*.lingid.ee

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:83:9b:94:f2:3e:ee:11:b4:90:8e:fb:06:bf:40:0f:e7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lingid.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:83:9b:94:f2:3e:ee:11:b4:90:8e:fb:06:bf:40:0f:e7
Serial Number (int): 322422338168578934324912818988593832792039
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:6f:76:88:27:fc:0b:49:6a:ec:ad:58:d8:01:a8:76:fb:41:00:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:2b:64:24:18:f4:f4:e2:3f:57:58:bc:8e:53:f3:79:ec:16:8a:86
Fingerprint (sha256): 0e:69:25:9c:e4:61:01:5d:51:51:34:db:59:1d:c2:3f:21:c1:7e:ee:c3:b7:0b:a5:c6:c8:51:9c:91:48:8e:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.lingid.ee

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lingid.ee

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lingid.ee
lingid.ee

Other certificates including the domain name lingid.ee

(limited to 100 certificates)
imo.ee
imo.ee
lingid.ee
mmmm.ee
*.lingid.ee
ability.ee
lingid.ee
min.ee
imo.ee
mmmm.ee
mail.lingid.ee
min.ee
alamdomeen.ability.ee
lingid.ee
lingid.eu
lingid.ee
lingid.ee
lingid.ee
lingid.ee
min.ee
lingid.ability.ee
min.ee
imo.ee
min.ee
lingid.ee
imo.ee
min.ee
*.lingid.ee
imo.ee
min.ee
min.ee
lingid.eu
mmmm.ee
ability.ee
lingid.ee
lingid.ee
min.ee
lingid.ee
lingid.eu
imo.ee
mmmm.ee
lingid.ee
imo.ee
lingid.ee
lingid.ee
min.ee
lingid.ee
mmmm.ee
lingid.ee
lingid.eu
lingid.ee
imo.ee
min.ee
min.ee
min.ee
imo.ee
lingid.eu
*.lingid.ee
imo.ee
imo.ee
lingid.eu
lingid.ee
imo.ee
mmmm.ee
min.ee
lingid.ee
imo.ee
lingid.ee
lingid.ee
imo.ee
min.ee
imo.ee
lingid.eu

Certificate

The complete raw certificate details for *.lingid.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322422338168578934324912818988593832792039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-16 23:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 23:20:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lingid.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787942994099567477045693182038018155626163172043919297643164135913989398421508616140964697706134104884335606944201356463270241539609600740563725201464917004253100379319472669351022245185873177855670029982776099047443628143159207680085710902055487487821816497756627131094193024437657709237380483655235388546042323918423786306059062993459937230639220796087074311476186891076726510147578806567732348007512041096125859615598343209568678122925851449101604418598086144987719017714195934207387842217433164127835591271560537700006065159111296954749899636797919077451848606319583755609122493291204308018861842734680956085437333979503455795307578338550091441011443245092592877658566935698896437274321765773711930360557855414822540374197471809211761864764294902298222633869340704106464076124800178169070017937331528863119710575466474446870571127632225910111602674796587362497104009664657369701723432972592894612884387665540695441816285430944831636798510764201455782122237343783731506244555605462179508038820314844233668358355627877519639187404163968492900343997131884798458384776764674066367269056395763621017711567341685388478575566286351283871006468876467749332228576339448287453805850652050081673476606084412134727045318145181577819260035259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e6f768827fc0b496aecad58d801a876fb41006a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingid.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingid.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001878c9598860000040300483046022100b6fdac79a3ac2cf6cbe649ff5db37f3321ecad9cbbdb90fa70265a80fb758cc102210083c36b5172deac30a29eaf009d0b301c5dcc3ed5333ff43d85ee14c374d9684f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001878c9598b70000040300473045022100de8dcf11ad0013573157285c7296c967b2908a5108b0c3f6644be20de07b8fca02205d60aefbff7af1de773d7efde8f41fe354267702f945d5dcfba4ecc6158eaf05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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