innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:e7:53:63:53:a3:ed:40:51:a3:9a:1b:0c:22:e5:b0:7b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:e7:53:63:53:a3:ed:40:51:a3:9a:1b:0c:22:e5:b0:7b
Serial Number (int): 358624817009998997110224278930471883485307
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:b0:94:0c:dc:5b:41:ee:2b:0c:47:83:9f:b5:d9:b1:71:5c:ba:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:97:74:8b:d7:ef:b7:8f:e1:9d:90:32:fa:80:8f:7f:2d:62:06:ab
Fingerprint (sha256): 9b:92:f8:80:a6:90:8b:8e:f0:58:40:65:a1:e7:ad:5e:58:ae:7d:15:fc:f3:ca:0e:b1:83:49:ee:6b:30:bc:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358624817009998997110224278930471883485307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 11:57:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 11:57:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909512930890559004494906906808220322989811118886500415928048839275680609060244023553761189453268398978460654027582533669240049112261442768014102787062669654193152078590544007327789040026521936209930200011849212416681402543117417028305540978460994929784380777794673633318710367906924054638790859237151271859735970832215020546699332985251270212010570400218076571132159771755319738221812224124311959791875736058375284952862549014571095769411521118777038835116923115395981892409923201529247812322691133867094702936966727626610002602885040810725662263759893448639370744338728213737181627151950923903086041831004900455471445659391641176059913657365268685495745436303626486166988236761625894101264981770573376344787726405963996350754154939478317184976742719810609782918666237628489631262844191883329622955268986359862291859974675650908510895676722190270818992308193087933915157586697725767964885332457167095683821283338094098854092720410754616532333343403860339553070214393950482943584927072014998389423107598038897894851409015095642333701153647604250734926203325451786233981296048810080350166897505092569311793715413271834019565830393179841932814077862130649890278357199062091604237745470863651483492780759097075895586383793311988604917441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13b0940cdc5b41ee2b0c47839fb5d9b1715cbaa8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fbde193e80000040300473045022100e904f2697df22b956844f03c751c1143a7f0c8fe97f6dd079470043e83dfca8902207a515216a907d61c5151dacac34b65d10fee51848a51ef5d247a5955e923e12700750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fbde1940c000004030046304402201404cd6ba1795c98b66a7f28c66995c5c55c7c51af001dfdef24341e9010e18c02206460de0f4dc7e92055f1b23bd53fe138baafa8388def44f387b1db1f46d3acd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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