rezerv.rznsp.ru
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:20:e4:4d:e9:53:9e:d9:a3:2b:73:4f:62:58:99:51:37:b8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rezerv.rznsp.ru
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:20:e4:4d:e9:53:9e:d9:a3:2b:73:4f:62:58:99:51:37:b8Serial Number (int): 359641647990834622296598083672163495262136
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ad:3c:cb:19:87:97:06:36:fc:c9:30:5a:77:d7:ff:c3:08:ee:93:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 06:76:dd:a2:3e:8c:41:e2:8e:6a:5c:56:bf:9b:a8:49:ac:bf:4a:25
Fingerprint (sha256): 14:7f:e3:7b:d4:31:88:dd:d4:99:3e:56:70:fe:3f:b2:c0:f0:06:2e:f9:84:12:02:22:da:5b:3d:ea:6f:69:d7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rezerv.rznsp.ru
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rezerv.rznsp.ru
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rezerv.rznsp.ru
spb.rezerv.rznsp.ru
spb.rezerv.rznsp.ru
Other certificates including the domain name rznsp.ru
(limited to 100 certificates)
Certificate
The complete raw certificate details for rezerv.rznsp.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgISBCDkTelTntmjK3NPYliZUTe4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjgyMDE5NDVaFw0y MDA0MjcyMDE5NDVaMBoxGDAWBgNVBAMTD3JlemVydi5yem5zcC5ydTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKy3gR156eb2HP1lNrRfdQCw/JoDvUBr wqMmvTOyHUWtHAZlxiuNAWkqRDjBDVN27hh6hkEaQ8Fc4E76/XY4dUcMYVGTGDMK ERRaaIF+D+Y0AgsYKhmfMOAYG4lnmzwLUyyIf3YxDF6fgzQmM1LExaep0abBOyoo b/5Ri72YXVgY+6k8/1/+cbrYiPgsxKYYbJeDWgttY8rcARc4SO2Rx2C7f9IThf6J hj0VcnG6S7Yw47nVWTBm1k93gAhD40rZZUVWf3L4HS+QhnrCInDLz5c+H2eQX+hM 1ed216GcDSxQoMyX2H2maDi+nZqzHVJ2mglhhRDXPi3Kq+bkSlRPMTbNlbLcEAz7 e26At2GLprHJ69tEQy+fIO0Qkr64e4gNRG0EBXTY51MR+/hBGUFl7sZaC4mhso0P lGwzf4BTnbkgOMBrSOKBbCzjVml1v+XadsmdTo5RgnGvlrOew+SFeCXdRFIlgo4F 3ruGD3rIb1epSG8sdY+ySkargIqQMvGhud+P8twyN8kuvgfSLr6ytDy/dBMFXBCV 5YcWdhx6dijlQZ3JWS2qpV0snXmbtPRGYKvt+64NTxynALnWwyH7S8nneRQg395g WQarzHprnW1N8NcHhl9qJwqE2pcoLCJL8RzC0tZR1X6b3kAPPWfU7bYtj9E4SMD6 d6D6asE7Q8KVAgMBAAGjggJ6MIICdjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK08 yxmHlwY2/MkwWnfX/8MI7pOhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPcmV6ZXJ2LnJ6bnNwLnJ1 ghNzcGIucmV6ZXJ2LnJ6bnNwLnJ1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAXqdz+d9WwOe1Nkh90EngMnqR mgyEoRIShBh1loFxRVgAAAFv7gZE9QAABAMASDBGAiEA7pJ7jCzNXMUC3+T8KSCQ M0iMuyjJCgdfiy3ggjABSAwCIQCGkPbLgbmzpu+s+mRrRBle4OOxQg2hq5cTijsm vUGCMwB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb+4GRP8A AAQDAEcwRQIhAJ3v1kA7nNGsIzhBI8GFeFUebYEdL7I5DIPB+clc0bH5AiBmNJa9 2Y4322IYmJ7V6uYVNiTFPfJC5uzvr3GTxYC6QDANBgkqhkiG9w0BAQsFAAOCAQEA TWCnHPYFwy5cJUx08D7SzN4/fPpmw8HMqpT3mbK5EKVUbYoGkSQ5WUvuYcfpewqz ifLDJGg2dURuXmndZEYxNYAkVbf38d7DLNK5z1K6uSr/VDHAS9ve7T8Pxmrlp5AX PJZ2vqd7POBzrNgYIXSY0++z70v/j51jDYUypdRMnLoks3wcfV3MI8MFkBuixSpw UOC0iL2zfc5884z1D5iCw2u5yLh6P3ml6mlSLUK72K1HlZgPx9ADflp/X0+XZtGC 7wWke9LORkrZkwqiu/CFQdBXnahhuS6wR18FVcEHvTve+yc0jsLbA6M/UwFvnutu Z5gFR6KoOZq5fjBAI6y2rQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArLeBHXnp5vYc/WU2tF91 ALD8mgO9QGvCoya9M7IdRa0cBmXGK40BaSpEOMENU3buGHqGQRpDwVzgTvr9djh1 RwxhUZMYMwoRFFpogX4P5jQCCxgqGZ8w4BgbiWebPAtTLIh/djEMXp+DNCYzUsTF p6nRpsE7Kihv/lGLvZhdWBj7qTz/X/5xutiI+CzEphhsl4NaC21jytwBFzhI7ZHH YLt/0hOF/omGPRVycbpLtjDjudVZMGbWT3eACEPjStllRVZ/cvgdL5CGesIicMvP lz4fZ5Bf6EzV53bXoZwNLFCgzJfYfaZoOL6dmrMdUnaaCWGFENc+Lcqr5uRKVE8x Ns2VstwQDPt7boC3YYumscnr20RDL58g7RCSvrh7iA1EbQQFdNjnUxH7+EEZQWXu xloLiaGyjQ+UbDN/gFOduSA4wGtI4oFsLONWaXW/5dp2yZ1OjlGCca+Ws57D5IV4 Jd1EUiWCjgXeu4YPeshvV6lIbyx1j7JKRquAipAy8aG534/y3DI3yS6+B9IuvrK0 PL90EwVcEJXlhxZ2HHp2KOVBnclZLaqlXSydeZu09EZgq+37rg1PHKcAudbDIftL yed5FCDf3mBZBqvMemudbU3w1weGX2onCoTalygsIkvxHMLS1lHVfpveQA89Z9Tt ti2P0ThIwPp3oPpqwTtDwpUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 359641647990834622296598083672163495262136 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 20:19:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 20:19:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rezerv.rznsp.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704623125236567246723793247714165083669580829698130016069173880582339733845144137140284361467050814017565600993206003051233884112369031677126031377698636632636386364663818924194741072369411849560936885831161597666341190323052649313833079116788177735135079910921061491047146081641583927468416403540902413070559583960783336979734609529647856135343769320314906713812538168926695847530288900264752871528998973036939757303787738502580150815980707602091327325007607550553487353053820215504671497412800612581679796212349516208685226675927771378244744963744139420597341148860729141376733567099088021481564906757854209529564374551051095110574104573693454510648398970878741634109429506821557767500365744560082188992332476505979441549363567325173123402801098595869912200894682117770786675153863068416162264795627540849751699098974588677219700582397510564608833062542051299840537551679500821127647514062260745848534585659178206568441307973471125633737704184770093317298995020158142836860854716978066141782171312205920227890383651349157184781128631315604871755308143397202858365100283938007957788057043484705477975954552935731969462299743016358065203193828416363891025623109400420556213645427247811457829967364191893843710093274121992062590239381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ad3ccb1987970636fcc9305a77d7ffc308ee93a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezerv.rznsp.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spb.rezerv.rznsp.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fee0644f50000040300483046022100ee927b8c2ccd5cc502dfe4fc29209033488cbb28c90a075f8b2de0823001480c0221008690f6cb81b9b3a6efacfa646b44195ee0e3b1420da1ab97138a3b26bd418233007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fee0644ff00000403004730450221009defd6403b9cd1ac23384123c18578551e6d811d2fb2390c83c1f9c95cd1b1f90220663496bdd98e37db6218989ed5eae6153624c53df242e6ecefaf7193c580ba40 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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