tekxiph.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:41:67:51:ba:bd:da:6e:9a:3e:89:13:17:f4:ed:ed:65:db was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tekxiph.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:67:51:ba:bd:da:6e:9a:3e:89:13:17:f4:ed:ed:65:db
Serial Number (int): 370704832424083284804347833843410730313179
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0c:df:b7:ed:4a:f2:b2:58:26:2b:63:88:a9:62:ce:cf:c5:70:75:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:fd:7c:0a:5c:6c:e1:d9:c2:21:2d:70:87:55:64:0f:7d:ae:e1:a8
Fingerprint (sha256): c2:6c:3a:7f:92:2a:80:55:eb:07:7d:99:ea:e9:4e:b6:ba:17:0c:13:94:bf:a4:dd:6b:a3:d2:36:c1:c3:87:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tekxiph.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tekxiph.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tekxiph.com
www.tekxiph.com

Other certificates including the domain name tekxiph.com

(limited to 100 certificates)
tekxiph.com
support.ufone.nz
devether.fr
itsupport.nationalable.org
eased-ui.com
support.ufone.nz
tekxiph.com
support.tekxiph.com
www.muskegonenergy.com
restaurant-bali.de
tekxiph.com
tekxiph.com
gatorzone.shop
spottiswoode.smartbuildings.app
*.tekxiph.com
tekxiph.com
atencion.traffilog.mx
spottiswoode.smartbuildings.app
www.laoslamduan.com
focusi.app
tekxiph.com
focusi.app
itsupport.nationalable.org
app.gulfbrokers.com
postal.gift
tekxiph.com
www.stellarjaysoftware.com
tekxiph.com
www.critterhobbyist.com
*.estoredemo.tekxiph.com
www.critterhobbyist.com
www.movix.cf
e2e-domain1.enotice.io
knownfraud.com
tekxiph.com
eased-ui.com
dashboard.swattup.com
tekxiph.com
www.keyforher.com
support.ufone.nz
tekxiph.com
tekxiph.com
support.tekxiph.com
piedpiper.stg.unthread.io
tekxiph.com
tekxiph.com
tekxiph.com
b2b.tekxiph.com
www.laoslamduan.com
jjugul.kr
tekxiph.com
ravo.wiki
tekxiph.com
www.mohan.dev
jabwemake.com

Certificate

The complete raw certificate details for tekxiph.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyy0jEECqyvqLrpfGeVRE
m0DtNZ41MPgTG/HfEtgp/SLcgCdtBTlWfq3dN/b+od1Cfo1wPKNcR4UFM0uZYJzt
j2xKz1nkXbON0e128fDe8S7dPiRALs4sh1NR/ze+UfSkcQu51jfSVkyVQRRl5UoK
CpYmogx2jBaxSM57bR5wCPdFduAb+SIWBVDiphyPpA14nQxs38tfCjvUjMfzCzRj
NiABkOiwpXPCTiexd51Dj4GPIdgJABMlzalZvDY/xnqG/uDKLrwS+ZmozL16gSRO
h8fygu0NrbazSRFhnr5xDM/haO4unMKsnOkgmgHDDjfOpZwB/gBT08TMVch8T46M
Lt622G8VNLaEuKrnOWzHSKiSIsNnacgAonGzFH+/XyJF+BOBx8NS+M+YZ1nfwAPd
y2QaT2IIRsRLVOUNJX1GNkHYl7KVKkLg+ISGZqAIWt3hxrV5HTtpOi61xnCdH5x8
MuKJgFWiT5VzYrkRWzEYf2jOdtXqTebNzptGNbDDZxbYLCzA75BdsA+Y//2w8iCz
Y1P1Pq38dE8V3Oil+lbZ3ONaIYxXxcndogbPUbr8LCEV8OHtt8DYWjMO7Bwh8Aln
jBMhyvn2urKnChdYUSfnLxX2bswld++x7TjdWue1is8cID2RDWlG99vv5KasHegg
ol0MJWCSABbjuVH/kxz6+2ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370704832424083284804347833843410730313179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 19:30:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 19:30:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekxiph.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828887053458984293732604036701772813045560738693171889069384996968774796482192614929957689896815190919371176083590435992789765764178335086072105772960636569510445673780924027316617607118465359627998421308325431519647463543283547046034378958555797519592506457187624830700149260030626787230128869191603618170033260512648060730392833800260560377067919060056418639735659336208515025100017163652777356680289029511799877039167587664046941878957666388596197071828000242390164013930443690659011275862836429077842376524585353322214492649790398007640585188385374092128062899685020052193919737100242054389918139356904264305664536920476139029571074385128382304851567660739284331663150978932862376401082384893094267278419354446852755475931196902073054884630929515637246790300765982137874038677934523733229295032533212248182217955543954436876690615849760001992085693301707956107694360455874197943222572389576232183676758470602911902384879892688647860594849905866012219605104874752811770222644957100529093590842139495829471584231771750664781133089844277389690660582019263250227575836925378242136627754882029106641037222298520062056231757395718991172349397276904073487496158617329891613973922475429901968515715480952170875415005837267031448419498849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cdfb7ed4af2b258262b6388a962cecfc57075e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekxiph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekxiph.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f776704f1000004030046304402206626514617041828f20ad114df6fe878480e5ef56bbc43f4b3a4040ef6f5a7130220759812ee0ce76b5d9b797da254edbe43f7f032d6a26896f4bf6c1db7d150de2f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f776704e30000040300483046022100aaf5bcf2d9664fbdfeff69903fc5157a8d55e803efe085009eb65dee37cbb8c4022100c1d2683e7d41d84fb41247a5961922b04273609a7c0cc894ae34f474790c77d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002252568201c3baf1f98c1b8db4945b0e9f5579e1b62cd332ca4a4263c7ac24262e3e6009052cfb7158e9bc8fa1c353ffe25bdfd00df98b2740bd6d58b2404dc186788d40f7aecce2e2663ded8f38c173d5651abb720e9dcdf793bca8cbe5130ea34207444b0b2d02e27798fa427eb0d9d903cefd423305e8880d54e193321945e5b735e749820fb24dd9cdbf73a3311dd834102014164bcaa465c15b2180e6c4f820048bbed303c34a35e2067d0fb8315269534362d5e305bd1fc93e65f228603c73cdb9bfaff9d3624674ac577902d7516eb50bc109d21d4f79e6e4263bc6fac71be65e6c9e192e3990d9778d6c982f4256d7daa917d2aaa3a34bf0d4e8d3a0