fnord.vernetzt.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:1f:48:ca:c3:c2:1e:ac:6c:46:11:8d:b7:64:6e:33:c2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fnord.vernetzt.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:1f:48:ca:c3:c2:1e:ac:6c:46:11:8d:b7:64:6e:33:c2
Serial Number (int): 329775197572188826797502500052297141072834
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:cf:d8:74:37:45:34:f0:bb:86:3d:e3:33:32:f0:3c:81:a1:bb:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:e2:3a:e2:40:4d:56:d1:67:d0:70:05:03:70:a0:7e:f4:3a:53:54
Fingerprint (sha256): c9:fc:b2:e0:49:df:28:90:82:a4:f5:c3:1a:de:53:79:c0:ca:4a:0d:e1:10:80:c6:d2:35:43:8d:e3:b1:1e:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fnord.vernetzt.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fnord.vernetzt.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fnord.vernetzt.org
kontrapunkt.vernetzt.org

Other certificates including the domain name vernetzt.org

(limited to 100 certificates)
kontrapunkt.vernetzt.org
nexus.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
trac.vernetzt.org
mail.vernetzt.org
fnord.vernetzt.org
webmail.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
webmail.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
kontrapunkt.vernetzt.org
nexus.vernetzt.org
doc.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
doc.vernetzt.org
doc.vernetzt.org
mail.vernetzt.org
vernetzt.org
webmail.vernetzt.org
nexus.vernetzt.org
gitlab.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
resources.vernetzt.org
gitlab.vernetzt.org
kontrapunkt.vernetzt.org
trac.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
fnord.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
doc.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
nexus.vernetzt.org

Certificate

The complete raw certificate details for fnord.vernetzt.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDfLAEEgt0mEtAhcqIJV
qPAngXThh6Fh69hmSua35fkm569lVT1iGHJpaZhqooy7MCsUGGCFEsa2EjULwIZz
WwWMESyxxOecIQFxh9OA6en68d7lMyMJXv9GJ2YJ59u+BvE27uRtI1NCuU0H8Sc4
jqH1mS+jDoVLMAhSht7WxX+T/PGnVJEbYLXz+N0YxIoChP3ePqpxdgWll4UNinfT
fg9dsgO38zEtzLT9ItMXEOmVIGTLJBWX7d8B90LGKfHzKeUSovNsDvQJ2dznylvm
NjnYF4C72AfMGhj2v/3FMxgSzSJmhPvJsa8HM8XvXTI58Pl9o8vSgz/qTdYNJ3cW
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329775197572188826797502500052297141072834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 05:25:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 05:25:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fnord.vernetzt.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23255360653966002032732717619994994807143895038987314316888991794135165797640872565302245235173355571699604251259208969012216131056942072739397340734314919577461906591427974488039834859573246054259267706136078777539828961783647244795938672873106776804316487195299822273011476363023913757146350308074252458720889599894190777314822348983418624311248912138557414061414045284571019389159242057539345894997335345311825748498324868290421163290332333954440929649879555135246807273539981323797807710716738040188642826825361404541327750422935567284972538616524338861312930811535266861800058596940171894030828069880807762106039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32cfd874374534f0bb863de33332f03c81a1bbed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnord.vernetzt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontrapunkt.vernetzt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fcbed67aa000004030046304402202ac022a12e643ee2a94478015a66bd887c963076611ffd2555f7d52cbfdf1e5f02203842dd4264d1407bd05fabc53e1ae9053eb49db3152dd1f62a01d9697d24b33d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fcbed679d000004030046304402200751ffb2b802756e99e1206b9282bbbae3da5f58468eb1a208a03e557c77c1590220475222c145ecd060eb70709c9413100c19910bf0db213337a87b4a76d89ff984
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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