innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:a0:7e:c9:3f:6e:b4:2f:30:c0:73:f1:10:66:50:b8:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:a0:7e:c9:3f:6e:b4:2f:30:c0:73:f1:10:66:50:b8:10
Serial Number (int): 347301349049876960413550726728329588684816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:9c:f6:49:7c:6f:17:81:99:17:21:a4:8d:bf:ae:e4:3b:a5:6a:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:59:3c:1d:90:c3:24:dc:d1:20:e1:6c:17:e9:11:bf:21:84:46:22
Fingerprint (sha256): 8e:41:ab:3c:85:4e:c2:91:9b:02:89:59:79:14:50:4b:9b:20:96:94:74:42:5f:9d:50:73:53:6a:9a:c0:ff:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347301349049876960413550726728329588684816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-30 05:50:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 05:50:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889176009479835188843520854963234765101971981677593594762960509465265616929265916573862981683506138237301379186151055994646530151886913267933899410715562776082828562075996732922901631649407613588855945209957345236895012544053387275706958469319633115288411394443971496428919453780118287184539872627286536318039748788187975752033389081692494784785256898870687540691848893589531877739104600381456594386081614335225706755182158993425391588114211389255225436256518805953080419117037446588000898499081173087651335738524148412174314208857619423139974773415302764632575616552073992469563868297340446679812930884929394394604608760495820284064851324230424413756927604620119912268773773725283947011162971475761451957174586586204857753094302000747756038482064051706604095985738401861431497824188361669483937053890347920415913833855280313778516711973786127220480260480600904544659687642862279009737573341735556035713222879812102303470771098635721122674277193263145836315255924495050860397282368965485148455000911909220856174061009558779172588115827917856842279048695985785745298823139312304980201784794933555792730545028597823913825903844308650186645015251191740515042815349409161595962577739010633590556917697724800233704400991591950234640028231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb9cf6497c6f1781991721a48dbfaee43ba56a8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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