chambana.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:ff:ea:36:96:a9:92:f5:31:2f:76:a4:c6:a8:08:d4:a2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chambana.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:ff:ea:36:96:a9:92:f5:31:2f:76:a4:c6:a8:08:d4:a2
Serial Number (int): 277670298284141722021952275442875784287394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:e4:b1:5b:34:fd:b5:10:0d:f6:e3:45:1e:a8:2c:65:af:a9:f7:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:80:f5:0c:da:6b:68:86:7a:54:5c:58:f6:4f:4d:c7:e8:a0:5e:d3
Fingerprint (sha256): f6:c3:fb:d3:0b:81:40:4f:e7:79:95:c2:ff:8f:36:8a:b0:28:41:ee:9a:7a:f1:20:09:47:3d:ca:36:34:fc:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chambana.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chambana.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chambana.net
www.chambana.net

Other certificates including the domain name chambana.net

(limited to 100 certificates)
smtp.chambana.net
chambana.net
*.chambana.net
chambana.net
smtp.chambana.net
chambana.net
maryleesargent.ivan.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
smtp.chambana.net
chambana.net
smtp.chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
aware.ivan.chambana.net
chambana.net
mail.opentechinstitute.org
talk.ivan.chambana.net
smtp.chambana.net
chambana.net
imap.chambana.net
nonconformity.net
chambana.net
smtp.throneless.tech
chambana.net
matrix.chambana.net
ivan.mayfirst.org
smtp.chambana.net
lists.ivan.chambana.net
chambana.net
smtp.chambana.net
mail.chambana.net
smtp.chambana.net
ipa.chambana.net
smtp.chambana.net
mail.chambana.net
imap.ivan.chambana.net
smtp.chambana.net
directory.naf.chambana.net
lists.ivan.chambana.net
chambana.ivan.chambana.net
smtp.chambana.net
starbase217.ivan.chambana.net
chambana.net
imap.ivan.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
chambana.net
chambana.net
matrix.chambana.net
matrix.chambana.net
smtp.chambana.net
smtp.chambana.net
ipa.chambana.net
chambana.net
matrix.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chat.chambana.net
smtp.chambana.net
chambana.net
matrix.chambana.net
mail.opentechinstitute.org
matrix.chambana.net
smtp.chambana.net
ipa.ivan.chambana.net
ipa.chambana.net
directory.naf.chambana.net
imap.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
*.chambana.net
commotion.ivan.chambana.net
smtp.chambana.net
chambana.net
chambana.net
chambana.net
chambana.net
imap.chambana.net
ipa.chambana.net
ipa.chambana.net
chambana.net
acorn.ivan.chambana.net
wiki.ivan.chambana.net
imap.chambana.net
*.chambana.net

Certificate

The complete raw certificate details for chambana.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277670298284141722021952275442875784287394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 18:16:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 18:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chambana.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849774642823861074733419278542982619595295194837910722329142852322963316333179476451149966394666888259868854007151039543130243266854314427501746865667071472296097812093232228136038949697331764301891778162877657718530885083293939684227326778754728540777821049629329278549043630649656994578868999395039760679821103908894391926651945215254245222572972695107797970060517806955187896638600303532924120656023373759941597672983882846443970310227749288757542315490468924844713951053814629891768581534443375516808740716032081300006506146209973968882715832552389638483543651691342292900688118023278821950165066630203517559189158006281663468157790954507619363028115185143217192947294357864362864195920849372208649230482359060691016664703781408240302975690168687482667805978824387454541035319413448496965741409017979353176279544575276720647241493996064426468421276605104075726786511763414030755219841529189559370085009682816574660298840187801522056330545878813074723438855893318085670025170965824192489914747587105827840455976832707887380000377678171695336261189257466456892494830627482691035940425136871453369169918080517822864387864391701490742583194272346591457061294510326277473313394268106109883229174824712034455427139922727581373935622851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28e4b15b34fdb5100df6e3451ea82c65afa9f785
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chambana.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c6d82efd400000403004630440220447a375450f6bb992cdf51a875b23b1835d10cb809f6a618040564deda32782102203e2042e2b8475fcccee40b8167e0870f59a11d5911ed79ab788e34e3978c46d8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6d82eff20000040300463044022073d47d1598936e735434c6704f30d5b12dd91d125ff4a3112847bb0967b19221022012ae7bb9029ad6ae26caae5c5817cfec3e6c91bbe17bb1e6908ce4969c11bc1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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