umc.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:62:8b:90:57:39:75:36:59:fc:30:83:53:a1:db:88:57 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umc.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:62:8b:90:57:39:75:36:59:fc:30:83:53:a1:db:88:57
Serial Number (int): 299919754257774659818947940444270944290903
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:2e:ab:2e:a3:1c:ea:5f:ad:95:43:26:56:c5:67:cc:bd:ac:09:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:7b:60:8c:42:79:71:3d:84:51:4e:2d:44:03:ff:f5:48:2c:1c:05
Fingerprint (sha256): 19:e4:62:ba:56:f6:1c:64:13:03:fc:3b:10:fa:df:c3:6b:ad:8f:ed:c4:2c:be:79:0a:5b:9f:01:aa:0f:98:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate umc.lv

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umc.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autopats.lv
autopats.spqr2.noc.lv
hamerwerk.spqr2.noc.lv
latvijasenciklopedija.lv
latvijasenciklopedija.spqr2.noc.lv
lielanteni.spqr2.noc.lv
spqr2.noc.lv
translatio.lv
translatio.spqr2.noc.lv
umc.lv
umc.spqr2.noc.lv
www.autopats.lv
www.autopats.spqr2.noc.lv
www.hamerwerk.spqr2.noc.lv
www.latvijasenciklopedija.lv
www.latvijasenciklopedija.spqr2.noc.lv
www.lielanteni.spqr2.noc.lv
www.spqr2.noc.lv
www.translatio.lv
www.translatio.spqr2.noc.lv
www.umc.lv
www.umc.spqr2.noc.lv
www.zwcadsoft.spqr2.noc.lv
zwcadsoft.spqr2.noc.lv

Other certificates including the domain name umc.lv

(limited to 100 certificates)
www.umc.lv
umc.lv
umc.lv
umc.lv
umc.lv
umc.lv
umc.lv
umc.lv
umc.spqr2.noc.lv
umc.lv
umc.lv
mail.umc.lv
umc.lv
umc.lv
umc.lv
umc.spqr2.noc.lv
www.autopats.spqr2.noc.lv
umc.spqr2.noc.lv
www.umc.lv
mail.umc.lv
umc.lv
umc.lv
www.umc.lv
umc.lv
umc.lv
umc.lv

Certificate

The complete raw certificate details for umc.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtioAqy2/SJLinyDlJzjs
MkvILFV7yDGx9ALIwBUp0sFzKARBOb9KQI70qFiRvPSfiqo/T3xUQnjUbM8T65Ju
REaP9Zyg9XGiSb38wQuUNMJ2m2AeCx2myyZVMne6iW+FR7mRqePHGH2i5v7LN1kP
U9w1AVfFaBtRK3PPPvCJdub1FIP2IvAOX3nLON6htnfM8llurcBUnUshkH5KkVaC
dwwMe+C2HhlaVlZ1GTwsA0yV9VD0EjJD4aBzeES3pcmHSAGW6QBPVhCvZuDqTz2I
uLmkNes0g/82BnqO1Hw6/AyGVl4vb4NoEI8R3sqcl8OT7ntQofmLTkW4tblzIt/7
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299919754257774659818947940444270944290903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-31 23:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-29 23:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umc.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22996083763746346149248478161989573948349670718985584736883107336638615829542415970963557483035832274413576232058688150844131043913687006366156293773930377532362839198063767129407180904118877175837207465225300535303633518173955199544113791358131462441640395434618006451329154584127899427260766100503255185907670882444239935411028439567547397150931030425270882428561801224087207245758149401724231435439004067803847507639794461571842299457645291927006246431070572338645640617190779632371944114785750523341348265411537956611324191769084949457432156687029851410241405019801189850320151171650360464310985622498789904350013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							052eab2ea31cea5fad95432656c567ccbdac0905
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopats.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopats.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamerwerk.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latvijasenciklopedija.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latvijasenciklopedija.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lielanteni.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translatio.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translatio.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umc.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autopats.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autopats.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamerwerk.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latvijasenciklopedija.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latvijasenciklopedija.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lielanteni.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.translatio.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.translatio.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umc.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zwcadsoft.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwcadsoft.spqr2.noc.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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