holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d5:41:55:79:49:2c:48:e4:08:cd:c0:e4:28:dc:a2:9f:8c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:41:55:79:49:2c:48:e4:08:cd:c0:e4:28:dc:a2:9f:8c
Serial Number (int): 421016131506128797661628089470180307148684
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:42:6e:2f:ba:51:8b:6f:65:01:49:8a:53:6c:82:66:f7:a0:63:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:e4:a6:4c:c5:14:d2:50:99:42:a3:2f:b6:b5:d5:dc:a4:8e:4b:4b
Fingerprint (sha256): d6:f7:44:e5:03:22:c9:70:f6:84:9f:c1:cf:c1:51:28:94:fc:8b:18:39:02:5b:20:09:17:f8:9f:d0:52:ac:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holdur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is
www.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421016131506128797661628089470180307148684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 05:02:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 05:02:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743999682565584560611635111236315362308908442481747002239631483461666765544430181678970720446404504322088491145182273504308571330847066540657240032470567365365486780078717819424586084167419288160323745131374586740946836433736374258809281028794372138483684781888063226753192295509744820903269186044960965471037635908422565957446291014679002755021761828624038090795357581879462256684065384759381334931148047906308675779058626001284943199036857442256111311197252951897580113798612965438095539322321973939931216329457807777709765119119517479883171263177799273635876591111916445390791308358564195938940661473432297676287956365229440627786051295233304881919604348502811632084944392629126755056832121075992161440280415369216326848267140523615925081475661071052927121558901896328980698280210417432113015050768818427205833015522327140694818450329955340830374107910968421283230365644339030839466933919197011736024919253243554565240015808666494866871695681731821480222842162655325592605543542093104407563182521786683663220195182149093215160318296251614313219165223740416016816694550448733135892196272137424249244581583493066447061359796640080755315861148544682183990351901348948814408144308478635299562484072239956534414810053711306696205057041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f426e2fba518b6f6501498a536c8266f7a063fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167f3686911000004030047304502205a05389828734b95fcba52eeed2fa87e9df7618c5c01cc57d70a6d840ce2216d022100dabd5408f1c86f53b37fb5a3d46910ffa955b7c606a3013e6316a0ad7ba46753007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167f36867130000040300483046022100b6bfa47447a01ed83cccc637b1d43e21285d6be4db7d61caeb3a67e70d12870c022100828a7637281b32a048a509afdead528aa57974f9391b631ca097c8e1b4fdabad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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