innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:6f:44:89:91:e3:ee:df:b8:f8:86:e0:d5:98:ce:61:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:6f:44:89:91:e3:ee:df:b8:f8:86:e0:d5:98:ce:61:d4
Serial Number (int): 261825040336168925576427661254322386002388
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:63:fb:d0:f1:aa:37:85:d2:3d:cf:93:c8:4d:39:50:67:bb:08:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:c5:74:d7:12:4a:b6:95:27:b3:66:0f:5b:ed:22:1a:8c:11:bc:74
Fingerprint (sha256): c7:a6:7a:9e:8b:d6:3a:87:ba:fb:c2:bb:96:2b:5a:33:b8:c8:91:19:1a:43:b0:c0:d3:d8:66:93:79:de:1b:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAwFvRImR4+7fuPiG4NWYzmHUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjUwNTUwMjdaFw0x
OTA2MjMwNTUwMjdaMBoxGDAWBgNVBAMTD2lubnJpLmhvbGR1ci5pczCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANYsFKbmuT7zNc3XWKpSMxrffeTpAKMM
hhaGhNJXKJyGFXYlAxxaPbzLkzpYAyAQgXmMGTvFob794uI34exK4Q9BO9QN6m0I
2CB4jXxIwRoy0cJx8CXqeXZdRjuT+FkQjrKJnD2gScbI/R4TVIzb99a95t9ULaHQ
YuN0kHvvt1PpVNBxL/UAE8IDSnTiA6/CuBX4+tF4P02pIp6ySLkT4yXjZspbukRT
M9fDW8P36YcAITCGUUWotpoas3c/9P1OL+tcruIfB/qbbVvz2qjm09LLWc7c8Xdw
z+03fAmo31zCW3lKkXV7gihXeOTW3rCOaysI4v7rZNup3SlEcVdXboK6uVtARNZT
c0v1v9RmlNxsJBxC+XjoTTrPa0AarnDyEUJ6vzGRJOTsbDNxf4A+VrB5Vi2wjTpy
8DmqJlL07JNbgo6bl+M8GmyQ9VhB4JRWnbpOxYbeeyObTZBW+7IUKiFkA8XVwnkk
vx3zn+N9pIstN8TCOuiceRMAeHa16ZNGiKdtCbMM1zryIJd6Nz1UDabGm+co3q7v
hPH0XTz/TZyiyau/1fdvnHADbcyiWH8W73sIHX6sEFXBnzKVMKbKAjH/MCnMZphk
hBzTM9Qztlqw615rQq3oxXpi6tQcQQW6bTUcEr71IbvEy14gqvcOPuwy+lfBGVCW
2OQ6d+nxDYaBAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC1j
+9DxqjeF0j3Pk8hNOVBnuwgJMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPaW5ucmkuaG9sZHVyLmlz
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFps51X
lwAABAMASDBGAiEA3ciAuBdDRJ+7No4jYYKBdPjfzklS9KJrPzc2uX5weV0CIQCH
CvdqHTKFADtxL6H6k67B1yrc2IA7CBvmgqQOFVAh3AB2AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABabOdV5gAAAQDAEcwRQIhAOOxGRyFrkCE37eH
smdnUVQ3qarmdkB9JYM13rZ7T7+PAiA888He/1GGcwApypyNrEtUDmo/paIm2e/Y
SFcmFm13nTANBgkqhkiG9w0BAQsFAAOCAQEAEkw/TgNwj5t585Z0S2oEFKk7sU+R
yYQ08Fg5H7MqfycBL/g/p9zvkQ27tZPJSGlen0TyGDo+/D8ZdEAFx3A0Kd52v6a8
qEeLgQnZHa/Yb4ebICDde9cvkxKDFVU2ccNBt+u4M/h+T+8ibcxtm785D6SL4499
Se5Qg7ViNlqT/7+S67vLBxklB3+WV+QEKA9iyNJL+XV5AMspEhxiB+W6xhU/XDZJ
jywr5nOHO1O03HtwrBpiIyStRiN+VSgTj5EpbH0a9HZszQ5L+79yCePbpQTE+nFn
YXukcTmRmopu4JqxR1Gcqk8Sdyfj4OpIqmY1CMucS0yIUiWSSHkknOQAtQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261825040336168925576427661254322386002388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 05:50:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 05:50:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873746304973732457835884259560712105426543127870923569640590645888546248437273453202275549698745067270619092673266329347114219044798796051557036076121241162545617798420093269775121809095279229431151811534986328086211280313572124682980185091998851340869321599727695122998681973132771143919049858562155834651077463705784519649065093536095590495433659702052483706815607437035506766785054667810866269692319290949499306229692961422020491176122975138339928044866603660020271750536580709194310110114533519452571200320880449196259488550682664652881454019784801931631132493549043339457975740080418321956574103908574131355148221409194862818306704241548759803605592698989557469694713649840502454406211315306370100700643808802308294318133103288496839889595680807094306843427522821865441111143772020202966536555068023593130074553469836313811326951766286629434237672222612679905715647521433436123571287977018135686830114143293239663044960082042919160826214612728691761597343102215784492769217123119304446879364902960685623222174447679007587228003058370683116911627476098538855274158418474521182723870052433814574113239617220100549655621010222950731864859745001868065762794000108540174236306531654449305014826437465345878170567227533106465859274369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d63fbd0f1aa3785d23dcf93c84d395067bb0809
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b39d57970000040300483046022100ddc880b81743449fbb368e2361828174f8dfce4952f4a26b3f3736b97e70795d022100870af76a1d3285003b712fa1fa93aec1d72adcd8803b081be682a40e155021dc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b39d57980000040300473045022100e3b1191c85ae4084dfb787b26767515437a9aae676407d258335deb67b4fbf8f02203cf3c1deff5186730029ca9c8dac4b540e6a3fa5a226d9efd8485726166d779d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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