akademi.digital
Issued by R3
About this certificate
This digital certificate with serial number 04:81:45:20:73:d1:04:44:7d:d2:79:01:d6:78:b6:de:26:be was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=akademi.digital
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:81:45:20:73:d1:04:44:7d:d2:79:01:d6:78:b6:de:26:beSerial Number (int): 392437454294087791809582108618266165257918
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 34:54:c6:42:1e:09:df:a9:ec:f2:5d:75:9a:3e:8d:a9:c1:f5:f2:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 94:aa:ad:ff:b0:c5:a1:9d:6f:3d:db:79:f5:3b:1f:3e:07:44:fb:7f
Fingerprint (sha256): 1c:33:16:b0:45:00:d8:98:ac:96:59:5a:d4:a9:e1:bd:b3:fe:54:7d:3f:6b:8b:a3:32:af:97:61:6e:1f:97:38
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate akademi.digital
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for akademi.digital
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
akademi.digital
www.akademi.digital
www.akademi.digital
Other certificates including the domain name akademi.digital
(limited to 100 certificates)
Certificate
The complete raw certificate details for akademi.digital in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISBIFFIHPRBER90nkB1ni23ia+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMzAxODA4MzhaFw0yNDA0MjkxODA4MzdaMBoxGDAWBgNVBAMT D2FrYWRlbWkuZGlnaXRhbDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ANB9F5CjtmLq+6cgaBNAiqDfaxdo4PIiVELlmJanwekQHUHfw+vKz3GQr9HBu1L1 h5xBD7AI6D2OZWEY6W1vXlRg6lGpKgX9VDtJFOUprgdRhNffzrzjdcEt7Q/kd8s+ j8Gbc1jsG7qjyNlRvdJdejQkK+G7SA2mLIgDHcfdcSS9EL/ndYn151aXtf/CUlJs N6wF8QPO0zyDDx4RLncX/2zTLQ005K3yQrOrEDDxo/g5kJBzPu/aQoCOvFGmGaoQ 5IQzGx7g8Tb3/Cf803YNEhTX6jgqVjiCLFmVyYDqbiqXd62l9sWdDXZAomXE6GqK 3Q8ip8CeqpX9YVyUTgwvxy05yhdwkEOqGBV9xBOw5pCVQ6ZbVZMeTM3uxHQnfFCt agxdnHtJGLUsDuVu90iwm+vYyMAwGAxYF15sdoQUuIj6h6/GZ7ytd0fhQL4t11Jt exy/7odnbZKvF+UiB7EW4TwSldWlXogAEPyhtdJLAZ4nFD5fw6i3hgmLjGsjsngw 1ld8BzvODcgHmRkkSyNReCqqqSpN/QELir6mFQGFcX5z81r85gO+o9u1x5XDKxOV tOQCz0p06toNdVS+xrkfksI20Tq+6GPJVVBQovTjuZVoCp2qt9WkbPd4l05qgxYa IFXqNuTcEG6JzSK91qaj2ZkyUFsguu3DXIQEhQTS5XhDAgMBAAGjggIkMIICIDAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDRUxkIeCd+p7PJddZo+janB9fLqMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD2FrYWRlbWkuZGlnaXRhbIIT d3d3LmFrYWRlbWkuZGlnaXRhbDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisG AQQB1nkCBAIEgfMEgfAA7gB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt 9RfYAAABjVvF/ZkAAAQDAEYwRAIgDrAhTeM0gtMsArYV4VpEgVMu6A+ny6EvDF6g vg6FtMsCIFPGCLTe3BS0/2zrzOHKrgWk5lm0hXfhWEyi2M8eHJVxAHUASLDja9qm RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNW8X/GgAABAMARjBEAiB6BReN qucq7UtDB9Pmc04n3+o6C+1Y2HfVo9WdyDFUCgIgenh8rbfKyd54TJQM5gIlBKRJ lH8rrR+UWlwPIwBVU4wwDQYJKoZIhvcNAQELBQADggEBAJ/iJtZO6GiXObjVRy6u wE2EtkG3aw+nKSeRxRecj527wtuaWPk8UApPsJfBVRKnvfzgMYSw1gIYghoX8c9W nnqqWoyVYbWR33BOLkLRvC43zbeKP1W6euhbmPDx++pnrl3Re6wLagefkKkcANBi f171+UbMyH76JXymEQAaMINSueDhmaHIlAF9RWous38uEfrU4VOBgpCRiSe0nCoK k5xVZ3nEhi7szzxNQ/HmM6nT3ob7NRlUBAB4OIj+AYxCteSCTbbjjdiE90ddKpWM K06J2Qnmr2i2TP16i2VPwuqGvFdkLtXPmDSTgcGu7557eBF80nl//26FGmyea5NE 64Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0H0XkKO2Yur7pyBoE0CK oN9rF2jg8iJUQuWYlqfB6RAdQd/D68rPcZCv0cG7UvWHnEEPsAjoPY5lYRjpbW9e VGDqUakqBf1UO0kU5SmuB1GE19/OvON1wS3tD+R3yz6PwZtzWOwbuqPI2VG90l16 NCQr4btIDaYsiAMdx91xJL0Qv+d1ifXnVpe1/8JSUmw3rAXxA87TPIMPHhEudxf/ bNMtDTTkrfJCs6sQMPGj+DmQkHM+79pCgI68UaYZqhDkhDMbHuDxNvf8J/zTdg0S FNfqOCpWOIIsWZXJgOpuKpd3raX2xZ0NdkCiZcToaordDyKnwJ6qlf1hXJRODC/H LTnKF3CQQ6oYFX3EE7DmkJVDpltVkx5Mze7EdCd8UK1qDF2ce0kYtSwO5W73SLCb 69jIwDAYDFgXXmx2hBS4iPqHr8ZnvK13R+FAvi3XUm17HL/uh2dtkq8X5SIHsRbh PBKV1aVeiAAQ/KG10ksBnicUPl/DqLeGCYuMayOyeDDWV3wHO84NyAeZGSRLI1F4 KqqpKk39AQuKvqYVAYVxfnPzWvzmA76j27XHlcMrE5W05ALPSnTq2g11VL7GuR+S wjbROr7oY8lVUFCi9OO5lWgKnaq31aRs93iXTmqDFhogVeo25NwQbonNIr3WpqPZ mTJQWyC67cNchASFBNLleEMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392437454294087791809582108618266165257918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 18:08:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 18:08:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akademi.digital' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850559446784495718335240702792688098124504786614270966880178735587202290384216026999494221622213770111346652659806891405945729705699644529851967341807901598570941513851486899959365032342852544235214313495800573407493228580776495067138539142303005990718611079717049655708120478947036097659729773886447989584125964404789176289715368724758118493255512089812688600510843330685168862636217920791357227199724500478808040784129912058292512200050179966639221528767593657980973506202090640658355604558632866769517729201858292529604062964228212403023382575625224909019705321746361702131370314043384978347598044106968273183903932003965440115547399630139385312594865934376015603781635156952699354048217957677940719485158630568851000997547649337550544385727215633841060604434963757707462669079662865444060650430314418752249596484814245152869312714714660899508046568281887668874468359055281825336725051295404894739082500907927921340110044980213800670858809875254723817782766208671731004331188958378222359817194222628939908675376042754675381709015822975846878818959270264416003682989037830208290794877898896921347328485394808083185254726660826205131636431548728249478140218241930721683333264262567437347700364156814346803923492568660285508198692931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3454c6421e09dfa9ecf25d759a3e8da9c1f5f2ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademi.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akademi.digital' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5bc5fd99000004030046304402200eb0214de33482d32c02b615e15a4481532ee80fa7cba12f0c5ea0be0e85b4cb022053c608b4dedc14b4ff6cebcce1caae05a4e659b48577e1584ca2d8cf1e1c957100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5bc5ff1a000004030046304402207a05178daae72aed4b4307d3e6734e27dfea3a0bed58d877d5a3d59dc831540a02207a787cadb7cac9de784c940ce6022504a449947f2bad1f945a5c0f230055538c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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