podzamkom.ua

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:89:18:ca:8c:55:e1:08:0e:08:da:0b:ae:cb:89:1c:03 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=podzamkom.ua

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:89:18:ca:8c:55:e1:08:0e:08:da:0b:ae:cb:89:1c:03
Serial Number (int): 347270247218069632004909490517552401030147
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:15:0d:46:27:26:83:a6:d7:08:9f:0c:a9:46:d0:cf:97:2a:d1:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:88:4d:20:c0:cb:d1:2d:e9:b4:6f:4d:23:dc:ac:46:01:74:bc:89
Fingerprint (sha256): 1e:ba:35:b3:ed:42:0c:14:fb:52:c1:cb:22:ad:13:0e:f3:0d:a2:3a:7c:1b:8d:63:f6:75:75:8e:48:e6:cd:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate podzamkom.ua

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for podzamkom.ua

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

podzamkom.ua
www.podzamkom.ua

Other certificates including the domain name podzamkom.ua

(limited to 100 certificates)
podzamkom.ua
game.podzamkom.ua
game.podzamkom.ua
podzamkom.ua
game.podzamkom.ua
podzamkom.ua
podzamkom.ua
podzamkom.ua
www.podzamkom.ua
podzamkom.ua
podzamkom.ua
www.podzamkom.ua
www.podzamkom.ua
podzamkom.ua
www.podzamkom.ua
podzamkom.ua
podzamkom.ua
www.podzamkom.ua
www.podzamkom.ua
podzamkom.ua
podzamkom.ua
podzamkom.ua
www.podzamkom.ua
podzamkom.ua
game.podzamkom.ua
podzamkom.ua
podzamkom.ua
www.podzamkom.ua
game.podzamkom.ua
www.podzamkom.ua
game.podzamkom.ua
game.podzamkom.ua
podzamkom.ua

Certificate

The complete raw certificate details for podzamkom.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347270247218069632004909490517552401030147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 20:34:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 20:34:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podzamkom.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722558892605363992706488448610220689920924631078723883391660165420131042865689412219753052189811980793559211798243967422157248523022128902508836005446972016274601780880356755467405701394510105811677215392771510718281463426050949885432562813988853694375447280167565067727512286939234259936062439608998766798974002311229565264475004029815507593307959463565177241708003117550922018553687172995280155608589789113830605469398287153266558914455370328167611166420812121372144490089279944610519164749153670137387889058434729026462925832123280926356826379110049801771588069093312047076041721294389565509532066713201120546932362861713638815175761911707667379262782842332460601349906151690860032910906369977088765256442981629599710499227189297993822011121375920386526808548978701740375920823399499293759735198405953933051175126589312090383409068043590630954280220992872244476310241120830798838530549091541328194347200169542087935954680909789672751664394957134308611104048050422773584583780819660704492792341450793275336038306799024176682276445782915985108383676875532957722425208786192474221177323879356072996415071972523938491953444762196207801855667633913255285116796826305859254211380805604790660491095923113046801718533311919866694576910137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c150d46272683a6d7089f0ca946d0cf972ad100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podzamkom.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podzamkom.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001644d77bbb50000040300483046022100d83fdf0b30a5bcb703fecf4e01fe13c53c5856427c20d1e07fe78af4c4ecc049022100a49d5458073ba8c18fd8559eb890c1d021d8cc34f475810bdd239afe07fac4ac007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001644d77bbc7000004030046304402205af6cdfbd8a30b8699c68ce2a506946c1ded066caedf59ae4543fbf7dc52f4380220376bca222e6d1436cc189851b4540fe4ca8b9d965a1af4438e9ed83e13ec6380
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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