kafka.verkstad.net
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:74:8b:36:48:8a:1b:71:9f:76:70:bf:81:cc:55:ce:5a:9a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kafka.verkstad.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:74:8b:36:48:8a:1b:71:9f:76:70:bf:81:cc:55:ce:5a:9aSerial Number (int): 126770085041309043942213576606800717699738
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: 66:3c:96:3a:9f:aa:ca:09:a5:bf:7e:fc:21:3d:ca:77:75:c8:94:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6b:38:ec:32:18:be:f0:7a:8c:72:70:70:58:a3:32:10:d2:cd:57:ef
Fingerprint (sha256): a4:b6:11:4e:25:f2:44:38:34:7e:2b:d0:5e:35:d7:1d:14:ad:49:d5:19:75:26:49:dd:2b:67:9e:91:a1:42:78
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate kafka.verkstad.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kafka.verkstad.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kafka.klockrike.net
kafka.verkstad.net
kafka.verkstad.net
Other certificates including the domain name verkstad.net
(limited to 100 certificates)
kafka.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net
Certificate
The complete raw certificate details for kafka.verkstad.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAXSLNkiKG3GfdnC/gcxVzlqaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAzMjAxMjQ1MDBaFw0x NjA2MTgxMjQ1MDBaMB0xGzAZBgNVBAMTEmthZmthLnZlcmtzdGFkLm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDzOSbWDs3VAPWItXFzZFE4WsCy G/aXnJEkru7i0+FRhmrar3/yASzQV58/qnmYcz7CXLDdjsimCihDfgvRHSUMJbl+ zo8YdJt7OystHypSh7rcfWa1IsT9zY8A63GIwYsVy1ME2UqXzafb+/uyObuCqNCI cXCEgewecewCUsSJxjjX3rE7G0I2opa9/tOjLtMnf0y2DQ/UPR+HraOpEQiGF0mY WW/Nk6JD8tvPPsHt0OSOfmYCfXej8LlA1efE0C11zENBuHL9gOV0CWtgwcVUaOcF LKEGwzW5obxmUeZMNXLYoXm0+tznzdL4L/dmxb9rliOBo+l8MaO5TqPkk88CAwEA AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZjyWOp+qygmlv378IT3K d3XIlEYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDEubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgxLmxldHNlbmNy eXB0Lm9yZy8wMgYDVR0RBCswKYITa2Fma2Eua2xvY2tyaWtlLm5ldIISa2Fma2Eu dmVya3N0YWQubmV0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEB ADXTDlbh4cQmxGNFMWwy5bqjyhYWBQAIZJVNEjMepJuv/Js1hl+mYd3xsN3xaZ49 8LUm1AMT7llXIXVpMqLoIbH87uPFZXSCz8Si/3kaDugD9/oyFULo9igcsOzxsSJQ vXJOQqQ8BRewAnjkcLYQOOKg+eTijRvcKbE/oXgvfkB/jzM4Z/k27oJ0rY0EgR+x J3cmqteKwPTXUoeDnsCQs6ceFCgPHJCAUWXM1SRG+osbTx+PWn8YIe7q/RbUJrrf vigYGu0hbwK9q4jS/YT5n6pPwmpr9QTyAmA1XynGHdz0YZlbPS1UEgopo/h0oBi6 Smt7/TlRhr2GfPpEFNeTXBk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPM5JtYOzdUA9Yi1cXNk UThawLIb9peckSSu7uLT4VGGatqvf/IBLNBXnz+qeZhzPsJcsN2OyKYKKEN+C9Ed JQwluX7Ojxh0m3s7Ky0fKlKHutx9ZrUixP3NjwDrcYjBixXLUwTZSpfNp9v7+7I5 u4Ko0IhxcISB7B5x7AJSxInGONfesTsbQjailr3+06Mu0yd/TLYND9Q9H4eto6kR CIYXSZhZb82TokPy288+we3Q5I5+ZgJ9d6PwuUDV58TQLXXMQ0G4cv2A5XQJa2DB xVRo5wUsoQbDNbmhvGZR5kw1ctihebT63OfN0vgv92bFv2uWI4Gj6Xwxo7lOo+ST zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 126770085041309043942213576606800717699738 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-20 12:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-18 12:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kafka.verkstad.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24357692407632693487728357905502198885036730541753554017836010960806534052511327372385705568194567962977655167237134505945158344847161455208359474200548392495349612954524605944964214603542456150649922324629540067755430250931722557061387983122066094122954165994168838222643888677854751887633437580216221520185471289089881382892827261494007798713379978817195964027538588062088958246779568960280862128455588245169490338347424769000455366681110745973089931363770420533157710909007176765424459261120467755781368494175845766411260444687841359758833512530193582594972269484113080513211088209137752223979135381148385849676751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 663c963a9faaca09a5bf7efc213dca7775c89446 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka.klockrike.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka.verkstad.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0035d30e56e1e1c426c46345316c32e5baa3ca161605000864954d12331ea49baffc9b35865fa661ddf1b0ddf1699e3df0b526d40313ee595721756932a2e821b1fceee3c5657482cfc4a2ff791a0ee803f7fa321542e8f6281cb0ecf1b12250bd724e42a43c0517b00278e470b61038e2a0f9e4e28d1bdc29b13fa1782f7e407f8f333867f936ee8274ad8d04811fb1277726aad78ac0f4d75287839ec090b3a71e14280f1c90805165ccd52446fa8b1b4f1f8f5a7f1821eeeafd16d426badfbe28181aed216f02bdab88d2fd84f99faa4fc26a6bf504f20260355f29c61ddcf461995b3d2d54120a29a3f874a018ba4a6b7bfd395186bd867cfa4414d7935c19