kraken.venik.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:a2:9d:f1:ae:a8:a3:ab:35:79:e8:e3:03:b6:37:a8:11 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kraken.venik.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:a2:9d:f1:ae:a8:a3:ab:35:79:e8:e3:03:b6:37:a8:11
Serial Number (int): 331991462775737554318742618873622762596369
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:37:9f:34:38:8e:15:a4:20:bc:fb:c0:96:ce:11:3a:30:fa:78:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:15:81:55:c1:87:c0:2f:fb:6c:ad:03:35:a4:1f:11:11:68:cc:59
Fingerprint (sha256): ce:37:75:58:3e:fd:9c:4b:f7:8f:62:26:a2:5a:f2:b6:fd:90:a4:8e:ba:9f:a2:18:ec:8a:47:c6:46:91:cc:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kraken.venik.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kraken.venik.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kraken.venik.org
venik.org
www.venik.org

Other certificates including the domain name venik.org

(limited to 100 certificates)
grafana.venik.org
kraken.venik.org
foto.venik.org
chilli.venik.org
kraken.venik.org
foto.venik.org
svatba.venik.org
kraken.venik.org
kraken.venik.org
kraken.venik.org
foto.venik.org
svatba.venik.org
chilli.venik.org
svatba.venik.org
svatba.venik.org
foto.venik.org
kraken.venik.org
grafana.venik.org
chilli.venik.org
svatba.venik.org
kraken.venik.org
hass.venik.org
svatba.venik.org
foto.venik.org
svatba.venik.org
kraken.venik.org
svatba.venik.org
svatba.venik.org
svatba.venik.org
kraken.venik.org
svatba.venik.org
foto.venik.org
kraken.venik.org
kraken.venik.org
kraken.venik.org
foto.venik.org
svatba.venik.org
foto.venik.org
svatba.venik.org
kraken.venik.org
foto.venik.org
svatba.venik.org
kraken.venik.org
foto.venik.org
svatba.venik.org
grafana.venik.org
chilli.venik.org
chilli.venik.org
foto.venik.org
svatba.venik.org
chilli.venik.org
foto.venik.org
kraken.venik.org
chilli.venik.org
svatba.venik.org
foto.venik.org
foto.venik.org
foto.venik.org
kraken.venik.org
kraken.venik.org
svatba.venik.org
chilli.venik.org
svatba.venik.org
foto.venik.org
foto.venik.org
kraken.venik.org
svatba.venik.org
chilli.venik.org
kraken.venik.org
svatba.venik.org
foto.venik.org
svatba.venik.org
chilli.venik.org
kraken.venik.org
kraken.venik.org
kraken.venik.org
foto.venik.org
chilli.venik.org
svatba.venik.org
svatba.venik.org
chilli.venik.org
foto.venik.org
chilli.venik.org
kraken.venik.org
hass.venik.org
svatba.venik.org
chilli.venik.org
kraken.venik.org

Certificate

The complete raw certificate details for kraken.venik.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331991462775737554318742618873622762596369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 18:54:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 18:54:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kraken.venik.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1019670133215863827781835279143128344104291230975429209366849461967337598354744393734943718058716295386349406480891452918324732153511307977451644088810217682567436201863856627063491667928552767770781233639364479208278989822342295559662283737532836175382636975667622031066623523003135444665666590690833191615245766052159979714623382749164147228930507160624049856477405504613622009973711138047114995828481027769502515273145310188674087276348380308590863395743329324982067226493370997276843806647145216970292386890768193447774647980278411941403432773301457043566740374285172044754594700801702339860362758256017169974000336567522051130857092406785125931990623051142194257493313764894632331256889060240966883905315586449389586421101276022871942400346004609513151701071502527925428433785918195625794634692559819786194253267766115393260171850322297674501887612428202728595690582234193489446501678746207057104932590492695177610493808669797301165727331024109704152797360114440030811478940663910330204652699449386210719838431252722132803615415281381349563412678511531312696387408909880803699080750397034324710170211428206266771105528709133234428656258560577765051929023861170908460081227035968932221911115581098163070211433420384787538778495221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40379f34388e15a420bcfbc096ce113a30fa78a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraken.venik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venik.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169f95dc32e0000040300463044022014da38f6a0ef55e04339125914dac63c6e9b1927cb169f64d36d0132b66e6bd102207d04f2bdd11d749a79c1d069362e5901054ab282a76998d0c318a58589ac6f8d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f95dc3a400000403004730450221008a550a1975acb55815918b86e2db96549a1672d2b4dafa807d09901afc2a94c502207a8b035ddff9a104b9063bed48b47f59d37c158c9377447280f45145d7eb4096
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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