konverto.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:58:a7:2a:4e:80:0b:96:60:97:66:6f:fa:a7:40:32:16:b4 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=konverto.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:a7:2a:4e:80:0b:96:60:97:66:6f:fa:a7:40:32:16:b4
Serial Number (int): 378616192760020450801585024898556910245556
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: de:6d:56:af:32:42:2d:91:79:b7:9f:61:c4:36:07:5d:5b:c9:60:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:72:94:08:a5:25:b2:7c:f0:c9:8a:ad:37:ed:b4:c6:31:32:03:d5
Fingerprint (sha256): 09:cf:6c:ba:9d:d5:a9:80:93:62:c4:50:ae:43:70:17:7a:cc:8f:21:03:b8:3c:21:d4:73:65:36:8d:eb:d7:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate konverto.eu

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for konverto.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

konverto.ag
konverto.at
konverto.ch
konverto.com
konverto.de
konverto.eu
konverto.info
konverto.it
konverto.net
kultivas.konverto.eu
raiffeisen.net
run.bz.it
talks.konverto.eu
www.konverto.ag
www.konverto.at
www.konverto.ch
www.konverto.com
www.konverto.de
www.konverto.eu
www.konverto.info
www.konverto.it
www.konverto.net
www.kultivas.konverto.eu
www.raiffeisen.net
www.run.bz.it
www.talks.konverto.eu

Other certificates including the domain name konverto.eu

(limited to 100 certificates)
www.konverto.eu
status.site24x7.jp
konverto.eu
konverto.eu
konverto.ag
konstatus.konverto.eu
konverto.eu
status.konverto.eu
status.interhyp.de
konverto.eu
konverto.ag
konstatus.konverto.eu
status.konverto.eu
amccinema-ksa.status.vistamanaged.services
konverto.ag
olo.konverto.eu
konverto.eu
status.eurabo.be
status.eurabo.be
konverto.eu
status.madviking.eu
status.madviking.eu
dashboard.itavis.dk
status.site24x7.jp
status.site24x7.jp
*.konverto.eu
status.konverto.eu
status.eurabo.be
konverto.ag
status.poweredbydivido.com
status.konverto.eu
konverto.ag
status.eurabo.be
*.konverto.eu
status.konverto.eu
konverto.eu
*.konverto.eu
*.konverto.eu
status.konverto.eu
konverto.ag
*.konverto.eu
status.konverto.eu
konverto.ag
raiffeisen-channel.konverto.eu
status.zohocloud.ca
status.eurabo.be
*.konverto.eu
konstatus.konverto.eu
status.eurabo.be
olo.konverto.eu
status.poweredbydivido.com
konstatus.konverto.eu
status.poweredbydivido.com
konverto.eu
konverto.ag
konverto.eu
status.poweredbydivido.com
konverto.eu
konverto.eu
konverto.eu

Certificate

The complete raw certificate details for konverto.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAi4RJ7xjltGax5r+PEr
majl1DgUKKQcHYTcu71gh+j49npVnfXgPOSicFR6tU9/T6QIIAudwFy5tXqNKwam
kcYgi+GyFwa2oepCEFlDR3AA1YMsNU/f6GL3ZTjh/KR2cPFpBGUQk8N63fRX8MzV
bG+rtFwX5Uf4XPwvviWJal9NilIKDVZVkQtMdPlQ6l0JYiICtTfYNnA9n94OVI2m
7WeGUrbWxPdFGAIwaIVqnfcOSzQvVtJlETOtrdSU6JYGRDTx1siHmrGH45h1pnMU
J57jD9o3txVDj0nGKw57tTPUW3tpJkBh2qCax6pPujlBJPdaF948blGS/44ZKwzn
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378616192760020450801585024898556910245556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 03:18:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 03:18:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'konverto.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23232148005949886302764305598323950585980175255906641688394444265025553582559534246405616725930365748732187441394695471141736609200317791766987035353804161474901582903867681467767554368248164709961132935414860011102288684194089694188828638300346161155473113595058229484911152899614512119280664436452731537626893494488683461969643578093484232326571193970561292599669035164019211495354857376732161295960678308683513583268677794863367129023516661782355426285815550968285246070058371034845846408108454413436736957641495647255890538357418435232159636773387716033672985123636125958419194352864871390339758141403711285290769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de6d56af32422d9179b79f61c436075d5bc96030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konverto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kultivas.konverto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiffeisen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run.bz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talks.konverto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konverto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kultivas.konverto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raiffeisen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run.bz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talks.konverto.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184f51b747f000004030046304402201d41fc0cdfc4c08785637252681829f8616acf9a89ecafcd603b59a42ee5b66d02207e930a6e454a533bbb54532efdf2308ed1c20a8979d7813d3d80a649fc722e9f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184f51b74ae0000040300473045022100efabb92c0c15a47424842c62196059c23ad4130b4c4de33c2e90fdf8aabb3dd00220076023e62ed76c36521f33fbe5bbd271e8ccaf1da3e508482d051c33d10495a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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