stardog.cluster.ldbar.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:e7:a8:d6:fd:b6:e4:c8:a6:9e:f7:d7:27:f4:52:f8:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stardog.cluster.ldbar.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:e7:a8:d6:fd:b6:e4:c8:a6:9e:f7:d7:27:f4:52:f8:b3
Serial Number (int): 343652836556662442204214967477709002963123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:bc:03:b4:8a:f9:10:f8:f8:8d:17:dd:f5:64:37:92:3c:44:f2:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:90:78:b9:19:01:60:91:76:92:9b:94:c8:28:d9:09:f7:91:4c:f4
Fingerprint (sha256): f7:c0:e4:63:83:7d:08:13:67:16:6b:5f:51:30:dd:b9:02:db:e6:82:f0:0c:c6:48:d5:13:e8:b1:32:49:bb:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stardog.cluster.ldbar.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stardog.cluster.ldbar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stardog.cluster.ldbar.ch

Other certificates including the domain name ldbar.ch

(limited to 100 certificates)
trifid-lindas.int.cluster.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch
gitlab.ldbar.ch
gitlab.ldbar.ch
studio.cluster.ldbar.ch
stardog-int.cluster.ldbar.ch
gitlab.ldbar.ch
trifid-lindas.test.cluster.ldbar.ch
studio.cluster.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch
graylog1.sbar.cust.vshn.net
trifid-lindas.cluster.ldbar.ch
trifid-lindas.cluster.ldbar.ch
trifid-lindas.test.cluster.ldbar.ch
stardog-int.cluster.ldbar.ch
gitlab.ldbar.ch
studio.cluster.ldbar.ch
gitlab.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch
trifid-lindas.cluster.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch
graylog1.sbar.cust.vshn.net
trifid-lindas.cluster.ldbar.ch
studio.cluster.ldbar.ch
trifid-lindas.cluster.ldbar.ch
trifid-lindas.test.cluster.ldbar.ch
stardog-int.cluster.ldbar.ch
gitlab.ldbar.ch
gitlab.ldbar.ch
stardog-int.cluster.ldbar.ch
trifid-lindas.test.cluster.ldbar.ch
studio.cluster.ldbar.ch
studio.cluster.ldbar.ch
gitlab.ldbar.ch
stardog.cluster.ldbar.ch
trifid-lindas.test.cluster.ldbar.ch
stardog-int.cluster.ldbar.ch
gitlab.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch
stardog-int.cluster.ldbar.ch
trifid-lindas.cluster.ldbar.ch
stardog.cluster.ldbar.ch
trifid-lindas.int.cluster.ldbar.ch

Certificate

The complete raw certificate details for stardog.cluster.ldbar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISA/HnqNb9tuTIpp731yf0UvizMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwNjM3NTNaFw0y
MDA2MDIwNjM3NTNaMCMxITAfBgNVBAMTGHN0YXJkb2cuY2x1c3Rlci5sZGJhci5j
aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANkCHsdGvGwTvsgElwEh
CFkyZ7e7NYAFIJr5lGKWHAXg2q6DYFuPFc96PHuzOAnabJWSOl2uqUCQex+3QPXQ
1pRwjw8WRMs3H5G5d9Bv4qMMQUWzLTbsLmkI1lnznv7OMqahfI5+uDScbJYKP1J0
M3VUmHIChZFS38dim0VL7kTOgBLxEHCUlggHNINN0hJ6AHeBNoV/BzhK+0Bn/Ssg
GxO1E/A1AvzA+/GLfSAleUgu8u4TACwFG0dm6jfNJGkx6ru5eww8HJ6dFlyWbKAg
acvjRAXI0oHxWa4OabPvE3zDIOS/nnTrdMWxjR+xo6lCMHOXR78KBiAiuBvTc3Nh
YoMCAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU3LwDtIr5EPj4
jRfd9WQ3kjxE8rQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhzdGFyZG9nLmNsdXN0ZXIubGRiYXIu
Y2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXCk
esFzAAAEAwBHMEUCIGwHlxcvNptXFAIxekAtWAJ4kmA1ye5z+M7mT8q6c9iuAiEA
kVXVJ93X9cx2Rdcs9hsAmuEatqKEYH5FV+EdraKrLuAAdwCyHgXMi6LNiiBOh2b5
K7mKJSBna9r6cOeySVMt74uQXgAAAXCkesO1AAAEAwBIMEYCIQCLqw8k3A8T99HY
r4Lf/2NsER79I/s3MWDeHpcNv0yWbQIhAIL+1E6InjUguuk64sPcz/4nkO2cP57b
24ElDpCyS3I0MA0GCSqGSIb3DQEBCwUAA4IBAQAU5Y5NDBnzh6TJD+pZWQUnYLrQ
IMAA1v23o6+EHxSKt89uXY+8ZlzGUbNhNB2TJjpWgJGTlz/HVElrYiPrZLyWnrQP
vttfyBcTJTHJNUFEQxpeYA9nyCDYTKPahMU4U13eWzpdq3WxmisF7jas/yG+LMPy
+iMuXN/S/AcnQVDrPt2+EfunKAlxS/83fl+CxdunTXll8fM5Eu8Vu6CTfaBiNNwp
W2DZ3DqrrxIml/h7k0w5ZFpdzP0PGx3fG8NlE9WBj8OCvn+WZYX1ViPAd7/3yiZW
aByknjQ8S/mQ9RUj+8ppt6q+SqZjM5OWntGYqVO5XiNOL2bjeLJ2YUaAvSgi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QIex0a8bBO+yASXASEI
WTJnt7s1gAUgmvmUYpYcBeDaroNgW48Vz3o8e7M4CdpslZI6Xa6pQJB7H7dA9dDW
lHCPDxZEyzcfkbl30G/iowxBRbMtNuwuaQjWWfOe/s4ypqF8jn64NJxslgo/UnQz
dVSYcgKFkVLfx2KbRUvuRM6AEvEQcJSWCAc0g03SEnoAd4E2hX8HOEr7QGf9KyAb
E7UT8DUC/MD78Yt9ICV5SC7y7hMALAUbR2bqN80kaTHqu7l7DDwcnp0WXJZsoCBp
y+NEBcjSgfFZrg5ps+8TfMMg5L+edOt0xbGNH7GjqUIwc5dHvwoGICK4G9Nzc2Fi
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343652836556662442204214967477709002963123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 06:37:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 06:37:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stardog.cluster.ldbar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27394757701134840023954956510085536225825583101623999461231980978054506592308562556995252111250068361217905501562974867023457410084857185547241481289289446537911009245705496935015353720497073769296189674861684387731448078945518696724032955093309978733215265086743093030269223005343452564522418913741046787810718907129124832003370065493340522218748454443712259973832179805212864608178516979314975400643180407896191572209019264210859541131141026088652680554460128970580349573287924531183355208783928953831137170407445236706365129637459452272317391904701624670124150354066317359375318580748992256424102518419762704376451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcbc03b48af910f8f88d17ddf56437923c44f2b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stardog.cluster.ldbar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a47ac173000004030047304502206c0797172f369b571402317a402d580278926035c9ee73f8cee64fcaba73d8ae0221009155d527ddd7f5cc7645d72cf61b009ae11ab6a284607e4557e11dada2ab2ee0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a47ac3b500000403004830460221008bab0f24dc0f13f7d1d8af82dfff636c111efd23fb373160de1e970dbf4c966d02210082fed44e889e3520bae93ae2c3dccffe2790ed9c3f9edbdb81250e90b24b7234
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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