maegaard.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:96:c0:da:6c:a0:ca:f8:1a:f5:9a:58:2b:6c:5e:ba:f6:48 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maegaard.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:c0:da:6c:a0:ca:f8:1a:f5:9a:58:2b:6c:5e:ba:f6:48
Serial Number (int): 399747844664327179655584318201551233152584
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:c8:07:10:40:c9:de:90:71:66:b8:34:a4:73:c9:c7:7c:b2:96:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:34:fe:2a:1c:bc:8c:1b:53:24:5e:d2:60:cc:87:8f:33:e9:91:93
Fingerprint (sha256): d9:54:1b:ac:79:b3:9e:f2:bb:5d:1a:43:be:4e:4c:8f:87:2f:e5:94:17:61:df:07:0c:a2:11:d9:e3:a1:79:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate maegaard.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maegaard.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maegaard.org
www.maegaard.org

Other certificates including the domain name maegaard.org

(limited to 100 certificates)
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org
maegaard.org

Certificate

The complete raw certificate details for maegaard.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4dtaILks5SggXslBXFYh
u9i/5wh/pbS6nJaseCsR1yH3p6R6AlOrP0OTFFog4cY+d7nhFjzTfuq1oo0prphl
L1T9we+s5DEyRcA12qMcRe0ePLG/aX6MyvzAC90U2tivqcfOXv63VPuPkUh55Amr
O77cZjmytlrsSRhUQhRDrLWwsQ17R+cZBiYd2srxcSdwXT40D1BW3wm6YJUC32xg
vGfagCla4Wzr/i9/sbN37TuL3AToYqLGFov4VgYK+A9/2cOdvIa9GjIJiG4Cp/cZ
HL0+/XOVaGAtZHE8ypPr3AeXjCZ7kWX/3t7ZR22iUfmTwZY9H0F6Hmq/uFL2MaG3
gItKGeNdJVOKXgdh7E5Pq/ipp8CthoKrJapDSEoCmD7Bui6yeDHXT+3T8ciBNph1
3DR7h/ChB1VVI4gdR+UTGAdKUDdsz5CRo+Jef2bh5SIsmSzwUYe2S9VRphxBdyi0
qSDwfH6Hmw/3oSxAA7csV9IMbm0ehXZznlKTsobXhRWYvlSX9hVUuuzPf2j0Kk9j
Im5ExHo3GJu4f4BT6E/Q8NP9jKQc/l9A55rqgDbwPUuLLmzvRyG6PXaO1ZhUjw1Y
9L0TbEzt4imq9BKIwqvacLz8zkQOvBIWzyv4JcPQirBeF73cGnVQICgD9gJWaeo7
n2cpDcFk6HLpM9zkrUS634kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399747844664327179655584318201551233152584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 21:12:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 21:12:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maegaard.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921415533811583576835488425675428920156317515895949007460593059675105030635752522666876615878217798769364976046524235171782694623212285481712078314774776739832166323965642812661256771099417251192485451714075824411280179364295132971848736178587117221210583093902651684044178889059082386060258984360747442191751556968827945445616105013951658091328631294120456565977582516009437175310033035621427560070643389786210588140946501677516519391707970813136898969573043868254285266777740130527073134651843625510833705806862821466023924042083648814161786991053499858863044267374422939279000138905277636181784064671320115826812559145309215400510764483000920905943920872968605589646421696192764585626699144016829011171257782395790998811905853469178075195083452135142421575913696749407344250478730797217982674531519838634489903042832383084117086376315189512446008367064775177051952774966741524482629943791970046105806140615618350501974010322459040794674236187953255610003589650290892852262306769949867747220706932936256336864904890930744628650531766164811415691637278883263090975253448060301537489497326953843122999532669982367565131674039023016738360663904056227795177883969448001276522703836528783339044482222825782243490596223039744271323946889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bc8071040c9de907166b834a473c9c77cb2969a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maegaard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maegaard.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163f0e84726000004030047304502201ba94910dba85d8b2cb8c388ca170fd7508cb153155eb316eda9f87c6f23ffd5022100bfa625d68beea475b16874d09471e33f1cc3e899c9c4441897ac0e56caa11ed8007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163f0e847420000040300483046022100e07294496f46d5f97945e898c265073fc136654def9831474a729e9591c83075022100a22974c0c1ac1a852ecf5c4b921333e521ab9625209f2c89b75fc4ea95e3d5a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00008554d96986509d139f1152e7297c6d5eb7627a60cfdc0ba618f715f2ce8d9dea7f33f36c0c5f66ebcfdb84ee932fb4000ca4e0b56977b79f52095bfff5786158ad02feb359c4d09c151c0050eafb0f3cbd6d330a8f7d5ed3492b666eec16efcc92ff71db09bff6cda0f7263d12863387349b57a99dbe13f1ea277898924d737253a527ed17c38cba9ba0f483e915c17d66875d0934b8063fec0abf9e25a484492860ab3597cda37d8a5027976d9cd9915138736d5da29856da7f6613c045ec5d514fa01967af063cb61d2197022b0c4e8e321bb1a68adf37e3f3f37b6e3bfe80b5c318fcf7a52e7439155d9df167db28b5cc42468a500c3329123133af1ae0