tekxiph.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:0f:aa:62:c0:c1:86:c1:05:ad:0a:44:19:fc:ca:49:dd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tekxiph.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:0f:aa:62:c0:c1:86:c1:05:ad:0a:44:19:fc:ca:49:dd
Serial Number (int): 347789402106549676193438492176518451186141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:0b:03:81:4b:ff:8c:e1:9b:8c:13:57:c3:ae:5d:dd:af:eb:ce:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:49:bb:e1:80:06:1a:7b:cd:a1:17:fd:83:14:b4:79:9e:1f:e2:a6
Fingerprint (sha256): ab:d6:2b:c3:de:4a:b0:28:12:b1:40:72:87:b1:fe:bc:b9:06:88:9a:8d:bc:17:67:98:76:8b:8f:06:ad:de:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tekxiph.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tekxiph.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tekxiph.com
www.tekxiph.com

Other certificates including the domain name tekxiph.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tekxiph.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwN4o93TSn6lIs8dA+33B
6j+pczt/Nygp4QG+TiqheVXn2tWOAsCB8UkyneIvUBUaeKer09bnNUkw55r08zvB
JQc5M+ziPu3eFFbchFNKFSV3T8OlUcc9Uyv/R6Cfohp5eI4UZPoepaSrob5/XwbZ
gUq3FDZL66ztxi1JPQW5xNZpoLY/VtudQzXZCOIbxo3HHfwb/t3cQBVcXQLvmV1x
eYiq7VwKuIvdcXNafr03WDpKoQTj4fVBEfRMAhGc+V23wXBIAOOjZWXuNX4MitAN
Rkdzu2cNdPWW4126v6x3NF41KPmAxSpgnyhdpowe803G9PV3mDhr/QBZYiMyIZnk
vGtm6EkeAwo6Jmh6J2sjbxmk/DdwSWCRZVJJ5lVoCuZPwKZR2v2KNeqmPodv+9lU
dQ8p1uWJKc8zvtKkhtZIDulm8qCViqkAmIV7+lauPFlqe9Ut2CWn1EDxiezWmt4z
ge3SKtdNcsFcBrgJDR1jJu3TzngoRSwbj5qgjqrYfLqj5TwKb0syKdMiV7TieySS
KLUNqREFNK4rIVKulLdmSbJxk2dfV9260PzEk6uWcSZgAik4EkyqtEcXw/PiVEh9
nQSJlzWq26ScggASn0S1L+XTIFNt4ViCpScx6dlOtOVy6B6bzn0P8WZjztsSBxYl
5jqRnxAtM9nlZEpTFG5b6UECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347789402106549676193438492176518451186141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 11:53:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 11:53:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekxiph.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786832027590134583534241322208529089289199551500213721654453659061958338908362186250114489276215857774420606476940150702920767040054506254674535481895523938784560167040126995892938744748115961703873666713010268873492403029212138136851872960726633268124717486671587970154319432885426892061294583944602390976547329063283594434386192850715472764062842070412223701513114593541066200546430132310504138948482750732039752024748430742089278379136873156720370407236839331160904227121453858610328107466964123862076231372834187461253486309293660435605271670481149905230466099676168832933470424829975147905285439549370247670431748788810467404166653828681642787987995356020875894123414010628161742174688522301605045263929592125992927920632489508584179652097170234878433422335908577650114469432949009096804685613961319321247452139092885496852447755058169864742989112190133300042606024904543018688889387734623234971384437678696845371041708039776271477755496778121801254906829284730623891905368759985182025002324608923083451515715475027085040006036313661242559659605787484282497945586424864524660539565036161796031959739872701470343163779553243602160817492924598520411257648987373419292094399709233333470068517763705028173039179605294520071721052481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							170b03814bff8ce19b8c1357c3ae5dddafebcee9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekxiph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekxiph.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016726e22a000000040300483046022100f07a2129ddb3707f650ac6b31927ac35efdfc1ea9a5d5011d3bbfbc710d82e33022100d353bd99e21d9efd87282b25831b18ae6e02579b3d2ae5433e23cedbd64cbf23007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016726e229af000004030046304402200b157cfd615b3c33e89625f88d723b7133dce31bdd251a9d66cf93bad937611d02204c717dfba4039730608fa3a72f924c28f9f1fff67c44dff0cbabd25c551533ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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