p5bQcgDR6qTqdA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288627946861099877339272215979326946053067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 19:14:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 19:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bandraum.rockt.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722327131234015428457443215166707059128524089077562573176121273146111762546663666186209034879763063817754949299107230461791386518378434572813324924614358912529670558065901165205710569176512933138373095658360574500258254844980520223128390804896656298942503552512320188720843882739568677786973843985186518135374499788695713135176906840486018252520900853174474080885328449722753441307158363885965604013769665993960726959050559162393011553738268856675146871970795265241908008128830616594428800192001551165060889045576469792231039291848625199492765889150905904267974376559920999356372758497673060011598483380659607200060198399669204282758416936331253887388621527921163822021369389478746215992930179280524128967841726505476803118553006875956060502217863619476227035488331538464388702184575169333985589759498835440222607771950715580494761184506534071956999377798102842008901583958501897992921604533232169044277819279728034747682995338764061958541111789235984728571386568190775668918680813488549178296801746849623700726607321795676065808266883051954454624465856922790230978728631196674967164536411414593056546681966564738695957937185638763502793803236707311176451613712719775802192707495864619048388840607487964669538401095778052893225427251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3a1553d2bd2172f99067eaa5d5fb1469d816150
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandraum.rockt.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a03bcff2c0000040300463044022076e61b304a1d0248f1a5d6831936772a59be9986edd3ae710bf4d5f952a27090022010a049f8c74d05d74052520beb5170e670841d75b7657c3c19cc86a8a6e5986e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a03bcffb80000040300483046022100b59681e56512e64f0e45c6a47754b2db2ea20f8a6a2dbb256161104592c19b97022100caa931e53d2784cb6323e9e0ca5b6a4c15cf288c72a6d4dbbacda3a7b81d2b5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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