tekeli.li

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:85:5c:34:22:3b:73:84:4d:60:8c:29:43:9a:bf:0c:d7:8c was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

tekeli.li

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:85:5c:34:22:3b:73:84:4d:60:8c:29:43:9a:bf:0c:d7:8c
Serial Number (int): 132492400401606057190835796562502856005516
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 6a:7b:39:c4:2c:62:3b:4c:f4:b9:d1:9e:b8:bf:67:2b:1b:1e:7c:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:db:bc:8c:84:9c:b7:40:01:4d:5f:05:1e:cf:da:2b:e7:45:9e:b2
Fingerprint (sha256): 2d:71:ff:81:65:b4:6a:1b:69:8b:e8:ec:6c:a9:22:86:3d:27:61:8b:25:27:93:e7:28:f2:ef:45:b7:a9:5a:46

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on tekeli.li
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

tekeli.li
www.tekeli.li

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAYVcNCI7c4RNYIwpQ5q/DNeMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDQxNTAyMDBaFw0x NjAzMDMxNTAyMDBaMBQxEjAQBgNVBAMTCXRla2VsaS5saTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAL47GcYSqbfmV/3ZZpBjlR2jOpaT7kDNypiObZkO /xKZ2YcVWnQ5JR4LI9fAoN34MUXtRtgxb9wmMDX5A5pR3RXyH5ziqFmF1SOfJlF0 sYMgwh+9C97AMCFBIEeCTLAgScoY6eY3tvg56eV1tzMrrqCv288mOEzz5m3qcloz EeqLHtjw1y19/eNT+EyIBJhqW4zuPzTfwMUugWjruA/abUD3pDX6tjGKg5qURXLn hYOrk7PqGCuA/6JAzT7TC66xZjRvKAfXYlaLhItrTWt/cwTGsI+s9kw5Ns3YIK/z yMhf/QH7m3B1eipyUPVFqJANz3GOMJyvmDQP1t/wgabNPrY8ns3ZNCdx4bvXmuyR evp6tSmpjS5TxA0I/25d/WpOdzN9X0BbjYAsf5ars+8j77Vtw7HQRw4t0KWbhRP2 Ou8wEvi20f/uYdPZvm0OpcQzeJ074MZLkpCdfyAg5qigbiBl/MQ3ROZR+CJJkIsv lFjEQP/fu+ofpk9UZAmR2Q/Gwtm1telxNKR3Vz9I5fve5NFCdr4femomMWC3Srr9 Qckl19qiv6IuEmJg8MUZ37jaPg48q8A9ZwVG3r9YZgthkMUP0zzOlZ84yOc97HBV en8wbpn2gdsOuC3DC3jVYgxHZ57nXyVs5mbpKTm4V6VDEeiKXZ2gZngdaqeF0PtS p86PAgMBAAGjggIZMIICFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGp7OcQsYjtM 9LnRnri/ZysbHnwVMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAG CCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxl dHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5s ZXRzZW5jcnlwdC5vcmcvMCMGA1UdEQQcMBqCCXRla2VsaS5saYINd3d3LnRla2Vs aS5saTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEF BQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVw b24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0 aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2Vu Y3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBgsu3n/ffJ 9a/EU2CdjkGCAeUCVRnmJx1bcmzlUAa+uUOa7C5duLWZ47aZwsjuth5r6l/34VT5 +qdixMosf9TFzLAC4Bx0RL91ibKwWUHDSM73v2MiugH9TQmRMqvFFLyQSZs0GziB w0dOpfOtdrN6Fo0lte3y/pRY/0Zo1T1VAUX4Qrn+zskXhWMt3pdKekDBCKnoCwfB tCLAMQlKjXLgaPQmmR+ddhnLQ/nD+7BJiN7GwIyEKzc+OXbbJCj383KBe0nnQxh7 GeEiD35BiP8AujPTdDdShEkoPIqRv7S6LTkW7sDR6AFN1iu7viZG+68ctJxShvz7 d5nQrhx5F4T1 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvjsZxhKpt+ZX/dlmkGOV HaM6lpPuQM3KmI5tmQ7/EpnZhxVadDklHgsj18Cg3fgxRe1G2DFv3CYwNfkDmlHd FfIfnOKoWYXVI58mUXSxgyDCH70L3sAwIUEgR4JMsCBJyhjp5je2+Dnp5XW3Myuu oK/bzyY4TPPmbepyWjMR6ose2PDXLX3941P4TIgEmGpbjO4/NN/AxS6BaOu4D9pt QPekNfq2MYqDmpRFcueFg6uTs+oYK4D/okDNPtMLrrFmNG8oB9diVouEi2tNa39z BMawj6z2TDk2zdggr/PIyF/9AfubcHV6KnJQ9UWokA3PcY4wnK+YNA/W3/CBps0+ tjyezdk0J3Hhu9ea7JF6+nq1KamNLlPEDQj/bl39ak53M31fQFuNgCx/lquz7yPv tW3DsdBHDi3QpZuFE/Y67zAS+LbR/+5h09m+bQ6lxDN4nTvgxkuSkJ1/ICDmqKBu IGX8xDdE5lH4IkmQiy+UWMRA/9+76h+mT1RkCZHZD8bC2bW16XE0pHdXP0jl+97k 0UJ2vh96aiYxYLdKuv1BySXX2qK/oi4SYmDwxRnfuNo+DjyrwD1nBUbev1hmC2GQ xQ/TPM6VnzjI5z3scFV6fzBumfaB2w64LcMLeNViDEdnnudfJWzmZukpObhXpUMR 6IpdnaBmeB1qp4XQ+1Knzo8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 132492400401606057190835796562502856005516 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 15:02:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 15:02:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekeli.li' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776074207817875681830732277271863473809857885561983830792500938760964360299431383624149498390888613164880917935397817951641328747099230199547410312588121932627423938372407950706977024478657805321768667981181633950923608297861619655969948098016538810870725622374103023853336763277246773466364587280069441049190049212657522370465105228598057794693085755910105046782917205212253062404010284184668386819644237746119472362894136778467230723293328732502038738184141178253856896443888027953369269313735299476767125490094084245256595772499520983624327247811406345655821123358630879699177371509516675250561991519964060120693444368249799332729130474224075733068227560936226151547257203860894290778105795099697369437261385615595285500541558884130375723600040007626503297580386199801662881886431409479585595471232774109831257168074370532441277346865153655674162900202201345637090395294103005993752133917890870454954141403261871230366048586982375486913264507161837805157798936833368278413269093792252357853242802234163403740061993809929857525563698718872169900195007512893939932323210150859368187967188722157978891019614252987918108493775244929510158252278948942032733794245534251404942818635802610617119915677433711570650445811041635872306351759 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a7b39c42c623b4cf4b9d19eb8bf672b1b1e7c15 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekeli.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekeli.li' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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