renault-kalydi.hu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:4d:74:47:da:95:b3:54:92:2d:05:fc:a7:74:95:65:97 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=renault-kalydi.hu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:4d:74:47:da:95:b3:54:92:2d:05:fc:a7:74:95:65:97
Serial Number (int): 309419625850613243201364591438917296022935
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:f3:28:41:15:90:7b:98:59:0a:e5:f4:ee:3b:44:8f:c7:df:95:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:a2:9d:70:72:dc:2d:a0:91:b8:f5:d4:0b:9b:3c:91:d0:b1:4f:34
Fingerprint (sha256): 14:8c:20:83:fd:1f:52:a2:6d:2a:aa:1d:e9:98:49:c4:5c:5f:93:5c:a0:32:b7:ba:de:44:f8:32:92:95:31:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate renault-kalydi.hu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renault-kalydi.hu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia.kalydi.hu
renault-kalydi.hu
www.renault-kalydi.hu

Other certificates including the domain name renault-kalydi.hu

(limited to 100 certificates)
renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
www.renault-kalydi.hu
renault-kalydi.hu
www.renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
www.renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
renault-kalydi.hu
www.renault-kalydi.hu
www.renault-kalydi.hu
www.renault-kalydi.hu

Certificate

The complete raw certificate details for renault-kalydi.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgjCCBWqgAwIBAgISA41NdEfalbNUki0F/Kd0lWWXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIwODMzMTBaFw0y
MDA1MjIwODMzMTBaMBwxGjAYBgNVBAMTEXJlbmF1bHQta2FseWRpLmh1MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1YuO0oxXMNcYaBlB3Gv1+bguliQI
bZLfe/ny8CnxapvNZQ2f+sKGB8TpUQsKc3bt+n3E2g2J3ivmV5gkGRPznieWlyzM
J6/Z6Xes31PpvFMK1Cdo8O9znJ4wscVsnGPQ+UEFqqCnS+CVdJfccvfM93py/CE5
5r6hGp2A2Pk63LXEQdLcCBwfkgErvacYSztx0MlJhROdB/5tII6llI3dNHqL2HaI
4a0MZ3sQR8jcHxq4UPjKZ8HdVMdyCcztd2ykNKo8A1QseRZdrAhwkwlI/+0D33nU
6sFkfaKCVgoCHgypJU4jgs2z4AuzG+8iYSZdIsVQFx3y9KfQKBkjZaikhNrWmWab
oMNiWu0WZ9tcwfmVqKkZZA++SbdptaZKdIGAJgWdM1TKZq5W3tWvpTcr/o/sdxgR
uk94or7GgwDILq+K2SR5TvFAPosP3C0xjqjptqDEXoU1DD/+d8nYqQy3ACHqgtD/
p8KbfHiwA29sCbwXLnd5w7pJVUwxLCkmKrnEtBolRv5KZajxk1IxFE7shgIF0ltA
42a6AqvETxGqUtjE8Mq9r01vl/vqNvuWnNKsGf5Hty/tDl7QpMg01Ci5kSJeOvJU
SgKSX3wieiO5fqNdMUvoi3dpv4g9xmqGoivjZgmyklivvoiDmuVx4IqKUX3M9Vca
9R6ctuK5bjXKH8cCAwEAAaOCAo4wggKKMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
nfMoQRWQe5hZCuX07jtEj8fflcMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzBEBgNVHREEPTA7gg9kYWNpYS5rYWx5ZGku
aHWCEXJlbmF1bHQta2FseWRpLmh1ghV3d3cucmVuYXVsdC1rYWx5ZGkuaHUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXBsPltwAAAE
AwBHMEUCIH+90CwjRYeRWTUi4BOynQj3EBg/6V1IM+DmDX3FMbCNAiEAuf0Twths
cJiMcdI2gQtXPeIwgj0igiIjT+123/dyQcIAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAXBsPluYAAAEAwBHMEUCIE7R8arDT6QEuzz62/tpPbZS
7afRiky1gw9z/Chi89ebAiEAiwjwtVBZbhEIlNeWweoM/RD1botm/ntrEHVw4bwc
ZhUwDQYJKoZIhvcNAQELBQADggEBAAmowKYGnl+PNDot4QyQ4KpVPqMHCdChrqwL
H4s/v+rAIxfIUwBytOXDC3sgcSwqzXTUEaHiMw0Upj7LVKhJ76gEh35G2n2V9DPM
35W5dA6RQSOmU4OnsWeEwY8AKsRcJmB8OVRBkpDe7fgfmGJZ5QncybYhSnmu66iE
UNZ307y/6JKBqw7d5MeyhpnTNqzWySO5KEMHU+OG3YbgVrHRjKwZ8zFopkF7Y3C5
2uce3vrSMrGvl4EaiHlO5UHjxMV9eeYi4IMdkZeYRKcEMSuPYRIg+mTbzM/0DIli
D15jUQqZrpQIJNYCuEQ8TYGZKJ3Ti11alnrc62eL+aE9WfmcZrg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309419625850613243201364591438917296022935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 08:33:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:33:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renault-kalydi.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871188196487270404961009947513107996014347345083107867270894341647200921805291256585116606439405523743914028020882568578380064227261047179234740397922445697373849977089927542281205582535408438036584179782025639238984388903935268550185352862702428553192891130991843495311321123990228336018373759515687220302102879006281733774351603453908477153215083981941692813399542341386996145283467258838990778997790494988900426403994991080154542222902956999149293415195799203972394190763697807318943068535516512717912026376565906813142262568252912996687815308652242592068302530017571808468553063379152248898937308853865147934499944158803491030006915575357985531474949617617992117053534215933561210501877075778827523115576650416332539826441718454428293152391995583318675902307542564170377133942780540608592050598301801597482174609348710567520986156974409661965265189050692526381507043713539710134109085705107286153877153904085156327779287186150361912926701908590548556187358462474757712461356992440332860226475794154555051141943034250410729463796437631829898210617055734682422431586092297162604905499938750952353591068216943397689809208795105754669303934231011013439607633049696957757513099070961483595047286577545258739295033007641065780031397831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9df3284115907b98590ae5f4ee3b448fc7df95c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.kalydi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-kalydi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renault-kalydi.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706c3e5b70000004030047304502207fbdd02c23458791593522e013b29d08f710183fe95d4833e0e60d7dc531b08d022100b9fd13c2d86c70988c71d236810b573de230823d228222234fed76dff77241c20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706c3e5b98000004030047304502204ed1f1aac34fa404bb3cfadbfb693db652eda7d18a4cb5830f73fc2862f3d79b0221008b08f0b550596e110894d796c1ea0cfd10f56e8b66fe7b6b107570e1bc1c6615
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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