ipa.ivan.chambana.net

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:01:d8:f2:1e:4d:b8:6a:ab:5a:86:5e:54:5d:7e:48:6c:03 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipa.ivan.chambana.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:01:d8:f2:1e:4d:b8:6a:ab:5a:86:5e:54:5d:7e:48:6c:03
Serial Number (int): 87740938696240423187207631977907569060867
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 4f:c8:a9:f7:bb:d5:2c:27:23:c7:e6:e9:75:97:5d:c7:a9:f3:46:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:6b:72:90:5d:69:96:93:6a:24:85:49:13:f8:5a:c5:67:9c:00:1e
Fingerprint (sha256): c6:54:df:25:80:eb:50:78:ad:24:bd:f6:3f:60:38:e7:81:22:86:09:6e:2a:d6:94:24:fb:85:71:67:4d:f3:95

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate ipa.ivan.chambana.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipa.ivan.chambana.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipa.ivan.chambana.net

Other certificates including the domain name chambana.net

(limited to 100 certificates)
smtp.chambana.net
chambana.net
*.chambana.net
chambana.net
smtp.chambana.net
chambana.net
maryleesargent.ivan.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
smtp.chambana.net
chambana.net
smtp.chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
aware.ivan.chambana.net
chambana.net
mail.opentechinstitute.org
talk.ivan.chambana.net
smtp.chambana.net
chambana.net
imap.chambana.net
nonconformity.net
chambana.net
smtp.throneless.tech
chambana.net
matrix.chambana.net
ivan.mayfirst.org
smtp.chambana.net
lists.ivan.chambana.net
chambana.net
smtp.chambana.net
mail.chambana.net
smtp.chambana.net
ipa.chambana.net
smtp.chambana.net
mail.chambana.net
imap.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
lists.ivan.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
starbase217.ivan.chambana.net
chambana.net
imap.ivan.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.net
chambana.net
matrix.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
ipa.chambana.net
chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chat.chambana.net
smtp.chambana.net
chambana.net
matrix.chambana.net
mail.opentechinstitute.org
matrix.chambana.net
smtp.chambana.net
ipa.ivan.chambana.net
ipa.chambana.net
directory.naf.chambana.net
imap.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
*.chambana.net
commotion.ivan.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
imap.chambana.net
ipa.chambana.net
ipa.chambana.net
chambana.net
acorn.ivan.chambana.net
wiki.ivan.chambana.net
imap.chambana.net
*.chambana.net

Certificate

The complete raw certificate details for ipa.ivan.chambana.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzHV9fqdQj2uV4HdUMikW
oS9fJ4q9gcjHzafXzT4MhBZ+EVvGr+UsueezBiRztQglCTKejgqkjapu65i6Wa+l
QDyZaJqU/ZuO+QdaF32IGBc1T7CqoKT2bNutg6G5jxakMOIXIWICdiZkm8fEBPU0
OH/p+dLQOWAfHU34TR1/npgKICRdT5WGGdNWSgiEwLEKEP8wRejDa7L5zvR4L9Da
HLRh7RIpur/nvgbtcPPQOtD0j2pQVd6ybxzn7QTdiU01+a3KVJEIUsWeBUU/0/tb
JyXJDMIYMHmRRr+LyGh6sYj1HitbS96r1bIMWw9mudrBIjqDlmuPJG+9Oon1yzsH
knikMVPo5iNp7flsu9rvd20BwfdLQ1vO00o1k/VvtHiSBLzfINnkcLQd16IxeV29
zWLEL5JU5SLUb7kneyhxMt/yySM74c1aAN7Q6VUW4Z6qQIOwNPdVceVh3LnnOWuW
QS56s7j16XOOMJYbvn7MfKKu2F1ueGkjnfLbnMp6XYHdUFBNHtw3pvnhpTmmp/32
CIQ9Sbj/Fi0qFdDT3uK352FgzRx7f5NLt0loD5yqWfCeNjzperglHTSgX557YjjX
EKyAjbvZO19sZYfFG3ymtRFjlZ3BYqm5gL/+4QKiu3qYA6qdVcnvERC5Mnz8XOEp
z2hVvKH6A+v+vPU5CVKtUPcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87740938696240423187207631977907569060867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 19:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 19:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipa.ivan.chambana.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834119726805412957910078388377887919571013398345358729006356806321580664675545146735317636644393165858284426762274411927275764644558163032724195803253674605331542744917783420201065848710482873600030639656334428474147983741620982360353256314594711463900919390071844385732244774262499190668545145705854905220106413183295629853012623814013261033737724026785202480700546025151442402951608208586403198257047993848475515347421412670808350837949705827806141514385632121474496739540374395665833606055886215628811019120414956467514710691965820420327610044378500817476961728863404721086556005598523215459895818822783618741991971439691842039379889989408322009712310053724374816083539786094926652414393989915683310982993248579692327030521410320335103887597066393798934776760999675586982941797970862793456630259874014010592821853121722707431091620054676707034125573107233878145059149644934970080181645693211057698248325005373177305282583283747770586279830849635436398097478860638498319907620125093490124719197946867128488603224416478560380643017823067681365844252315783985560786913939922991408277706863215507331690581314105702006564064006966015126739830190999344483767291007931079764369378503270616008546753126774768639162958596320264155806126327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fc8a9f7bbd52c2723c7e6e975975dc7a9f346f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipa.ivan.chambana.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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