DV SSL/TLS Certificate for *.vitalis.ba

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.vitalis.ba DV SSL/TLS Certificate

This certificate with serial number 06:64:fc:f5:39:43:01:9c:bb:03:36:fa:71:09:b5:db:b8:e5 for *.vitalis.ba was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.vitalis.ba provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:64:fc:f5:39:43:01:9c:bb:03:36:fa:71:09:b5:db:b8:e5
Serial Number (int): 557038191011729599316002047252098375727333
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 6f:ea:fb:95:a9:5b:42:df:07:3b:51:02:f1:81:f7:c4:de:b7:f9:6a
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 1b:c2:c0:d6:fa:f8:46:6a:22:11:6d:94:fd:a5:62:05:19:3d:54:74
Fingerprint (SHA-256): c0:8f:f8:47:48:11:fa:ee:87:e4:c9:d1:b2:29:1c:42:99:f2:d0:b2:b6:de:97:15:76:ed:06:63:41:37:98:d8

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/102.crl

Check the revocation status for certificate *.vitalis.ba
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.vitalis.ba

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.vitalis.ba in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzktQqoY/+WYaHjufS2TN
EpLS7eLX+RXvFjM6Z76P2MZgRxjnBtjKn8BKo5vUSlQoaI5y1Q5M6K9lWYJWRLvY
idd3p5Maolcyi5i59tAvj/F8hpYVwgQQU6nz/r/MhXf5ffNf+QwBcxh9FN5yhDyi
/Pxrv3f1GJGpzDkvQHUQo/CwN/9pCDKVjd0zLK5P3jhwZ+fbS0fCYAQL8ev/8UtQ
dtIWegw5Uz7zcZATLnF58DaMjxO9ByhIaOK42SVY8r9ajJvsCvxNykL7X0ScC27e
V3tfISFrmhWneQRYSGF1/LAnyw4jqEpJZ7QCsBPQA3i/Z3x8x3Dc1EktuRkipWuw
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 557038191011729599316002047252098375727333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 23:39:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-27 23:39:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vitalis.ba'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26042230084001545731428177739851027643713476249291513628760204683534975202262508752162211455024938130143534565069488576519386121863175327930702228499038160892888131858559955504011075453355238250281417258117044299703407974861102560635768178001279318731282209223576447985302821312412084027342912511315580923026997230770876175952721145095924140994300234239772958892130114189015145077112024733197740599035856707302594554049532334145211167393268812269724423627341598011032050652851190038585910298102616998176906794842220422247006971883128557537405938002801175386483472133398876422277909789544889082826902513076283435102351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6feafb95a95b42df073b5102f181f7c4deb7f96a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalis.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalis.ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/102.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001971ea041ec0000040300473045022100da893a89141e0cae69bcda452bc29f2245c132095cde6f149439b0cc0b587a0702201014c32a2641e137b19e7d9a2d24f5ba556a1c77e8e86f9e71f85fdc9adffb50007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001971ea0421a0000040300473045022100e8bd9d660648cc59981653a82bbc6877f962686afcb9a157e0f21a0ce82238b7022057a094a1373de819b907a64c912a68c9efd9bc10ca3c4fd61ea7f2382e7175a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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