innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:18:40:b3:95:33:c7:71:f0:31:34:3d:7c:d4:66:43:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:18:40:b3:95:33:c7:71:f0:31:34:3d:7c:d4:66:43:ba
Serial Number (int): 284508296167174679783370649900249979962298
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:20:4f:18:c4:b6:c6:87:7c:f5:8f:94:63:83:0c:8a:f0:61:9b:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:25:81:ef:55:9b:d7:cb:8e:6d:78:58:3d:94:f6:b3:86:35:da:e1
Fingerprint (sha256): eb:c0:36:52:0e:30:5f:05:a0:f9:fd:68:d0:eb:b4:ef:57:e8:44:33:61:60:0d:f8:5b:d4:44:dc:ef:15:99:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284508296167174679783370649900249979962298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 05:50:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-23 05:50:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751720883868545385835352986272326404042160138986909982186070842664004683309380960445762748498644820686000086848057630837283926946390421739534150501838297929011199741601290706138965030488051422988341364498247894670526010792112073782734315584074770244310331056642549319451011888162027733863563549762013845458034962912010794367309805696634178080965782745858875263349054246319921648986913129489380430148248686528104998602512124140010327289048320555809085576074188955997120260091590267205503919605426306599550884257983372325526887861120042685327559041715166000424452435924518080555208594985709093939816483963450514425251078643235925899803359764151726064921134657004483281137018301815847728189851327799908615529965100042791723283217385752161649797589486787452079670092526267318812712393567525023475819408439623712466672602556847932660080911571900360744047141734549127887150012329910381657854375313676193732031801989461747489246092848947368488816749780548530574564608953988175991616259317527475681881539431892435892547633996738022412747133116764801481809185772685996010182319644367080517000049359017491225519478901081003058670276467745632287205474531321672562407477041907820308435734036795466931289487090097864144807958939129744629933905231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46204f18c4b6c6877cf58f9463830c8af0619b91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016749a25bc300000403004730450221009a306c433c185c3e98d33e9089e9ca2c6a545bc948c8497b84aee8de5b5113d9022003ea88dc530bc789beeb516459460fbdba63b37dda23d769252f24edc524939b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016749a259ef0000040300483046022100b0bd2c16661243b012db7cae10445af5b00324aa9b9bd027af588f6aec695ebe022100c9f2cf123e66d2fb6b02374dae7819514a317a2947b74f0baa12cd622211881a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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