kempovanie.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:53:10:39:16:79:2b:1d:0a:e9:2f:d3:49:8e:64:e5:5c:ed was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kempovanie.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:53:10:39:16:79:2b:1d:0a:e9:2f:d3:49:8e:64:e5:5c:edSerial Number (int): 289601858314385089456832101290436150516973
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 57:ed:c9:d1:93:bb:6c:6c:c3:43:80:d6:5e:5a:90:d4:a4:7b:79:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c7:4e:14:1e:f5:33:48:5e:c2:79:1a:77:5a:77:2b:95:16:85:93:68
Fingerprint (sha256): 16:0c:ff:5f:8d:9e:18:79:59:9c:2b:e6:97:68:f8:a7:3a:a9:4e:33:72:cb:f9:de:b3:0b:15:e0:4d:fc:95:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kempovanie.eu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kempovanie.eu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kempovanie.eu
www.kempovanie.eu
www.kempovanie.eu
Other certificates including the domain name kempovanie.eu
(limited to 100 certificates)
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
*.kempovanie.eu
kempovanie.eu
kempovanie.eu
*.kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
www.kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
*.kempovanie.eu
kempovanie.eu
kempovanie.eu
*.kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
www.kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
kempovanie.eu
Certificate
The complete raw certificate details for kempovanie.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISA1MQORZ5Kx0K6S/TSY5k5VztMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MDIyMjE4MDBaFw0x NzA5MzAyMjE4MDBaMBgxFjAUBgNVBAMTDWtlbXBvdmFuaWUuZXUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC+l5aAv5pMwzhi9IhXbePnldIWlfp3ReSM EZMOMuVli5Otar06Fy6IFgZeZkqSIWb2iR9VR8zQvJdGeGT+y+HpTYek4LGVSyZC CbCAWo24xx2IYfe+RvpKxfh0lj/fzDDsxbpF1KZntolRVV+pilZFiMSE9Z4zS61j VUxYIe3Mhof+h9IYBS3oyokuGMRvrUz45RzRP/pYL03Cz1PJQCSDg5b3SdrPWx52 ghMoqgAqEizagjai38JP+PNhgs0CFvf//fLz8iWo6MiqD/HtqnhODXYkWTYi5hBu D3DhIYNB5Thmxi84Cfd5kd9mMOzU/Hn7cVtIqJEI8GLMAcmvtFAw8y6Mg7bTgkBU jOuQ4UTB+INdmoqM0n65Ei2j5EmSSf0kdjrAZAFK4WlKBdAvUakeemJB1S/y0Brs 5gaYC7wt/XKFwMv4VbTHakjzlpcXaWYx4gRqXrN2ng70Rc6zqJE5OZsPvum6eXZ0 X1PelXd1w5MgQ4dkV43j97/RhDM4qKrWWxvzWx5jBmYHO23/xdlAmdalvoBZtE6b t/pmK6YFcc8TRxNs//MXOFZ4IS56Nfi+Ou7W0Eu2xuN3pP7TyCdjoxPUX6vJXZzi 2Mjj0hzeaFGk5LJujfNkPycqGdHS492eAIcWeMiySQ5smHa3W62XYkNnbfu1iNaF Y567LH3JeQIDAQABo4ICIDCCAhwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRX7cnR k7tsbMNDgNZeWpDUpHt5fTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWtlbXBvdmFuaWUuZXWCEXd3 dy5rZW1wb3ZhbmllLmV1MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBADPosWk3QdsrBQAaFdclhTs55JpjiWpCbUz74WTR+m8H9Q6z4DZDNMNBD4fc e3Gw5cgOM8R9Ii5xx4layUbx+1vjfIjV0U0ACLSHORti3UKQuH3CtN2L/DD1NZrZ WXDxsCaUX3NKXwAHGX1o9HvAAKDUJkNCfsG114vTWExceFVdDRuGshBJSrBZyYe6 XZDYHDr58OYzk9G/CFRrp46//ZXjQzfBfnuS1m1aosmix/yP6JVnk6Uq0kAdK2Wc 74gxD08H2HlxeDUFnNwJenit5MY1CBvhjX4hcR3Tyo57XaSmJoemBpPNafN5BcgN wyk3wJPutSPGBo+MriOipxNP3Rk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvpeWgL+aTMM4YvSIV23j 55XSFpX6d0XkjBGTDjLlZYuTrWq9OhcuiBYGXmZKkiFm9okfVUfM0LyXRnhk/svh 6U2HpOCxlUsmQgmwgFqNuMcdiGH3vkb6SsX4dJY/38ww7MW6RdSmZ7aJUVVfqYpW RYjEhPWeM0utY1VMWCHtzIaH/ofSGAUt6MqJLhjEb61M+OUc0T/6WC9Nws9TyUAk g4OW90naz1sedoITKKoAKhIs2oI2ot/CT/jzYYLNAhb3//3y8/IlqOjIqg/x7ap4 Tg12JFk2IuYQbg9w4SGDQeU4ZsYvOAn3eZHfZjDs1Px5+3FbSKiRCPBizAHJr7RQ MPMujIO204JAVIzrkOFEwfiDXZqKjNJ+uRIto+RJkkn9JHY6wGQBSuFpSgXQL1Gp HnpiQdUv8tAa7OYGmAu8Lf1yhcDL+FW0x2pI85aXF2lmMeIEal6zdp4O9EXOs6iR OTmbD77punl2dF9T3pV3dcOTIEOHZFeN4/e/0YQzOKiq1lsb81seYwZmBztt/8XZ QJnWpb6AWbROm7f6ZiumBXHPE0cTbP/zFzhWeCEuejX4vjru1tBLtsbjd6T+08gn Y6MT1F+ryV2c4tjI49Ic3mhRpOSybo3zZD8nKhnR0uPdngCHFnjIskkObJh2t1ut l2JDZ237tYjWhWOeuyx9yXkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289601858314385089456832101290436150516973 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-02 22:18:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 22:18:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kempovanie.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777548094351024066509885150634664972737899216913331073716707532403166710412051230427607038073430721061993860743319932082440218101231112515173306392930136626513976521888881792937970429958455252164292204083631825765466707717269989877612977104499868511362974323552958189393371202320173160221136054677811323516305248633264509597589502198636887476235772287134088751211153272901773755575444938076668024189233132628184546984172864052717884429649814560669359531733990728556605269211753273485579268512268673193788414562249466174366220100396850769189277529030441754060643260001485806419745443143511263552859705535709615830256240835598793099344341084151324773253664446354869534467901175557786360846663301434241241014565021793759404584225967752383797811602846713987722922207151874525626875424957792869321228501196396875274246187449660169895196361656144069879580104532821179784333463248163465136729745911618801851086277477900839600245796554279609114808464470039385393454554902660312731705904780973561250283436816567983787331010515831026432751963484657651237204922610595531024529149616690202647230082207684309780720626578116964224479368448739035081066805142207032617146539360097970422307296372310336745382242539513522693403194379349487994328172921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57edc9d193bb6c6cc34380d65e5a90d4a47b797d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempovanie.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kempovanie.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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