5124001-dev-intra.solr-01.jweiland.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:d5:af:b2:2a:d9:a7:0e:17:05:09:1f:ba:56:78:7d:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5124001-dev-intra.solr-01.jweiland.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:d5:af:b2:2a:d9:a7:0e:17:05:09:1f:ba:56:78:7d:6a
Serial Number (int): 318788333266714684957359450191357908909418
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:e1:01:fa:62:bc:ec:8e:35:12:45:70:1d:44:e7:d1:31:b7:ce:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:89:b3:b1:58:1f:2f:2c:96:7d:46:5d:82:4a:d6:4b:7f:63:b3:74
Fingerprint (sha256): ac:09:69:26:98:3d:8f:58:ea:ee:b5:c9:b2:cf:0b:61:c1:15:9e:58:b2:34:6d:f6:d7:11:35:43:0e:7f:d6:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5124001-dev-intra.solr-01.jweiland.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5124001-dev-intra.solr-01.jweiland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5124001-dev-intra.solr-01.jweiland.net

Other certificates including the domain name jweiland.net

(limited to 100 certificates)
*.jweiland.net
900618.solr-04.jweiland.net
*.jweiland.net
5150001.solr-01.jweiland.net
*.jweiland.net
solr-48-1.jweiland.net
5089119.solr-05.jweiland.net
11477.solr-04.jweiland.net
solr-48-1.jweiland.net
*.jweiland.net
*.jweiland.net
jweiland.net
*.jweiland.net
jweiland.net
*.jweiland.net
*.jweiland.net
*.jweiland.net
5124001-dev-intra.solr-01.jweiland.net
solr-410-1.jweiland.net
solr-410-3.jweiland.net
typo3template.jweiland.net
9649.solr-01.jweiland.net
mk.jweiland.net

Certificate

The complete raw certificate details for 5124001-dev-intra.solr-01.jweiland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318788333266714684957359450191357908909418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 22:18:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 22:18:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5124001-dev-intra.solr-01.jweiland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904224144453709843451013172851345645707445796074352779191967691734080601615493223196106534852465864483004301000174999916851678321997706681393713217478799618390021456692451127575381028445415635527179226711962396271178431883095056601063197867035895212593111034872215922083968255205973827129661391745236108024998701396562061493666143920962019965374860671856309382666733505449142884076431458691511747900023301625335632568504774219100988070262474303008118372427873464349355047762548589973244729891333790290334653069432890408793027856507851736274167656690566153134275116034079793789292362349746335078366079850438133088686664013242922146010613047709508204216991100411139757342693186082499643251016627371496090146917139247358384532185591530837666437168435179882682252511167886561749550781886518772673497743602157091099893171119455142625047765158141125072547745833862700309054367630062158040664138753621682852416829897421803857377761018544266311170350143139470769966558687354044034660508065545950776668243473895315215248046022455439963211336081162609641832705982218919947532465581962060060785886623341764158561205997964346902713009916423113480027582306652044258181791676213244518022423911378863418501361573865735479328405063221300077951676617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e101fa62bcec8e351245701d44e7d131b7ce41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5124001-dev-intra.solr-01.jweiland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016deb76cd3b0000040300463044022038192e010b9ee802ae1aeb8af30413ca168b81b055380ff12ea44e0c7802a65402203a0e6cfe9c88115ecac27838b904bd7ae5089125292ae5219908323e55509c82007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016deb76cd08000004030046304402206c23609382d07982bd51c94eaa9227e54997c7dd4de458f880d758ae98d11e2902206d1c6c71e5dd41f621d7fb03168328031794631de20f2090ca2cd1b178395a6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0093d6805ae41f21842cad37325c9c9ddb967e447cedb2c563eef04636dda12cd0f05ceb1cac06b413334c6751ca0a2906e896e42b6905f45c56ab6c46cc04a0e873740584d901786d22ea795c71573d05986df30405328762a9ced43b660ee9646f143a1b3e233710c52d15a48deff46ff0b6c7cce80940c9f2b49a3f6c76258c8832a027768c88186dc8596c11573466b03596c8b8d912a96bfd040901d5922445360366f2291c9db5e9e89a835723ab5cb777f0c8a098c960c1b430760e427895f0afbbdacd457c55095f397e96a47e099f06339491ac551fee81953faa5cbdcb4a3382ae572945c574296abf8996cb0bb6663da73d02405394d4120a953c0b