fnord.vernetzt.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:cb:ee:35:9d:ee:f5:18:23:c5:87:d3:54:77:b5:3a:99 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fnord.vernetzt.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:cb:ee:35:9d:ee:f5:18:23:c5:87:d3:54:77:b5:3a:99
Serial Number (int): 263649622134083524173264993634405265521305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:68:02:6a:e3:c2:70:39:69:c5:d6:53:a3:06:09:fe:98:c3:de:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:d8:ae:9a:94:bd:79:da:d0:49:0d:f7:4f:63:29:84:94:74:a3:52
Fingerprint (sha256): f9:7b:bd:be:59:98:2f:b5:a2:0e:1c:52:ce:75:d7:6a:f2:08:90:9b:19:b1:36:0e:e9:bf:c2:c1:c2:80:ba:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fnord.vernetzt.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fnord.vernetzt.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fnord.vernetzt.org
kontrapunkt.vernetzt.org

Other certificates including the domain name vernetzt.org

(limited to 100 certificates)
kontrapunkt.vernetzt.org
nexus.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
trac.vernetzt.org
mail.vernetzt.org
fnord.vernetzt.org
webmail.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
webmail.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
kontrapunkt.vernetzt.org
nexus.vernetzt.org
doc.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
doc.vernetzt.org
doc.vernetzt.org
mail.vernetzt.org
vernetzt.org
webmail.vernetzt.org
nexus.vernetzt.org
gitlab.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
kontrapunkt.vernetzt.org
resources.vernetzt.org
gitlab.vernetzt.org
kontrapunkt.vernetzt.org
trac.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
fnord.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
doc.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
kontrapunkt.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
fnord.vernetzt.org
nexus.vernetzt.org
nexus.vernetzt.org

Certificate

The complete raw certificate details for fnord.vernetzt.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6p/J/4rclCj30rYFTdx
8XZVB96EM9QNYWrspz0AIQTGpKk6S81NRgxXwW2bfy6/f4c6XEAGVvUPqePzhUMM
uhhQKmNYv31iJHLzMTPWGGb5cqhCSmYhOf6GhH6h8t/dBsva5OTJmkGqMaKO7Sy6
cVtI/1StddRoo0GsYhStRicNoa5ixZNeRFxW29DqyaQs5mpHH18Um8VeLwmf90V8
5HcbWpXD0EkhYv+TXFGN/j3skR3oiOBglX6etk0EYFPqIkcAlG5PVtALgAXp0P9Y
Jud2ycA3ZfYkn2Qec7IIZkpp2zdA+ts3lSJTOX+bYBkiqeuSqoesLALPZS4w5tgk
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263649622134083524173264993634405265521305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 18:28:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 18:28:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fnord.vernetzt.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21670825207455044381696344217508053327948590878884575989828486219553014338915746628864767045652645197306479732944922449098011017976351917383291758217896421852931342352805114923637680771588875772712784771637865987118067748632706801667133419416278470674379398618369076091833365615591714318349944694362140028694979437738480398939412180731736398397339579708894340070403194254908477871619402244681153114136794857617670992182197434510442728211594403628710932267316600415508500114496187802301488312486426319514113946197957136692172032353256840814064891479020176042138044537108927910355992576399675483476282726552165479359703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3568026ae3c2703969c5d653a30609fe98c3de6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnord.vernetzt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontrapunkt.vernetzt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af077608f0000040300473045022100ccf07543869e2d79c91da7025da397f4e2ca5e15003b5fb8db978fa522228716022013d820c10de6fae87ad549f4f027802cab2128b89145bb5ea0c8f423a58635fc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af07760a30000040300473045022100e06d826292b4c138fd6e625120fee4a83f5086b2d66c2a0a2d638d6c6a87ceb102204fe572923394e5e1ce2f3f9d98e3b9275371715644865212d8f78af3578c4b15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e8f3227b00437c360ce3828a9d0566d073de9e2836f3a686b55c0c3a8cc337cb6f77458d8912ff28f1a324e47ccd43e65adeb2ab40fea957fd3c2a941bdb1c73523e90ac92c96e3d239fd44cfcd3edb82b8e425d2cce1be2d86bad433866858032bb033d01004e794808b3139d2034f01c7348b04ddb9f19505c5130c8d4fbae3590748c5bb6281b47791fd33679bf023c515d22f4cbe8359e9da73549133a6ca96fc27b1b99fd53ec94582adc1ecdbbdf7c739c6c08babae3cd2f66c45dcb1f84d0afdfc26708b771b763e94257ecbca2fd5c2aa30b4c03a029240f82a4cab5cac50b7ea47b0f51f60a6197e1e707426bd14da246d90f4daa1a26c9ea96434