chivalry.icka.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:09:9e:87:50:04:eb:e7:5b:3f:44:73:61:81:10:0d:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chivalry.icka.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:09:9e:87:50:04:eb:e7:5b:3f:44:73:61:81:10:0d:1c
Serial Number (int): 300482116170519448608054639651888298986780
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:25:7a:53:e8:ff:ff:2b:78:2f:05:30:29:1a:62:6b:fa:dd:4c:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:96:f7:b2:cc:9e:bf:7b:01:58:17:ab:db:df:fd:f9:63:c7:a1:ff
Fingerprint (sha256): d8:97:7f:5c:f3:78:47:60:8b:19:82:4c:ff:ed:8e:8a:35:2e:62:95:47:87:04:32:b6:da:c9:cd:a3:ac:a6:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chivalry.icka.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chivalry.icka.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chivalry.icka.eu

Other certificates including the domain name icka.eu

(limited to 100 certificates)
blogs.icka.eu
puys.icka.eu
forum.icka.eu
factorio.icka.eu
zimbra.icka.eu
icka.eu
blog.icka.eu
icka.eu
icka.eu
zp1.icka.eu
icka.eu
icka.eu
icka.eu
icka.eu
factorio.icka.eu
icka.eu
test.icka.eu
scp.icka.eu
icka.eu
kf2.icka.eu
forum.icka.eu
sentora.icka.eu
test.icka.eu
zimbra.icka.eu
test.icka.eu
icka.eu
blog.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
kf2.icka.eu
blog.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
kf2.icka.eu
zimbra.icka.eu
factorio.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
zimbra.icka.eu
blogs.icka.eu
www.icka.eu
icka.eu
puys.icka.eu
factorio.icka.eu
test.icka.eu
icka.eu
test.icka.eu
chivalry.icka.eu
zimbra.icka.eu
forum.icka.eu
blog.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
scp.icka.eu
forum.icka.eu
icka.eu
forum.icka.eu
puys.icka.eu
blog.icka.eu
icka.eu
kf2.icka.eu
factorio.icka.eu
test.icka.eu
puys.icka.eu
scp.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
scp.icka.eu
icka.eu
chivalry.icka.eu
test.icka.eu
forum.icka.eu
blog.icka.eu
blogs.icka.eu
factorio.icka.eu
icka.eu
kf2.icka.eu
chivalry.icka.eu
icka.eu
forum.icka.eu
chivalry.icka.eu
kf2.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
chivalry.icka.eu
kf2.icka.eu
icka.eu

Certificate

The complete raw certificate details for chivalry.icka.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA3MJnodQBOvnWz9Ec2GBEA0cMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTEwMTAwMjRaFw0x
OTAzMTEwMTAwMjRaMBsxGTAXBgNVBAMTEGNoaXZhbHJ5Lmlja2EuZXUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKUVQnvObIsnQP4iLR1QeV/A3SNNcC
TyvPtdiYJb821ZtuC8v99I5NzB7cIXULp3wmtVnCBF6B0IpU2pQEwdAB/bjdyvLC
lhgGIBGYEiBRlPG7K41aJCCGb56TmgtdLzwzzfwMo5L9AcwVWQQdJZiXHc39pdqB
0JPbuwqDjUAr7lUR6o0vhK6WmBxpM/8qkwC/fY0PLIFVPcYu5j/6rI3bxXShfW5Q
cOwY2ggxN0RmaZdA6VPStDI94LwCnnTt1j3a1huC4FWKUI4eYnVhrU9IneiwJu4+
OfO4Sy5uDeogzmYzcFqJ6VQkHpdahynVH9+H5aAkPl/eY8CYpbM2xQrWVRlmkipc
uKhNACLbXbbygRn+PA3QzDMXl1qGoYpybEpVo1OSIammENrlOb8M8P0cS5mtjqXr
5XCp1T2m8mULpfkCockmgqWzmcmbU/QXOTOfNIexLBrRwAE5JeJlUtck5rePHSIC
yibhuAwhr5U3pcuHaBVBnOU4RslkB61lArJfMEXbhL4uvEI9LV4L7c3JcuJfs914
7VbyR01XBQBcF9/QnRjrbmU5DDYZQi+BJCz/yxgxVZnBlDgMh17PtZ5Wha38Xnpl
Jt1Ph2KS62k7eTssgLZJ4SK7zv8bTSHV1dAI9arMaR6wX1aY1dUDzkG5tsHm06D5
A9UJMf2+qBrXTwIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR9
JXpT6P//K3gvBTApGmJr+t1MbTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGNoaXZhbHJ5Lmlja2Eu
ZXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWea
/m5XAAAEAwBHMEUCIDq4xT/KLRam+8RHSi5IPHN+knfBEI1mLOn2H7VOos8+AiEA
8OIkGO2zv4nJYSefypM7YBVzUMVpuwDf8rz2vHrfbt4AdwApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWea/mxtAAAEAwBIMEYCIQDqf3WopcXM+zS/
OqazO5wc9znAaVEuWsu98i0eovnHbwIhAOr1rrqwJLcdMohsT04hLhIT/kcmTTZj
8zWAloci0fimMA0GCSqGSIb3DQEBCwUAA4IBAQBTbzCcm99X+5Tul5+DL9A96wcc
ji+iDL9wLS5ZwmWMb3Nuyofd0hKCPe70shIbSaU90WY735WndG6OIzl57rN333MN
pjMe4TM7tJ+XHANNVcP0AAI01k8iP3uMsKCFojvWw7jg5flQhLH3YePo5ya44e4I
rO93Epbdda57DBKf6+FQVbKuCuVujJaCerfhUH2eHuUwVzDq50rcLI8yNJvJqNr2
JHX7fsEHe/rDvhDCGDj0ENbDocBV4e9i4z3OycLZhZwVIF56KKE41651zpwa3YU6
ahl3MFMNC5s3qgezgtV2KVXjL71mhofNlnKDXZjQAC1xWWYrE2bYWUq8eNKy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300482116170519448608054639651888298986780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 01:00:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 01:00:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chivalry.icka.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825384165319833324113668684538906949290851381521453445844916353797644833635493306178953325456375235031662286803227715275916749134321460853611879022485480698402903257359104777200432836008805769360787049081420340243936978270136758039084190029971821753832848636804386942352865491885011265944721958124177996781405121177599489815244224341019739109821582037792206072216026784049378420462504226381575146229199852038946819376081547590160999820955949360190323666874379769891502527429848782420086011511833965440104856019151297269566530437073424777948641386732450306963928165430774215170892067008889140268992400062667315681517545407923935873262067011834099879727639903213660022659052059932023643485750558383555690607094870752225634792776381112344570188634411455503999934031082078694510557156663289142462892523469156795279031775513524256119480199193136453643359882095191613935326282186690404963504841334580706121869302303223353437944987126419622200416650825030237515622098561808511735789956164860780340568451239998734047525097288812338583621978589970839098290931366535493903224011285393537210005112620973276402176101604902420241035229824458938476310077311654562467424616445101766854962270115412046867491437399490105235463143944548391760812496719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d257a53e8ffff2b782f0530291a626bfadd4c6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chivalry.icka.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679afe6e57000004030047304502203ab8c53fca2d16a6fbc4474a2e483c737e9277c1108d662ce9f61fb54ea2cf3e022100f0e22418edb3bf89c961279fca933b60157350c569bb00dff2bcf6bc7adf6ede007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001679afe6c6d0000040300483046022100ea7f75a8a5c5ccfb34bf3aa6b33b9c1cf739c069512e5acbbdf22d1ea2f9c76f022100eaf5aebab024b71d32886c4f4e212e1213fe47264d3663f33580968722d1f8a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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