www.klr.com.ua

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:04:8b:75:dd:5c:c4:19:1f:75:55:28:a4:1a:fd:c0:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.klr.com.ua

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:04:8b:75:dd:5c:c4:19:1f:75:55:28:a4:1a:fd:c0:92
Serial Number (int): 337566149017397488992101123809774361493650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:08:43:43:96:52:38:bd:6b:55:7b:06:d9:69:5e:46:00:57:97:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:e6:fc:9d:39:3c:5d:8b:53:5c:65:b7:ea:e9:ed:d7:ea:41:3b:37
Fingerprint (sha256): 0f:94:86:d0:6c:a1:18:8a:7c:af:e6:f9:8e:c8:2e:ae:e6:cc:00:13:71:d9:3d:71:b2:c2:63:80:ff:47:ad:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.klr.com.ua

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.klr.com.ua

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.klr.com.ua

Other certificates including the domain name klr.com.ua

(limited to 100 certificates)
www.klr.com.ua
stage-api.klr.com.ua
stage.klr.com.ua
jorgeluissixtoroberto.tk
feasibility.skywire.co.za
follow.beet.live
www.menu.place
info.klr.com.ua
klr.com.ua
klr.com.ua
www.busbeep.com
customer-connect.cookdup.com
www.tiptruerich.com
woodmark-cert.3dcloud.io
stage-api.klr.com.ua
klr.com.ua
www.klr.com.ua
admin.staging.kichin.io
api.union.do
www.etc-cat.com
klr.com.ua
stage-api.klr.com.ua
stage.klr.com.ua
www.makkan.trade
smea-dynamic-stage.ibtikar.sa
www.klr.com.ua
stage.klr.com.ua
cms.klr.com.ua
stage-api.klr.com.ua
resetpassword.gumb.app
stage.klr.com.ua
stage.klr.com.ua
api.klr.com.ua
stage-api.klr.com.ua
www.creditoperola.digital
firebase.ucentric.sisgroup.sg
firebase.ucentric.sisgroup.sg
stage.klr.com.ua
*.klr.com.ua
admin.coreall-bc.com
api.klr.com.ua
klr.com.ua
www.pcset.hashito.biz
api.klr.com.ua
dev.maeckers.com
stage-api.klr.com.ua
stage.klr.com.ua
finditly.com
partners.aseguratufactura.es
klr.com.ua
staging.app.botio.io
workspace.klr.com.ua
develop-api.klr.com.ua
klr.com.ua
api.klr.com.ua
www.hevasaude.com.br
cupones.javimogan.com
cms.klr.com.ua
stage.klr.com.ua
klr.com.ua
www.mieter.woonig.app
stage-api.klr.com.ua
klr.com.ua
stage-api.klr.com.ua
develop-api.klr.com.ua
hc-fc.travizory.ch
api.klr.com.ua
klr.com.ua
www.klr.com.ua
www.nathaliesaab.com
info.klr.com.ua
stage-api.klr.com.ua
invoicron.com
info.klr.com.ua
www.klr.com.ua
www.operandus.com.br
confidant.finance
alexa.radiozeta.it
cms.klr.com.ua
nftninja.app
stage.klr.com.ua
confidant.finance
www.klr.com.ua
twentyfortyeight.stuartsewell.dev
cms.klr.com.ua
api.klr.com.ua
www.nathaliesaab.com
boltchem.com
klr.com.ua
klr.com.ua
woodmark-cert.3dcloud.io
stage-api.klr.com.ua
www.klr.com.ua
stage.klr.com.ua
www.melevaprogain.com.br
klr.com.ua
atd.eco
klr.com.ua
klr.com.ua
www.creditoperola.digital

Certificate

The complete raw certificate details for www.klr.com.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhZi9LJqboK/9QRPIxhJ
pyYURpsEM1DVEelre7iQcKIFcCgn/W3Y9tpYElALMr0RVPYyoAm13W1AuHjB4B6B
CDlxv1M7KKrfETIE+N+rsrOvhSRmg2FcZ4c180u5/nd9R2+OI8JkwZXubFWmcYlS
74LP9LpRwSEnmkKSEQiRlymwXb3mymTPVIU4Jdt3ky2luZx7Z1KYVx2Q2WfT6GkZ
E3Wps9mFwiaGjR0G2FxSWlOEVJQU3/VTN+2mQ6wRRHwV2ITE5K2t/27J2p93Aiou
VCYu1M/AvjSjXnOg7LwoqzYPxeqqpPGe2xKKcODtqqXoufRkNu9A5Nqs2XNo+M9r
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337566149017397488992101123809774361493650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 08:25:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 08:25:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klr.com.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23996317160958550078495616006183523736457560126380706987715891025133249922883917891125558623572803017882421874881319001100386036826318467133628859187155048557990873680649459193652903036509416700335957480901307322342510603341521478508027905646524622221083043516590649939085972449830866188467006969247451137356286909295575458534746844605286070025297465831298902223368143966432949915703056091916946591006189881933798734523723891752885979810532915573708554430447784276487004711916369930738254984755250120568101775909235402427729359881408713151750084222311390834466470726885750354688801463341117611007799563231556816300883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88084343965238bd6b557b06d9695e46005797f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klr.com.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017a1423f4020000040300473045022100fb5c0550b0caf904578ef7513b9ed0795decb8166a9be08c28338b66e581ff7702202c162050213e670c0ed8886adc60d16a8ef19dddcd487ed32513375dd93332b8007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a1423f3f800000403004630440220718ddde7596ee7f6f5487414ee0612a4b5031b13aec967001d2b7c4d9896ae3c0220107a5e873277eda968f2fe4e82f5fb4d619c768fc55b3cb813f9e0058f6a6805
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b467fb188ed6a571ef5a30e878bc780c55e4911461fd384eab9dfa8c6861d6b27bec3b2ba7a3f5265b5c5dc91528d19852a66fce79b38d4ca52802d65eff0611330f462f86f663c844977e4a94bc55b7b93d4a6cc6c4474bdde020e410ef7485ce78827cad0d199aa7f22b9e96a1d3930b679a6f74c832c68b40eeda1adeea5b07e8530f8f86c51fcec12cc3ef815f4b105b46c8c7da528bd476f872c8cf9a1c018d811804fda2bf1e3abc21ebcfe2eb24edfcbb597e35d4975f5d5129ac77f873607cf176db2a5f377067716126770d0a3148b5cff11d9b157794ead026bb0cacefbef62724a00a8c03267e5b0e642606ce65593cf3765050a0ef083910cb0