renault.rja.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:d8:45:e4:37:ce:b9:c7:45:ec:d9:9a:0e:e1:4e:19:c2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=renault.rja.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:d8:45:e4:37:ce:b9:c7:45:ec:d9:9a:0e:e1:4e:19:c2
Serial Number (int): 268429981278083207015998824877470411266498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:3b:7a:3a:97:30:bc:fd:b0:d2:7c:bf:f1:9b:98:43:42:1b:72:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:e2:c7:99:a3:04:81:55:d9:27:88:67:f0:fa:6e:5b:b1:39:c8:63
Fingerprint (sha256): 15:f4:f4:87:13:da:5a:d4:32:80:5e:84:35:1a:82:4c:a5:00:9d:f0:ff:cf:4e:ae:04:66:ef:46:32:43:75:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate renault.rja.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renault.rja.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia.rja.sk
renault.rja.sk

Other certificates including the domain name rja.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for renault.rja.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268429981278083207015998824877470411266498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 08:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 08:03:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renault.rja.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 945797325139375561940888463576687135547619275961284792074529781514609329027469707793913805701266768982302661954577794011099613081622778473572964641718234451425931405499248691538883196832952440326318246434527655763221153903034019386940659792454216870608810638858146209424613142942953747153026564296348743905308747219658974215576784773844279551930912106209120921495768705400092121969564333722444075506609863862110746200642549426567554676579992668068929200369437343698771088735495311628780926064458340666066062380307399135494487174471039424559480892334225853327432267136275744215194394753175089777035683690314345563685473074218759124583538459516660964084524006987493675935893976065560304996637126665290425724373244756244213817050193199092054483725755744853607926302216248821122203793163732570127331141174184805334561358666392585325251298578744002760783492759541637585362240114614797402408445463650969341805051513980837025843110443790409123315280274120534385110139982489421640969862506645629636327302081697526873350899544278651883111288161415827861685345351776179335013561612214025569698115609249486477068596671164841699114516171356997684794601152381826829159004958142778855412664263029344239981880409660953333032507179533770157510036509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d3b7a3a9730bcfdb0d27cbff19b9843421b7234
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.rja.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.rja.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b07fa6fdb00000403004730450220015037451229a33ec9aa44e137f969306080b0574ddc31467538ce30a2b27f9d022100bba2031789ccf996ba38dd42f685ef3f64c9b364f0623753457add785d9a3f76007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b07fa723a000004030047304502205e7bfe7ac23fc31d68fb81ec2239913c94cf684ea0ddd3cd76bc769e4fead9cd022100f79b584d29ff9e28dc689ec75964b07d18442105f3b65312dbdabbdb08501f75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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