innri.holdur.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6b:85:78:46:d9:c1:41:a9:0e:bf:8b:47:a7:ca:c1:f7:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=innri.holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:85:78:46:d9:c1:41:a9:0e:bf:8b:47:a7:ca:c1:f7:ba
Serial Number (int): 385036768823664813674126388713444473960378
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b6:3b:8d:f1:e0:83:6b:41:22:d2:a1:2b:d1:90:13:22:8a:50:f0:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:e9:9d:4a:3e:ce:c9:ff:11:47:53:03:39:cc:7b:bc:80:c8:e0:71
Fingerprint (sha256): f4:a2:4c:d9:c4:8b:ad:9d:b9:bd:16:d7:2f:37:f2:15:50:cc:93:6d:d6:30:ef:74:c0:12:7f:97:76:0c:78:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate innri.holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for innri.holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

innri.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for innri.holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA/qblZgK5/hnNjfUpOIPl
23bAAEcwypyCXpEVgdz1vwM+E4eIhToQbj3g9mlp0yv1DfW5ytJR9rFBhebCTsUa
FHvN0AnlG64040caSJI6YJDdHFTcx1p21VeebKdxkfvstwRzp5rqLbtPvPx2lStk
/t8SNePOSLcp8yYMkKpFwlbVcdTLz5HMQEHHbzEid4/pPlKXZxtHKHGMH88Cp6tz
t1sKxuYEqELDK5jlTe+uLI04q2yyo4yQ9N9/1Ct8NeBcI/7xBkxMLUgJj2k2mryR
X9IEq2cb9nDYyLqFucieMsYYcuNNJVmfe5/tzFH9GbLS8avKyaxf8+Jc3bbhLu6B
ZYfh3ewHbOjJBnvFVB8k2mvTmFNg+wsXlyl0hzZAyAguYfqua5Lijak82DXtNfng
pKuyjqXyisi7mALwEON/LWN00Iv6Eu/R+UCjzvWlyqgnm1kfNHVVDHDhoq1/pphm
rdwa19dDNsX2K33h5HFXKYM4EG0gQktw0Lvls715ZlIcZwQBkB56Atz+UdrTZyKy
dSvgYHL1T7qfXsYXFDUXFDhSAsEZo87eBMyzeS8WIPSwbB9My/DqM/svfBHluU2S
P7C8ZaMImL8VXrvQ2EJ6GwjAr2RB4QlQ44toRZVzmBAuas2sP0FMysyiVVLlF7FP
VwnS9sENxlSJN98SP8kFbd8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385036768823664813674126388713444473960378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 11:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 11:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innri.holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1038889267631040950797399438718324458356783310931270420962563081456404102416141265959036458188130394497553565249841217412544271813894340737399580831304788853619799075882176427619984281562621810710383685241493590904171332847688404391401415354592007323661500449178997391102395873160603518767634417895384656422381364541493216952012674650568216604811523070631724048219332585609871628219423883745215363365295260183956185991197977003928519146950825089674986764670315940101041053094391673419915879618417543521155159814056478084991533996133947327092382571906700208738681161604959134283366934782136111808276911051336128136681603690474455306751221216094960905281181299451667834196563878896893660740687800943642446506021212744494168353740820367803709106191143538895351379181515109508517095263104312457011692055577261921741663017698028303217183180045796178195823451443765784858878137008625971985561506298624253765651226038016581527824901705254585462308431445963944138194403169423928660696920434423886100808044696168050771124674196291614711243608705132340709119387307062870699592940504819346314169908327863465220784561425220613920709942429806741718009200137480774636528234270973398547755582682290991903040010549087684098128916572904491365802798559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b63b8df1e0836b4122d2a12bd19013228a50f075
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e88e429ff000004030046304402206020cb96c8b58dfd34fdafa963d99aee3a954469c2a6317a6654f57b9c6135ed0220329c0e95c1f46bf73ea484bdb6db6b9a014b4b52526a8402db391111c924789700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e88e42a2c000004030047304502207e9de0735639e57f79d185b16fd4af698928f21a3621c0183c8b620aa00b9d84022100f2752d3a7c466d23c7491452e689c4f62011f1d057c07d12dde2c110043646e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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