stats.opendan.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:0c:c5:ea:cb:27:d1:da:3b:76:8b:51:64:92:7f:ad:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stats.opendan.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:0c:c5:ea:cb:27:d1:da:3b:76:8b:51:64:92:7f:ad:b8
Serial Number (int): 426390784132545932927464714131371947175352
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:a2:b4:68:2f:b6:1b:c6:44:91:cc:68:31:ff:b4:54:86:0a:09:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:31:09:58:ad:7b:45:9a:a0:7e:dd:4a:c1:c0:f7:18:1a:7b:37:ae
Fingerprint (sha256): e9:70:b1:95:bd:6c:1f:4e:88:b2:bb:ce:68:ae:9f:cb:ba:1a:72:ef:20:15:b6:b6:ea:fb:6e:10:9f:30:e4:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stats.opendan.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stats.opendan.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stats.opendan.net

Other certificates including the domain name opendan.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for stats.opendan.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426390784132545932927464714131371947175352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 13:51:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 13:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stats.opendan.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664435371582864352149709081791451232666544966205610686940874568952992328032105817368734612603206534194183272479127224494865574282104950751045421114235679936251108050186353833723728845738893545008646986813667469046544952531815259260283773408381489603924597407775040634195836077352590499042534639937532012592996627178091057563749972218150715763253665184341902207702635320603500730199914219658280200512600213020025176556828556064544452544746082940659167632040832838455185509594284786807599912907872660912325773703940156536458290308508956608946334208445524784103348654918261843420619677338567538247127378044751173853143933389893669459523939486959815494976238854870258203479637803291401143280373268187712364282112799019455451054230009659935112143343744524139110596622417068075724322237266264129246120777316618940664817280050429162720461309009605522015460123970403017899947612912151426344865253948773293762247425035254922547321701618057710589402857313971729176320504568701003035289623284268084972329714124548323113066943684382105634889964984541252835666264287379713486723067483753797017646350482316132016203756947291517720201164481687833450338325627108323387210648386538889789309120187751990245783435221465941420874038329847141975884005361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6da2b4682fb61bc64491cc6831ffb454860a09a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.opendan.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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