choroman.ski

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f1:92:6a:fe:dc:f8:31:ab:41:ae:92:74:b4:33:6d:2f:ad was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=choroman.ski

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:92:6a:fe:dc:f8:31:ab:41:ae:92:74:b4:33:6d:2f:ad
Serial Number (int): 430651816995077806099541041292180374499245
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:69:21:54:21:d7:4e:d4:e1:49:70:13:0b:3a:26:da:73:96:a5:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:1a:d3:99:6f:66:04:1d:4a:af:9d:7a:a8:4a:55:7d:37:86:af:62
Fingerprint (sha256): 0d:5a:8a:a7:14:4a:2d:35:06:07:dc:d3:61:9c:6c:88:1c:e7:73:45:1a:78:93:a7:43:ea:00:2f:26:b8:3b:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate choroman.ski

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for choroman.ski

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choroman.ski
mail.choroman.ski
webmail.choroman.ski
www.brianchoromanski.com
www.choroman.ski

Other certificates including the domain name choroman.ski

(limited to 100 certificates)
cdohast.noteble.be
agenda.bornia.net
manitu.app
choroman.ski
www.git.choroman.ski
earthemail.org
api.meetmap.co
choroman.ski
eventfinder.live
gelachopp.com.br
149208.choroman.ski
bingo.minhnguyen.ca
ongroups.com
pins.choroman.ski
bdo.c0de.xyz
coinsvarsity.ml
www.noblesaprana.com
nextravelme.com
www.assessoriaimobsilva.com.br
choroman.ski
www.electrohuila.website
owner.11spasoftware.app
pod.choroman.ski
dgs.choroman.ski
www.choroman.ski
lfm.choroman.ski
prjatu.dev.gorenjc.si
git.choroman.ski
makaylaclausen.com
pod.choroman.ski
thompsonandsteele.co.uk
weerman.dibarto.nl
jamesrc.dev
choroman.ski
www.vrento.mx
choroman.ski
solarprotect.dz
agenda.bornia.net
storybook.staging.hellolluna.com
www.polarcode.app
eventfinder.live
git.choroman.ski
choroman.ski
www.futureleisurefoundation.com
connect.geovina.com
pic-drbet.mentor.neccton.com
www.toiware.co.jp
www.raphaindia.com
www.govocal.ai
www.raphaindia.com
www.cheeseapp.co
khiansh.gq
moestuinplanner.weblighting.be
extension.apps.astor.ai
holopin.choroman.ski
jamesrc.dev
nextravelme.com
pod.choroman.ski
www.pod.choroman.ski

Certificate

The complete raw certificate details for choroman.ski in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd3Y3ZKqBQoq1bGYA3fH
VRO2WkpBUSPA5QOf1GGRKNc+4nzdbrTGu1842hcs/2SUSjkiSwvipoIdJ5kDvNrE
+zZXgdUZ5iMvSHG2R66+kLrnvxHTTAYNKxnp2VnL8jzLqLu7pArlazEROOB0GmsB
QfngWj/jqxG9sDXB0SuuFmWX8X5uFcJZDOX0CA73OE2nDE8WZHc/ouwQBjq+OxT1
iZvnj3bhghl1/znL9ZUv9LiWuykPwmOG+w23c0oYwT4afGR+OoSYKgLSYWlnz5qZ
LayIo6Bjh/LvKHw1DST+8EJUbrvhumumE7HI+2OAue5iZ6SUSNwGACwsevCC/OxG
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430651816995077806099541041292180374499245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 14:35:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 14:35:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choroman.ski'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22453576876534261211757753100789164853862166634023602500454545787950243456031588598773635583470890296438061889704578969863884090369200941546228105055513939237755622744233747070938056212380969910416313799499720129290934536911353163054097129116677581529215151373910377289263618780122905664659982823037187264724122986437558943199826830581021835043353399335068863068885772347576297485198393206481085737102641878275024136723881320594310717831112828210374915166344079955318932010941228796698804966559636134384730441723777654853191137610587395413733234120116135774244159365989613875706878095030955096395672323080779058661051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8669215421d74ed4e14970130b3a26da7396a5c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choroman.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.choroman.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.choroman.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianchoromanski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choroman.ski'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b2d6e5713000004030047304502210083bf421138ebd6b29917574cb16f80688100b54a4abea2728fa628f4731ceab102201b12060a07b2bfb6e7fc63fb5adbb88665f2dfb66506a0bc80d8560d1d5b7997007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2d6e57060000040300463044022037c999a114a49fbb0a88c84dc0ffe9909f51043413c9907f355caf1da80d0334022011366db4e4701dbaf8ddc0f70a15f41425911ca862e246b0f57d8f36850b0662
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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