project.ifak.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:85:fb:c1:6a:62:d5:48:23:5d:4b:0d:3f:ff:ad:a0:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=project.ifak.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:85:fb:c1:6a:62:d5:48:23:5d:4b:0d:3f:ff:ad:a0:dd
Serial Number (int): 290438953496445221491198734263010196299997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:58:11:88:ff:62:f0:b4:33:21:00:ee:f4:66:14:de:4c:21:7c:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:3f:0e:9d:05:63:d5:4e:b6:dd:69:70:15:74:bf:64:33:01:23:d5
Fingerprint (sha256): a5:88:e7:41:aa:12:3a:60:c4:6c:8a:f1:15:a4:db:30:fb:1b:61:26:85:92:dc:11:8c:d7:d5:43:5a:40:38:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate project.ifak.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for project.ifak.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

project.ifak.eu

Other certificates including the domain name ifak.eu

(limited to 100 certificates)
service.ifak.eu
ifak.eu
www.ifak-ts.com
project.ifak.eu
simba.ifak.eu
project.ifak.eu
exchange.ifak.eu
exchange.ifak.eu
project.ifak.eu
ifak.eu
project.ifak.eu
mx.ifak.eu
exchange.ifak.eu
ifak.eu
zebra.ifak.eu
www.ifak-ts.com
nextcloud.ifak.eu
zebra.ifak.eu
fw01.ifak.eu
service.ifak.eu
fast.ifak.eu
project.ifak.eu
project.ifak.eu
service.ifak.eu
exchange.ifak.eu
zebra.ifak.eu
exchange.ifak.eu
nextcloud.ifak.eu
service.ifak.eu
service.ifak.eu
mail.ifak.eu
www.ifak.eu
www.ifak.eu
nextcloud.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
fw01.ifak.eu
project.ifak.eu
mail.ifak.eu
mx.ifak.eu
project.ifak.eu
www.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
project.ifak.eu
zebra.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
mx.ifak.eu
service.ifak.eu
zebra.ifak.eu
project.ifak.eu
www.ifak-ts.com
zebra.ifak.eu
exchange.ifak.eu
service.ifak.eu
service.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
service.ifak.eu
ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
service.ifak.eu
www.ifak-ts.com
service.ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
mx.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
www.ifak.eu
ifak.eu
project.ifak.eu
project.ifak.eu
ifak.eu
www.ifak-ts.com
service.ifak.eu
*.ifak.eu
www.ifak.eu
project.ifak.eu
zebra.ifak.eu

Certificate

The complete raw certificate details for project.ifak.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6QaaJcs/0wUEl4/BhWsu
QAALWmwG2kzmXtbEq87rTVx8v7EyvNBEqmpJMUCc/S66WWkuC/7OO3+PQTGgoTau
QgkhzQ0uSx7P2oap+GD7b5hjVfngN6eBpE5xNKGNrfCuhSr6ztRqzrGjwzMJGCDw
O66dQVgFJFtE/hFs/SlNtJPyN82kWoPJxLPlbSgC6yMbo3ICaSX00mupkEiqI1pW
d4nVzQVbTfokh4FgZTcoAU0RGxOHUXEIewKZJ6IM07d9yYOlq+U19/quFcbo6C8S
BTEshV7cfhR/Sel6avNuHwhktMMQ/MQxfGkOJ+RGTJ2qSyts+sY2wFCfMiRjGIXk
+qKnJInqz3J0ZUrUA/hvBwHQ+GhHe9uC1oJGfIXJ2RdvOAuv9rcgBxsiAHbKKeIc
d5UU3fg0wZoYMREYF+bURelTbFgcS1tOzHws19XtHGY5P2QeA6p+VsO/E7K5txuM
CfuUj+yTdLv32kgWQ9Jc3LIxkd23k1YKo/CsM17YGB0SQB8nP9JapHqvWUsM9BLF
kqYDQAWVSf3RL7e4cRcQxq+Twyg4h0BWa8SUdZZlzJ4Kyp5YSK41OHuqqhWB3las
cUWpipuKj8Go/DIN3HY0D/zt3LEb0XyVn8pntOjrDAzd0MCH5xC9PgfC4afE+huL
iwtIzOMc/j6kh3+E7UzxX7sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290438953496445221491198734263010196299997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 03:47:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 03:47:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'project.ifak.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950662280262681400499618352599615866755315986801641512639845854024054159007185814249273295372326588987199579808585561267331552356712034843463719403844155152645576579222490833660037595559079189008812522002617179505492415254555899711135237796504287342638600260438901114786572946705154018283919963761537099943310248455323106834818697209629139439574266367711903654122386439827967946484736525652509665624562023424726871248984337193655859465257129726675329220550131496459624361104735389624473764779614235089546699824252904392966955901573697481120139329424764180328882883260631278303898308792957685244803734749557245887769251861373548689091778368623511429814139948826698120600326217941508563994259527999771091407547551978257583528325047917332593537624460878043168819441047605850422256723081831733145846311795712822399428935507234974464696430129798150851008638687550161824777206583861666138247001768480433548606628226962522957723220442527158231651832938783772175718973883557762487922511232455904084083609070070712449310441989464220914201359411999304445664420337879551916737520613737412326341926022791394655924069315445183259771083298010821773465495573571519229505447231440735505621874692064576939322060572242929438357101918133658581277433787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39581188ff62f0b4332100eef46614de4c217c71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.ifak.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165508236e2000004030046304402201af0727e5d5d46a2b782de8595ee1140650930c79e424f8b24a1b53b8abca45602205ba750242316d52b8f1e9033d4595b23c15b715224f87f7247a862c7a8c4726a007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165508238c90000040300473045022076eb561468669ffa060b7b9f385f5d756ec8bb498281b084130fac85c6dac3f8022100e5170eca2a78f838499d6bba81f2295a5a24be78b244c51f75552efbe598b1b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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