vpn.rs.ba
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ed:fa:f4:14:22:eb:b2:cb:bb:57:a6:fe:97:81:2e:91:7a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vpn.rs.ba
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ed:fa:f4:14:22:eb:b2:cb:bb:57:a6:fe:97:81:2e:91:7aSerial Number (int): 342317353083337761973577350307146168701306
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2e:59:fe:54:6b:d8:14:03:44:a1:c1:fe:3f:b2:2c:cd:5f:77:be:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 85:f4:64:14:29:1f:54:7f:cb:4c:c0:85:f3:ba:b9:ac:29:7f:bb:0d
Fingerprint (sha256): 04:28:80:7b:f4:0f:7b:0f:d1:44:a0:00:30:0d:79:96:4d:bd:60:8f:83:29:2d:cd:6d:f3:8f:1f:e8:73:02:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate vpn.rs.ba
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn.rs.ba
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn.rs.ba
www.vpn.rs.ba
www.vpn.rs.ba
Other certificates including the domain name vpn.rs.ba
(limited to 100 certificates)
Certificate
The complete raw certificate details for vpn.rs.ba in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA+369BQi67LLu1em/peBLpF6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTYwMTQyMTJaFw0x OTExMTQwMTQyMTJaMBQxEjAQBgNVBAMTCXZwbi5ycy5iYTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANhl3eNfX8RmcDLg+CG1ohTmg8sCN14e4cedv/rn Lw7mruCi77FKTKWP6rUZpG6mIFTGHvWtmYODTR4vKUMoTFcd8STHpkyOQF2Kt8Yh 1O8aL9vQ+gbpY7f2OxEfrN65FcplDs7l2nDQzhYN1p6gI4NVgA21ClzsUjUfdCqa XE6GmapU7Z+cMfNkO7oDrH6buHn5h9rGT1fEcr2ofPXfhUyDL2W7fewQSY7g1wMA TrBJHgkgVgqu5O5VSVqgExTpSUsFvArjjAJsR1FXtOB5plCHNNpjNA0xm4YgPO4Y riAuKYMK48/FyJ3eQ3pwM5gwGE8OyZFeaH09ixBKeGj2qWkHFDJv80e7ZTi6Y9Rl UgTY8nxu6gwJtq8m/PpcIVpsg8VZMf7yR9MN/3N62XG6k4tlfZmJ9yHTWTZ4rsdf eK58w3tJhftkzjZnLaOQ0MDAohnvChrFUsZw80X/Hg0VdCgwAgPdjoGMLBwfR2RM Cn0JqFo6xJuhv6dkEXYjnscuSMFPztLclsSfrD9OoZlay6iHOy4VePFJoKg1ER6l c65wWhcRq7lLAVLUM0odDJ8Rud9bNL0J+xd3Ao4edsCGnioUzPK+31qOif6rBHZs MpaTaOcjQ2uRdFA7PS2oe18PClc8ktml1iP1W8yj5lazWS7TKdJMJBE3GRx17ek9 2YJfAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC5Z/lRr2BQD RKHB/j+yLM1fd76AMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJdnBuLnJzLmJhgg13d3cudnBuLnJz LmJhMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFs mE3RlgAABAMARjBEAiB3TE+wXh0P49JaEPh8SXnK7m/xygGraUFisUZVR9g6DAIg ecyvnZD7UjFrN7evBdlKxQaFge0WRJ9lcv394zZ1+EIAdgB0ftqDMa0zEJEhnM4l T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWyYTdNqAAAEAwBHMEUCIQDdIpYCPQv5wVjy 6SkvniL+VLG/YMsmzZNq0/RMWEJFgAIgMsXaV+UZmCOLDZFeh8Hj46+LHeooQcLc gVufD6A5EFcwDQYJKoZIhvcNAQELBQADggEBAI8LDu1ZPHIK01a9p78Ad6Qu+P6z aW7Eo5wXrgYZtAC1BkSeEH5Me6WrrsXr6UEB7YcSjqwUNQZcSXbF7C4ONkcALp7/ nYiejiKXsJb0L29Z+fVo+tLOGuCROmh4cpwcKVhMyygCiDIVDvXaDqQvnUh995lg klj/Okhpt8GwfeYvMcy5uxPSivUoaWJR5H5UXPP8rKOrhILG4M8a5iIYeQVUm8Yk ebKjsZICBL3dqOEO7iV9U59BSW55WnuZZA1DU5rnDfVKTHI1KpsCSpZxV/zKRmGH cPP3cjuwj/KlnYa5soHApC3y4uL79ui6MdLAIV/jhr/uwPqCK6vd1Crg0gg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2GXd419fxGZwMuD4IbWi FOaDywI3Xh7hx52/+ucvDuau4KLvsUpMpY/qtRmkbqYgVMYe9a2Zg4NNHi8pQyhM Vx3xJMemTI5AXYq3xiHU7xov29D6Buljt/Y7ER+s3rkVymUOzuXacNDOFg3WnqAj g1WADbUKXOxSNR90KppcToaZqlTtn5wx82Q7ugOsfpu4efmH2sZPV8Ryvah89d+F TIMvZbt97BBJjuDXAwBOsEkeCSBWCq7k7lVJWqATFOlJSwW8CuOMAmxHUVe04Hmm UIc02mM0DTGbhiA87hiuIC4pgwrjz8XInd5DenAzmDAYTw7JkV5ofT2LEEp4aPap aQcUMm/zR7tlOLpj1GVSBNjyfG7qDAm2ryb8+lwhWmyDxVkx/vJH0w3/c3rZcbqT i2V9mYn3IdNZNniux194rnzDe0mF+2TONmcto5DQwMCiGe8KGsVSxnDzRf8eDRV0 KDACA92OgYwsHB9HZEwKfQmoWjrEm6G/p2QRdiOexy5IwU/O0tyWxJ+sP06hmVrL qIc7LhV48UmgqDURHqVzrnBaFxGruUsBUtQzSh0MnxG531s0vQn7F3cCjh52wIae KhTM8r7fWo6J/qsEdmwylpNo5yNDa5F0UDs9Lah7Xw8KVzyS2aXWI/VbzKPmVrNZ LtMp0kwkETcZHHXt6T3Zgl8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342317353083337761973577350307146168701306 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 01:42:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 01:42:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.rs.ba' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882826478399923832499588009274243852099749115939868004612218528619851984290568543689755736698730313965874978242296153133574503990044323360285369825638982876533716505449715718413887651418167515836401617559136933841968713368018839011843377944514994666046786564596028305720870485775802610169755011362895517348156499071184459805323348386725327067220582345332510363151422062652705196869322002988123727910116094072714742977156881194762256129711337437802443002333005506551411771886711976302894427473297538471730877775291289564291176644605339919635424933232005275195657867323725165786934693432937756966050055929543884500515261871532382912696245600384307052470034583888625326850596301374555381961812550892084734060861848961886837572143069852355173038558558132407559401433531713661621157594220728697782016528293177700200327535696686239805363404243009261534171511411491868995071844882068552021271710186361873077029501961314899247166339044217831924916297830665221755787638518957076651637502388630995196500699658168838288826805821466505706730209688364507716338211154735215735146151500459583200000125103731512299852981280669172465456785799306646486448055529238156072758385588876770448358197846496578752304415004090373741129478135551000570041565791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2e59fe546bd8140344a1c1fe3fb22ccd5f77be80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.rs.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpn.rs.ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c984dd19600000403004630440220774c4fb05e1d0fe3d25a10f87c4979caee6ff1ca01ab694162b1465547d83a0c022079ccaf9d90fb52316b37b7af05d94ac5068581ed16449f6572fdfde33675f842007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c984dd36a0000040300473045022100dd2296023d0bf9c158f2e9292f9e22fe54b1bf60cb26cd936ad3f44c58424580022032c5da57e51998238b0d915e87c1e3e3af8b1dea2841c2dc815b9f0fa0391057 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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