home.tabligan.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:c0:bb:82:bf:7e:b6:a6:60:5f:e6:22:3f:bc:ef:18:09 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=home.tabligan.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:c0:bb:82:bf:7e:b6:a6:60:5f:e6:22:3f:bc:ef:18:09
Serial Number (int): 263294455016473725553921574473595515508745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:d6:fe:10:14:2b:e4:51:8b:d7:8b:3b:09:54:17:72:5f:f3:2f:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:ab:a9:30:73:56:b8:35:99:70:58:59:15:69:b7:79:7c:a2:c5:9b
Fingerprint (sha256): b5:30:8c:e3:2b:fc:64:2f:45:ee:54:b1:48:91:cd:2f:ca:44:4c:5a:ca:e9:08:cf:39:5e:92:20:6e:ee:10:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate home.tabligan.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for home.tabligan.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

home-server.tabligan.net
home.tabligan.net

Other certificates including the domain name tabligan.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for home.tabligan.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263294455016473725553921574473595515508745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-12 18:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-10 18:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'home.tabligan.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727430814719415226004078840344875486925620527834393045653270914560672633201642521542664953231096172100595506001574196603441032194611190193606689274368257280240568991779399925008914298554254005869961908614019269482070747326419603402712535450053488273873782559503768451067045129957523225658398697320203333187735928531158682237420831513288653480901736471057318281190461180646915890865518107124766713253197584684954245051671238201200789290686041556073255476597975956824386849336463115619075250212160454288792835242028456372363482888045786356974268016229711242358638668391723878927334797404912277323190380840216095354491992645084856926923296515364547959569323816013827455153607683854929302513581919961494305771294857914880061822175282718202684783212574528480702444700812021042864393989755287893285591059879257138849637729050228889556857598983844352834583602658161832418361153134582334918222399903340878941965962045371058896186905426085533948128718548178338585627476874015202508168178530771689137149819017750998212264157361995111608199762431100009633300885504314370618024546719706683632875576270225296845546979777874065483750615185130982474403476491620908298318832922881785604846350179025882493175728531394607520930505771844818864030696771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30d6fe10142be4518bd78b3b095417725ff32f45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-server.tabligan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.tabligan.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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