choroman.ski

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0f:a4:1a:33:63:87:21:9d:dc:d8:bd:f1:94:e7:86:79:df was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=choroman.ski

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:a4:1a:33:63:87:21:9d:dc:d8:bd:f1:94:e7:86:79:df
Serial Number (int): 353771508664170410638631512593964017809887
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:e9:29:db:14:7d:07:f4:8d:9f:66:ad:8c:72:7a:31:e9:4b:2f:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:f9:80:b8:51:d7:92:cd:9c:9c:eb:e7:5c:eb:a0:03:eb:6b:ea:1e
Fingerprint (sha256): 1d:d9:52:f8:0e:8f:28:44:d9:a1:85:65:72:5a:29:a0:b3:bb:ec:eb:3b:36:a1:1b:53:fc:52:1e:5b:56:9e:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate choroman.ski

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for choroman.ski

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choroman.ski
mail.choroman.ski
www.brianchoromanski.com
www.choroman.ski

Other certificates including the domain name choroman.ski

(limited to 100 certificates)
cdohast.noteble.be
agenda.bornia.net
manitu.app
choroman.ski
www.git.choroman.ski
earthemail.org
api.meetmap.co
choroman.ski
eventfinder.live
gelachopp.com.br
149208.choroman.ski
bingo.minhnguyen.ca
ongroups.com
pins.choroman.ski
bdo.c0de.xyz
coinsvarsity.ml
www.noblesaprana.com
nextravelme.com
www.assessoriaimobsilva.com.br
choroman.ski
www.electrohuila.website
owner.11spasoftware.app
pod.choroman.ski
dgs.choroman.ski
www.choroman.ski
lfm.choroman.ski
prjatu.dev.gorenjc.si
git.choroman.ski
makaylaclausen.com
pod.choroman.ski
thompsonandsteele.co.uk
weerman.dibarto.nl
jamesrc.dev
choroman.ski
www.vrento.mx
choroman.ski
solarprotect.dz
agenda.bornia.net
storybook.staging.hellolluna.com
www.polarcode.app
eventfinder.live
git.choroman.ski
choroman.ski
www.futureleisurefoundation.com
connect.geovina.com
pic-drbet.mentor.neccton.com
www.toiware.co.jp
www.raphaindia.com
www.govocal.ai
www.raphaindia.com
www.cheeseapp.co
khiansh.gq
moestuinplanner.weblighting.be
extension.apps.astor.ai
holopin.choroman.ski
jamesrc.dev
nextravelme.com
pod.choroman.ski
www.pod.choroman.ski

Certificate

The complete raw certificate details for choroman.ski in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWiDmEma96QLuebhJF4d
O00ZJ16kC/ItPTDack4Uvcwie/w1YiVUChzQqtZcVNHo4OWHKFy36O693q9yqVcY
YPvgpnGXHuqxMNacAKnNgS3qFY3soyUls69ErqtmFY2i2iYj9H7MwPJxNcK866Br
T1x2/+QBZpc9GXZvNqlgpfointTTgpg091RcHK0hKjF6RsBhHVp60ZvR+dccYoO3
DGTbg0dKVhzU8vpJLkc+AzGCc03E3h+scsZoGagolINYEBNg/rUlY9muJsP4irAt
iO+Vl7MHVqZDSDpoqG2l//JiCdA2sM+6dTQYTkYXBA93/WC4n6bZgV5PpbmuXQ++
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353771508664170410638631512593964017809887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 13:24:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 13:24:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choroman.ski'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20375904894718883839266000269872662217457877864577428186555467604229877511951614218015919548380393556417744736864716519450865866066426783670234833444279552070480564461783716930561840912670211103572647258546039145393240576133797520653494207693112514463927550237497745487572961184723099101588915455959216452511347317196331433602513937029530858076059767517284888369054752947589307198151840026039314803050945205085718011413525537444275941735947548870964719251788379256250816396338885858326634103167523021385164257379983455022006648342140381842740990789335679143696463413313763468820299001781244134481930357272500816035523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eae929db147d07f48d9f66ad8c727a31e94b2f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choroman.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.choroman.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianchoromanski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choroman.ski'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b2d2d53c60000040300473045022045cbf303838e605ae4a4e038e21451e600fb616c7d10c888713c66ee207a88320221009067d0d76d9e40a46efe6daf324bfea7ef54b55daab7c638a247aa0dacab6aef007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2d2d523a0000040300483046022100dd776126a0aaf624595be9330719dc8eb0093b2524f720b8fc3764985421baa1022100bc2a95256be9314a43ba6008a25d04f9d302d88ef9c042a3e6e08008111872e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00489c5f7f9d0e7447c28cd23a6ae353215a46cf314cecdc61e3b8561c62b76ee8d55799848cd227e6b6e7159a05b21675c5db911ad5a6c12ca7887cea5282b04161b368eb524acd28eb572951f92ab880253b2cdb199a54c58aee14f4f94c876dd2a0da3217fa276fbb749bdda9b94965e8d90dc540ff6d6a7cd7c1738d316f2ad35e5ba445baca6efccd8699f91854a265ae99312f21b470b5b326a38899720608dd1b6a12a010b056bb32162f4a59494551690e4df07bacb1e9df5e3ee76ddd11590cf7497d5916abf8ef1fabedb74d83ce781da456683f8e6cce75e5ff6262c6f785b8d938dc945bb87591db377b29cadd2b8276ee02ae3df2cf301f700f7c