git.io.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:ad:5a:75:ec:82:0c:b5:03:d2:1e:f0:7e:5c:84:eb:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.io.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:ad:5a:75:ec:82:0c:b5:03:d2:1e:f0:7e:5c:84:eb:9e
Serial Number (int): 336089122292734340412666911844692132162462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:e3:d5:ca:09:8f:1d:1e:5b:d3:92:c5:31:30:d8:12:75:73:99:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:7b:0f:09:07:5a:ad:40:38:bc:5f:e0:aa:33:0c:9f:c6:70:22:eb
Fingerprint (sha256): 02:4e:de:4b:72:f8:8f:44:ba:64:e3:b1:ab:4d:ac:64:f6:ec:4c:6d:56:0f:01:73:c8:ca:78:5f:b3:66:d3:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.io.lv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.io.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.io.lv

Other certificates including the domain name io.lv

(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv

Certificate

The complete raw certificate details for git.io.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336089122292734340412666911844692132162462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 02:25:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 02:25:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.io.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737530147802246647764517221472401836457319479584704372789889984676400291761151151571305263923551751081408110868681633871323197968821704869132212455370025863333854539250430479105375543625899962468826143812719332552265168855510681540333053877118207632297457606421717510789555858916450640008920370700744715387326490871556013125296053752965905651199800399378476386962165464934896061674044799284092030382622843095030589933837173933699527865364641881815939178444759879937296813296884709175927031045060043066505340791780399740788479779865712959088493870232024849996690771492177118126804283367390635016127037722754550882821637666548078190695011949648362065361114173546964485780358292843201070896293269146922902189797395608681359744109047599205132025882140851570670545283863541675045053969845181100440248801301868459317075938514042490644316370105616920288448452737808057898952167740615191950284300837981999647383639037867643974511108078823923755793447977774366366002746925199864752710956138247790510327124955232540124307342111395246728940194489641506698874779383302399412487682268545488491136239176850303613636783883815258988008292088250148271401872921421706878443618148423084826231523324554949898072758434781245351988593335956940238075543817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ce3d5ca098f1d1e5bd392c53130d8127573996c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.io.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbdffc10b000004030047304502210092ee50579610f66c0b922eaf7ff2eed4eafead4f569cc413a2ea382ff2ef7f0e02202e5f5a061cc8759d9bef504d8801e1308bae30374093862a776e2982c11104b60076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbdffc1270000040300473045022100d1e9d9b1083c4c4b4a1a14c91f68083c8cc93a616a9db6f875aa564ad1a65b2a02207fb9411d6293dcdfd4eab4452d2c95af9ad60a77f6db01d41a15ac6591f9b969
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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