lycurgus.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:6e:a3:7c:b0:60:3b:1e:e0:bb:09:97:19:8a:50:6d:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lycurgus.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:6e:a3:7c:b0:60:3b:1e:e0:bb:09:97:19:8a:50:6d:e0
Serial Number (int): 321713900693203859384512278274291371372000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:ba:23:a1:96:3b:f8:90:7d:2d:da:ca:d1:36:d0:a7:e2:ce:8d:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:98:12:ed:20:89:b1:47:54:c3:11:90:07:7f:60:5a:0c:9b:7a:d3
Fingerprint (sha256): b6:25:76:5e:b1:a6:83:af:1c:66:e6:37:47:45:b2:54:4b:16:2c:d1:6e:c5:0b:a5:e5:fc:1c:4f:51:75:30:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate lycurgus.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lycurgus.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lycurgus.nl

Other certificates including the domain name lycurgus.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for lycurgus.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321713900693203859384512278274291371372000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 08:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 08:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lycurgus.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926858703353786623214902808505003195288591288842635759206887319476365280731978826350179986248523125738558123503601091371602087690304894524262703079122034242066852851396529337797514801111401287726128763897607921138042370401502982814565671106728795782256395895564649998327024478503985865617422850401063811555982512924954196110455910486560777810039499511583260297028594043425642633546091028620980119105203605139377004172162430492299953712209664633842546592489554072293602619005736839719696032948276364071172927086799709006509503866513330068601461040155918029236240412194931200704974290502576274844722030468264472250706355499505681608546958548259162202494475656937072187051198405860380210186449286525113207301062312443794894117313686635501168802452964948662184145249937921165436910829299366893653410114673314051149639390208002905441728647279796368221969680829354576667748251855471441155890380892455804392495100659184125287768226688759026317383262183223920224155393980580575626991280757449660727371662045966306253289916882457064562335218869623145225790055994663549822633004582236126962643648096469847398668499273227850917859403401803604124152233161414787918771808439583438491643852884555555361673142637099912924030919567619255916763800519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6ba23a1963bf8907d2ddacad136d0a7e2ce8dea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lycurgus.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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