matrix.chambana.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5b:62:ff:ea:07:48:e7:9e:15:a8:9f:da:f4:5d:88:f9:fa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matrix.chambana.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:62:ff:ea:07:48:e7:9e:15:a8:9f:da:f4:5d:88:f9:fa
Serial Number (int): 379546432242793242219448169636006719977978
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:d4:54:7c:c9:b6:90:a0:aa:2c:9a:9d:46:e4:24:b6:e2:1a:fa:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:6f:bd:c9:70:00:12:fe:a1:94:cc:90:47:c9:9d:b3:57:54:2a:80
Fingerprint (sha256): 8e:8d:8a:b6:74:d1:1c:ab:a0:f3:92:78:bf:1d:f3:07:52:0c:1f:ab:06:b6:15:ca:19:98:57:2c:08:4a:45:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matrix.chambana.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matrix.chambana.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chambana.net
matrix.chambana.net

Other certificates including the domain name chambana.net

(limited to 100 certificates)
smtp.chambana.net
chambana.net
*.chambana.net
chambana.net
smtp.chambana.net
chambana.net
maryleesargent.ivan.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
smtp.chambana.net
chambana.net
smtp.chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
aware.ivan.chambana.net
chambana.net
mail.opentechinstitute.org
talk.ivan.chambana.net
smtp.chambana.net
chambana.net
imap.chambana.net
nonconformity.net
chambana.net
smtp.throneless.tech
chambana.net
matrix.chambana.net
ivan.mayfirst.org
smtp.chambana.net
lists.ivan.chambana.net
chambana.net
smtp.chambana.net
mail.chambana.net
smtp.chambana.net
ipa.chambana.net
smtp.chambana.net
mail.chambana.net
imap.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
lists.ivan.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
starbase217.ivan.chambana.net
chambana.net
imap.ivan.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.net
chambana.net
matrix.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
ipa.chambana.net
chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chat.chambana.net
smtp.chambana.net
chambana.net
matrix.chambana.net
mail.opentechinstitute.org
matrix.chambana.net
smtp.chambana.net
ipa.ivan.chambana.net
ipa.chambana.net
directory.naf.chambana.net
imap.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
*.chambana.net
commotion.ivan.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
imap.chambana.net
ipa.chambana.net
ipa.chambana.net
chambana.net
acorn.ivan.chambana.net
wiki.ivan.chambana.net
imap.chambana.net
*.chambana.net

Certificate

The complete raw certificate details for matrix.chambana.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379546432242793242219448169636006719977978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 18:49:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 18:49:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matrix.chambana.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686309285008838857706538654241898216194052918281854268545589267678694378722766626660992908423371203281297635993080954380334271434351762127685490926576058627857743428132286231432462892531630892033676191104033263786424349220469002647224730497435616874324363303201812166390941339474359830099964607763300749397650376618430452482379273001468604171882741580242515713442489564556131072825759854317083035876431946921018534397030981595843913617051821879173152015466728571891779140977889690269956883222555085933198670015664676041823412666865050601484324386199580404333069507161543345556840158701152162439002208720740496807488111444367654881415308778672265064690416811560618568296250935996805862428592596454393091570582695227735760091422379273516598138039496801991609132078388907816519575214046293327602675387434009604455644118756852885276668239516705148569888857137798771375400467789799240387575322331053106504847509839766627402147393509784317207437857257620092306096121618076782200887885029696666269360440858936530077528713399327197303439620749650022881212128165865582757150356459883014850442200681385916064787849759506732084674091132785439932337312775555463013009554010177909257273504054198206845094590028251074970054563980549917991423433769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9d4547cc9b690a0aa2c9a9d46e424b6e21afa0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrix.chambana.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da29eb7de000004030046304402202aaafb9e9005e24b0d3f0aefe2e4d4451f34221f5c97284bb7a2742d39bb8d8b0220038e1e3ffcf686291d5ca6fd2e13dac54371c39d3a32c1533725eac2899697a5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da29eb7e50000040300473045022040f600aa55b90903c55b09d44ab155fc44f88cbf839b3fa739f7afb02f9b85a8022100d87ebe313b0970c46e493ac674021fcaf5fc6aa9d678019857c97d7c7821b810
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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