sandrtest.xyz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f6:f8:28:18:7e:05:66:a6:83:68:89:66:b0:25:2a:ea:f5 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sandrtest.xyz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f6:f8:28:18:7e:05:66:a6:83:68:89:66:b0:25:2a:ea:f5Serial Number (int): 432488462721183099614328033232963869797109
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 36:fe:f5:64:b9:2a:85:1b:c3:65:46:f4:4a:14:64:ac:f7:28:30:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0a:93:17:09:49:ae:dc:f8:28:98:1f:5f:d2:d4:1a:1d:1e:19:1c:75
Fingerprint (sha256): a8:0c:24:77:cc:84:10:22:d1:7d:07:20:aa:87:6e:fb:69:13:87:21:27:81:66:e7:5a:f8:3e:48:6e:35:f1:ca
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sandrtest.xyz
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sandrtest.xyz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.sandr-test.xyz
mail.sandrtest.xyz
sandr-test.xyz
sandr-test.xyz.east.u-host.in
sandrtest.xyz
sandrtest.xyz.east.u-host.in
www.sandr-test.xyz
www.sandr-test.xyz.east.u-host.in
www.sandrtest.xyz
www.sandrtest.xyz.east.u-host.in
mail.sandrtest.xyz
sandr-test.xyz
sandr-test.xyz.east.u-host.in
sandrtest.xyz
sandrtest.xyz.east.u-host.in
www.sandr-test.xyz
www.sandr-test.xyz.east.u-host.in
www.sandrtest.xyz
www.sandrtest.xyz.east.u-host.in
Other certificates including the domain name sandrtest.xyz
(limited to 100 certificates)
Certificate
The complete raw certificate details for sandrtest.xyz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISBPb4KBh+BWamg2iJZrAlKur1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDcyMTIxMDNaFw0y MDAxMDUyMTIxMDNaMBgxFjAUBgNVBAMTDXNhbmRydGVzdC54eXowggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2fW1nESwLqu9C33ti65ktbRcZAWEYNfo vsMrERQOerdedtg32JjYzGzkBaLb3f4bA3oiV0McYtJGEMcXM2O2TpTnr0Le/xaG PEwC9V+3JNgJ0LY0NZHkLB9pKL1Cdviu4EBLAdyjowreprtfPdUmTv+xwW3XZ49R VcIBr4QvW7oP2uW9u1rXFbm9/y+DSaAcclzFC1TKudtAadsiqJkUPomSnVzuF8oW Ds3M8dd0p9rHPFMFoKipJVv9h7f0LReumf9z5VEmU/wRRznlTO370v2ztZkTcoIr qsy3eYZW2YvWwXLLr+Fvaa5V9zTiii52rT/wTJkwan6e3Lpp5eozAgMBAAGjggNG MIIDQjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDb+9WS5KoUbw2VG9EoUZKz3KDBh MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wgfwGA1UdEQSB9DCB8YITbWFpbC5zYW5kci10ZXN0Lnh5eoISbWFpbC5zYW5k cnRlc3QueHl6gg5zYW5kci10ZXN0Lnh5eoIdc2FuZHItdGVzdC54eXouZWFzdC51 LWhvc3QuaW6CDXNhbmRydGVzdC54eXqCHHNhbmRydGVzdC54eXouZWFzdC51LWhv c3QuaW6CEnd3dy5zYW5kci10ZXN0Lnh5eoIhd3d3LnNhbmRyLXRlc3QueHl6LmVh c3QudS1ob3N0LmlughF3d3cuc2FuZHJ0ZXN0Lnh5eoIgd3d3LnNhbmRydGVzdC54 eXouZWFzdC51LWhvc3QuaW4wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6 cOeySVMt74uQXgAAAW2oT8hkAAAEAwBGMEQCIFqLWW9ThnJFMLDqdNZ7Pg2kr8/d 84Tw/WDL4iNklLEUAiATygArrcmMoCoOyXnHJMF3a6QBg2nUAeNS9MYWNucUmAB2 AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbahPyf0AAAQDAEcw RQIhALPdtBo1nnw1O/u339qS+FH6koDsCy3Rf9BqnDg2USlRAiAviRhj+dY6gsdG cGXeHTrTtOCXZpoY8t8z+FlRYzQKlzANBgkqhkiG9w0BAQsFAAOCAQEAbk9YPbtJ CMqQPNDMyZYSU7bH23SA8a2JuOeX3gWfwvvy60h9SqwUguobtqlMejBvTeFpMuDD Yh+fc1Bz5XZUano7mOxmJQGOExi3021k2M3rq0n6sLqNlr78bHC2HTr1QIapHQd+ H5ploG06hEtJTrMhFna1VR8Meo9UQQHJbvbP1WW6+7pNyAEdxZhfdr1gprLq88cv R53Z1XBMovCtqADlx4unJzIm0zvXS9+L468hZ9MFyA9ueUQFcPQ3WabKnoF/sB+/ HGdWO8nQmz7sq73OkKwHYDl/PVpOqlMEXtPGHqnCkWQCzb9iOCBnEy9QdieqkL6W XzB/ckjqGQnfgg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNn1tZxEsC6rvQt97Yuu ZLW0XGQFhGDX6L7DKxEUDnq3XnbYN9iY2Mxs5AWi293+GwN6IldDHGLSRhDHFzNj tk6U569C3v8WhjxMAvVftyTYCdC2NDWR5CwfaSi9Qnb4ruBASwHco6MK3qa7Xz3V Jk7/scFt12ePUVXCAa+EL1u6D9rlvbta1xW5vf8vg0mgHHJcxQtUyrnbQGnbIqiZ FD6Jkp1c7hfKFg7NzPHXdKfaxzxTBaCoqSVb/Ye39C0Xrpn/c+VRJlP8EUc55Uzt +9L9s7WZE3KCK6rMt3mGVtmL1sFyy6/hb2muVfc04ooudq0/8EyZMGp+nty6aeXq MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 432488462721183099614328033232963869797109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 21:21:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 21:21:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandrtest.xyz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24850187757747340121709789309745694672593197713227342101269901498056036923018065010096135570656513065871263036185847501674358790506972504682247038185501558617386983649117729901160591572702311623334454743793244584770855176362438454064661000002787166634428705288969942210264167984922403054056360057399853177946371478944469158295561350779444581492533273841395149609041794161111713375014575879811867763910378376492973216447927390228782806415378638376509968636101176270621099086170974411598915581407340218429767694666347000665469097494694408198431628604880757230385514735687239380483712405132007357276198778506785971366451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 36fef564b92a851bc36546f44a1464acf7283061 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandr-test.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandrtest.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandr-test.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandr-test.xyz.east.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandrtest.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandrtest.xyz.east.u-host.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da84fc864000004030046304402205a8b596f5386724530b0ea74d67b3e0da4afcfddf384f0fd60cbe2236494b114022013ca002badc98ca02a0ec979c724c1776ba4018369d401e352f4c61636e714980076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016da84fc9fd0000040300473045022100b3ddb41a359e7c353bfbb7dfda92f851fa9280ec0b2dd17fd06a9c383651295102202f891863f9d63a82c7467065de1d3ad3b4e097669a18f2df33f8595163340a97 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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