2017.barcamp.asia

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:8f:7b:33:5e:a9:89:1d:0d:11:7b:77:91:a1:89:42:8d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2017.barcamp.asia

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:8f:7b:33:5e:a9:89:1d:0d:11:7b:77:91:a1:89:42:8d
Serial Number (int): 308146261361262957977240402670499264021133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:21:9a:c8:4f:c2:7c:b5:fe:c2:c7:9d:46:ca:b1:d1:5b:45:17:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:a2:4e:ea:99:99:2b:28:a3:00:4e:a5:1e:66:d3:35:cf:25:9d:fd
Fingerprint (sha256): ec:98:be:0b:0e:3b:32:8e:2a:e5:94:0c:af:18:78:a9:15:17:4e:3d:79:96:64:0a:08:db:0e:34:58:b2:96:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2017.barcamp.asia

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2017.barcamp.asia

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2017.barcamp.asia
www.2017.barcamp.asia

Other certificates including the domain name barcamp.asia

(limited to 100 certificates)
barcamp.asia
barcamp.asia
ra.barcamp.asia
ra.barcamp.asia
2019.barcamp.asia
barcamp.asia
barcamp.asia
barcamp.asia
2019.barcamp.asia
barcamp.asia
barcamp.asia
barcamp.asia
ra.barcamp.asia
barcamp.asia
barcamp.asia
ra.barcamp.asia
barcamp.asia
2017.barcamp.asia
ra.barcamp.asia
barcamp.asia
2019.barcamp.asia
2019.barcamp.asia
barcamp.asia
barcamp.asia
ra.barcamp.asia
2017.barcamp.asia
2017.barcamp.asia
barcamp.asia
barcamp.asia
ra.barcamp.asia
barcamp.asia
2017.barcamp.asia
barcamp.asia
barcamp.asia
2019.barcamp.asia
2017.barcamp.asia
barcamp.asia

Certificate

The complete raw certificate details for 2017.barcamp.asia in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1fgo1ulTsSnaiIkj+Eco
kjH6VVgvQ0NDUNpCJ4fmKK1pmy9Oj4yiwGmcnlvDwtw8LyvDzBDG7yv81f+19GDX
Qs4dphfvYzcy+Ki55brIpR75+94W+nH8k2ui/Wr/d2R4+y46h9jME89hcAk4QGkn
PcHtOLPL2ssrqGAg6gizumtKqxl2VfBISols1AhM7VqMcsZAp0I1Y3S/pZAEYQhn
liNAlEFwQaQ8OWa4eGr/kgYEYBNgC+bMmoC9kxQnSEOBy90dXQUvCtzQOkZPwUZy
8Q96zXMIJ7lCKV5uuNvFOiKTGl7eZtELKCpqg6L7GL4ephlwsitrARXmJy9pzTj9
bJEeFUZ/gWnkV1a/VT1qdfNZ1oqjNNIA6eqtnq+yCEkxp/UjEzeLbfY1vbPena4F
JkZDP5y/bRyQOwF2r8I93F6iY1nSJWhPItqjXvEWSd5xOGDF1REL3jAtWi3xzFeN
AekU+uR/nPWf7D6i5Xw4EjOL6ypWwEcXmEeosmrtD0P3Ae2LPNQ6X44g3N8PBTgV
u0Xbn9zHmw2wc3ml210Y2uZ3jonRf2KjBDnCa1SfTimqiSxDMmyQJqdDIwWpvRfP
lGAR+FjG6IvIJAp6PFjsW4SxZLCIDzAfIToj4JXV3rcD8ufevMmYr32d5yppve6K
n7unfm2Znbmy4wbBt/atK9ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308146261361262957977240402670499264021133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 22:30:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 22:30:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2017.barcamp.asia'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872918883955409644317963450042753987434245363708875452821691001090076023120996498057549461986251681574639234664859877732958008397295220353861476936324461495439759778505406143879231932049339659396262914157511426963218478289065975833029972543802239807041754657805808677811628398199087639632781697693000730400001261190118669338477598162502706294985737962865346000581445295445605559792266691081163406671846323113721490876212253967712410683131936274064079305145537740898564219271348432788219543792325760670671287663322908481106980094856839946794587492545838869670012175327487849881554470869784572951936259851597768311548245880980430780816798954355663662997342206882101577249139055306985883262569505488161386880658217700964357537839241780492430046609522077028001077499850289438656935920676596467367511639619847460716442495516256715673430715023746295783953474516503667871490968896612013780607109695453147734561381558683261457553912919893335447014425270034499289841978905239610762863799710539329400874655269524076881624846609866307910830609447170731867250511828005171606584829085042860968363611147231503219218622852071198481029188777227734994595942177079110969517396519020931516269118472537733364942902711414643118844682512300575459109579729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa219ac84fc27cb5fec2c79d46cab1d15b45174d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2017.barcamp.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2017.barcamp.asia'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fa13ec23e0000040300483046022100b8af0b90090d2568f8479f99615781c713eb2e2ecb115d2706ad1dd74c72048e022100cb7c2333438e81dfd701ad6fc07768d389582ddf3fd359a49be60bddf29d2a6300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa13ec2920000040300473045022100a520a8cf41d1a4af479bb11334c3819f267728fabf0204e84eb7e3da958c526e02206433379171e1161aa3fd1bf277b57f1c821f772b4b5f5047ce456a961fb817ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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