DV SSL/TLS Certificate for bankgoda.by

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the bankgoda.by DV SSL/TLS Certificate

This certificate with serial number 06:da:db:be:1e:f2:95:8a:d7:a8:b6:6b:4c:3b:aa:b0:ce:1b for bankgoda.by was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for bankgoda.by provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:da:db:be:1e:f2:95:8a:d7:a8:b6:6b:4c:3b:aa:b0:ce:1b
Serial Number (int): 597147359674497867662823977131060153601563
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b9:67:ad:11:6a:b5:8d:2a:34:6b:4b:d5:51:bb:a7:a3:9e:cb:d6:0c
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): fc:d1:f5:1b:d7:5c:6e:5b:26:2d:8c:a1:9f:1b:a3:8b:05:59:61:4d
Fingerprint (SHA-256): 92:b7:f6:f9:5f:1c:61:f9:e8:22:84:d2:85:29:c5:52:87:d1:b4:08:89:aa:2c:4e:1d:c7:0e:52:b5:b9:c9:89

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/28.crl

Check the revocation status for certificate bankgoda.by
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for bankgoda.by

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for bankgoda.by in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejF5KaH0DEWzjPa3Hrc
oeeF46cBYgbSED3DTL2GKiJMspBkMQjGg/VMG99a/Di8nUcH3r3/vP30fSw23Ryz
/FLdn84TH2ou4rHUNgxEOfFs4DNS7XmiCszl/KTJcNgAz/1uPpkiCevmcblAa24M
dqGbK8yNKQpN2Cm+6UbYT1RNapwCRbwuMta0ECKMJ31yjj5nQFs/AYZLGj6uRQop
anTXGDHBgtWBHwt83cr2Gz/zsIng0oBdhWqYHUp83J7ZfGqiqd4orGzan1Ioy9cX
QbVZ4EHxq4VU2QrbfDOsRIibuunLnTMxa0klFA0vyBwqnsn6kGYf0QXaZiGLuJo8
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 597147359674497867662823977131060153601563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 01:24:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-23 01:24:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bankgoda.by'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22458964633325737776879330579747816069938479649535902465250818670913761487082931087072620958789304703577332352274745377891917752990191525757835163013631816092230242619878620430096618946260577828516378602872916930257037066187702493980202057585652285388132295085640137636870900691104893202955627754708032959687409566077856400345016887407343632630232654791713315664372294730619636507312585965547479129711075954889201223717185618943270883432688301001327875040289347338661285273870999094155256329643385542086183800355826308117108925263680778198317565851716759552110019650582872462436175397965870409072485743481452244909221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b967ad116ab58d2a346b4bd551bba7a39ecbd60c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankgoda.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankgoda.by'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/28.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196659ad1f700000403004730450220782a23f7805af80e992d4534d8b1fc77667cb88a39dd8e931a276afacc0d5cbe022100a4ec053636047c704158a8ec30d2a97a25be9852c83687aa0fd116c317f5b5280075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196659ad9b5000004030046304402204f0f949e532e98256c11495ddb9f6368c978e873241a2a8752751dcaf6b545f002207e33f72194368a8569441dbb0f6447d10c4b63a173480e9d2600fbe9581ec5d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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