DV SSL/TLS Certificate for kiilivarahaldus.ee

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the kiilivarahaldus.ee DV SSL/TLS Certificate

This certificate with serial number 05:95:c0:20:5b:40:b2:05:3a:fb:86:b0:a0:b1:32:98:74:b8 for kiilivarahaldus.ee was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for kiilivarahaldus.ee provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:95:c0:20:5b:40:b2:05:3a:fb:86:b0:a0:b1:32:98:74:b8
Serial Number (int): 486518882109536212239373275834839121556664
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: bb:3c:31:4b:41:32:35:b5:b7:a8:b3:0a:87:31:8b:ad:18:92:cf:03
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 9d:ed:19:09:5b:03:df:2e:ca:68:33:f5:8e:f7:e7:2c:a8:e6:97:c5
Fingerprint (SHA-256): a6:2a:16:08:15:bc:22:98:2d:a9:88:5c:54:1d:58:e7:3f:0f:61:f8:74:98:ab:f2:8f:5b:19:20:5a:38:65:a0

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/57.crl

Check the revocation status for certificate kiilivarahaldus.ee
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for kiilivarahaldus.ee

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for kiilivarahaldus.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GfB9dnbvSTfa3XW3oj
DZN2tXsiPGPqNxN3TPvGZhgKgVuvAzuwgyFO6tIc/nsgcch/WbKnxIS3CuT/N2OY
W161kNjJXdSes+8sPovQjoCux7KeQSb3ucqOhGc2f/xLKqf2zTWo+zzTmIRxyrk8
/z31Jy98TkbzXdTJaRZegWL7ssKe8rXtPTdS5UStqo/1W1BIWFNRbPetFGsTzWp1
yNPBmS1o+9E1+rd2aXzZZYLUB+kDOkRXGkwC0jL3+pLXX9wWmpiHO/+r1DpAul0d
ovdcH2kAcZw27zOKTXd5AACrVZtOPxJKeWCpEa131Qq7AI2aO5uAP5aO7cPkz03e
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 486518882109536212239373275834839121556664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 04:44:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-26 04:44:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiilivarahaldus.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23717820995622015909107810364375337264459251713150448813995124942351366388476893501266979232237260929690999731537901833512839809048410638663254367548917116500084040634259524411792297918986188258813868113753423219757472370707760206716269712538183356885616891182140906534386497035502055991030881710093930813899971597903777093885750724084459911543606301503720010943533755950475091463814579052839081617614421132553292908116850404692268838473017063860327605170324838826059375488828399493919666148123097832641300496034817318362842908123305823481523368926624378116444520672741528104008492133665479605929655034369843600940623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb3c314b413235b5b7a8b30a87318bad1892cf03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiilivarahaldus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiilivarahaldus.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/57.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197b50fe08e000004030047304502210086eeecfdbc79b14031f80bd8aa06629c2e7e6479c8326639b6188f5de727f6e0022042a7805afef75ffa030eb3a78c0d3156478dcdcbcef1135a85b15572ac8e585f007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197b50fe0ce00000403004730450220134805c7f380b98f8b74acec9356f6b9900050d4f3221fd8da0cef4f59f883ad022100b2480ebcc00ad14a5c443d7ab102d2eb1f7ad06ceb6d971ca9521c685f2c5704
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059b55bda76ab01ce229c4da784de887dacd6add0d6a25946ebb9b5d5fdba230cc426b3efcf4d01a3ce660fa5553338849e6e8a2b7dabaaee1855b81701cada83f64946a5c2b7d8ace4b8f2a1f703031dc6055084cbc62e66c174343ef383407d3db977040444d4662b6e556a69175e108fb98ab20abf2b07a3cadd139bc1fbe147b4d8d3d60c16265914adc48b878914acafa6d5b0fc2eb655114e51c16879941da319e3a1831c1f04791b7879aa39d239783804467448d0abf423543596b327e61e8afcf596dc57f9fb1462ff651188387176f56e3eba55df64785b6fc6fb8b080e0a5199a046a53499b9737d9c9aedf45b1cced18a9fc1db7867980a41f4ec