tekxiph.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:bd:33:57:51:6a:7b:a6:b1:2b:49:ac:9d:7a:8c:1c:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tekxiph.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:bd:33:57:51:6a:7b:a6:b1:2b:49:ac:9d:7a:8c:1c:08
Serial Number (int): 318075221373519730828428400407555515096072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:5d:97:03:f9:45:84:ff:8c:0c:6e:50:be:1a:6b:c4:db:50:0c:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:33:22:01:1a:1a:d2:79:5b:aa:14:ff:4c:8d:a9:88:51:ff:ff:26
Fingerprint (sha256): e9:ee:e7:ab:c7:31:db:a4:5f:36:65:92:25:66:67:3c:26:02:c6:43:8f:e0:0d:3e:8a:ff:b5:b7:b0:36:79:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tekxiph.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tekxiph.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tekxiph.com
www.tekxiph.com

Other certificates including the domain name tekxiph.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tekxiph.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318075221373519730828428400407555515096072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 19:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 19:30:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekxiph.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723697453632730740879879970398103109210456420182969318910743869003407829564171595928830781349811000040610734259632271684294517365243144721325531174071911784842410920426605799435628564188978011066508304123974928073119301809898268354290209009721476360670260116666720288131811561841477706579872405655402067074396750601342556792922624974764458981253021467105750494086267920434736829077066109438897831056849863220076383644142743927892513108579688058050698920809999811149860274018377004920404722067632859952699494247197712914162297312401590061439344266155082629917430331749943745741427572654652933780806483427957128069991748130673185110784169943910527469012261056236308283888556766988644510926528527160168258021019197670515572145894237036560229639383604890193517274217249930374181254161199964490122820216288762390746172563132212201952891566953127045668415310536955531974674698386093821640740386109730550513004844894188008127460464360658703237707150356456029875548066790790799614572155619214903874043670692808717549108294806707068689660573467531667300308583311859773806235505288546157626257155654919142145452336329057579340055121772624411525363375776867172478690723356642672976116980641096119108578000756257724151010064103290334316166430587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a5d9703f94584ff8c0c6e50be1a6bc4db500cd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekxiph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekxiph.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001698832ace000000403004630440220293055f0bdfa539fcf70444fad349a2fa33533fc9f1fb547c9e8c3de77248e8b0220101409e0be55af109ba808f2407c6c6b3ed371b57d120de914e096a0df738b0a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001698832af21000004030046304402201ac832fde6e69bb76e454f4ec1368a502f304d78910423e4a942abb2ac75d6eb0220745977778f98bfe7a875da1f413585ab17039b18eb7f1f4953bd509d3b60bda9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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