beermaking.xyz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:dd:a2:fc:23:5b:c3:11:bd:bd:c1:be:55:91:11:0c:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beermaking.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:dd:a2:fc:23:5b:c3:11:bd:bd:c1:be:55:91:11:0c:c0
Serial Number (int): 339896407840224740354864525679989812694208
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:af:aa:5a:47:0b:22:85:27:14:90:99:c1:ca:a0:17:60:91:57:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:b9:58:95:9f:9b:b3:f8:f1:49:a5:fb:e6:03:c5:a1:2e:56:a3:c9
Fingerprint (sha256): d0:2d:ad:28:9a:26:6f:70:8b:c5:96:eb:d9:23:2f:6c:b2:3d:fb:49:95:d8:ff:4f:b3:f0:dc:b8:00:01:4a:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beermaking.xyz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beermaking.xyz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.beermaking.xyz
beermaking.xyz

Other certificates including the domain name beermaking.xyz

(limited to 100 certificates)

Certificate

The complete raw certificate details for beermaking.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339896407840224740354864525679989812694208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 16:50:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 16:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beermaking.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 962284317304017898927460566059227213817789649816828326835485855782173758927699339574166060341268028337366995301699064662903401839953724050568464456038767183938889583648557368487689775674907715337917396550877395169712668537132424840795792579533735321536296757313418666835665166625429603877620885901719378656582975687034881101140722661944932571704027704875189406995107308923041782563647905837345225910742534953777870740940160747579997237095784328214900793721152652787936189894939548128609903360602099720789825805348845253319931798301908640738647524689489957258335845401786428377713025066542328146134654769942524871659879707311545346930615402103512409010803702715133074619736505618764656159288235026859370357493153865551300841517849190693018851943176749450882262714416702496852354977142536455987938544544051958803578278887464905785124326623558570244623874861373297751217916193281338367443959613942708497704308227578885762172799507463689332476391350525361902450496998040058682971269353976303354731864589130842812364003840249721032561453070068204770529694643505496690424031929401769827222382014270502642525986134527396259387794049997685902016995193607016019765017187752951836889042674115302248103629754385379590759605020596636218249488699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62afaa5a470b228527149099c1caa017609157a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beermaking.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beermaking.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e89f050a100000403004730450220666a1068a7b3e8e053bc4663c572b320c4e3a568d3193380e9299186e5ffb8ba022100e4255da8dfeb15d9e529aaefaf14de0e45c0640d31186d4719383640dc17ccea00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e89f050a5000004030047304502202f71fbdfcc074cf116229b3ead1fa1788410bbea2eed6ead3b9a0d591caff949022100aca254142e84ddcc558850b52685ca8a8be57749384405a43e36b70329055d24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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