vpn.rs.ba

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:fa:f4:14:22:eb:b2:cb:bb:57:a6:fe:97:81:2e:91:7a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.rs.ba

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:fa:f4:14:22:eb:b2:cb:bb:57:a6:fe:97:81:2e:91:7a
Serial Number (int): 342317353083337761973577350307146168701306
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:59:fe:54:6b:d8:14:03:44:a1:c1:fe:3f:b2:2c:cd:5f:77:be:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:f4:64:14:29:1f:54:7f:cb:4c:c0:85:f3:ba:b9:ac:29:7f:bb:0d
Fingerprint (sha256): 04:28:80:7b:f4:0f:7b:0f:d1:44:a0:00:30:0d:79:96:4d:bd:60:8f:83:29:2d:cd:6d:f3:8f:1f:e8:73:02:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vpn.rs.ba

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.rs.ba

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.rs.ba
www.vpn.rs.ba

Other certificates including the domain name vpn.rs.ba

(limited to 100 certificates)

Certificate

The complete raw certificate details for vpn.rs.ba in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342317353083337761973577350307146168701306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 01:42:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 01:42:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.rs.ba'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882826478399923832499588009274243852099749115939868004612218528619851984290568543689755736698730313965874978242296153133574503990044323360285369825638982876533716505449715718413887651418167515836401617559136933841968713368018839011843377944514994666046786564596028305720870485775802610169755011362895517348156499071184459805323348386725327067220582345332510363151422062652705196869322002988123727910116094072714742977156881194762256129711337437802443002333005506551411771886711976302894427473297538471730877775291289564291176644605339919635424933232005275195657867323725165786934693432937756966050055929543884500515261871532382912696245600384307052470034583888625326850596301374555381961812550892084734060861848961886837572143069852355173038558558132407559401433531713661621157594220728697782016528293177700200327535696686239805363404243009261534171511411491868995071844882068552021271710186361873077029501961314899247166339044217831924916297830665221755787638518957076651637502388630995196500699658168838288826805821466505706730209688364507716338211154735215735146151500459583200000125103731512299852981280669172465456785799306646486448055529238156072758385588876770448358197846496578752304415004090373741129478135551000570041565791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e59fe546bd8140344a1c1fe3fb22ccd5f77be80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.rs.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpn.rs.ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c984dd19600000403004630440220774c4fb05e1d0fe3d25a10f87c4979caee6ff1ca01ab694162b1465547d83a0c022079ccaf9d90fb52316b37b7af05d94ac5068581ed16449f6572fdfde33675f842007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c984dd36a0000040300473045022100dd2296023d0bf9c158f2e9292f9e22fe54b1bf60cb26cd936ad3f44c58424580022032c5da57e51998238b0d915e87c1e3e3af8b1dea2841c2dc815b9f0fa0391057
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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