aura.mk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b9:63:61:d5:35:cb:be:72:3c:dd:38:2b:b8:fd:75:d4:ee was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aura.mk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:63:61:d5:35:cb:be:72:3c:dd:38:2b:b8:fd:75:d4:ee
Serial Number (int): 411533483156207980760351138994352865793262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:30:5a:20:37:b1:db:c0:72:0c:9d:85:89:a2:6f:83:19:22:35:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:03:d2:a7:24:5d:79:a2:7c:ba:0d:fc:1a:e0:65:d6:c6:8c:05:39
Fingerprint (sha256): 20:82:2a:22:f1:28:72:31:f8:6e:b6:bc:2f:1b:e6:cc:08:81:57:17:79:39:26:7e:e4:b8:32:b3:5e:74:e8:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aura.mk

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aura.mk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aura-mk.nova1cloud.com
aura.mk
aviokarti-com-mk.nova1cloud.com
aviokarti.com.mk
balkanekofruit-mk.nova1cloud.com
balkanekofruit.mk
mail.aura.mk
mail.aviokarti.com.mk
mail.balkanekofruit.mk
mail.teniko.com.mk
teniko-com-mk.nova1cloud.com
teniko.com.mk
www.aura-mk.nova1cloud.com
www.aura.mk
www.aviokarti-com-mk.nova1cloud.com
www.aviokarti.com.mk
www.balkanekofruit-mk.nova1cloud.com
www.balkanekofruit.mk
www.teniko-com-mk.nova1cloud.com
www.teniko.com.mk

Other certificates including the domain name aura.mk

(limited to 100 certificates)
aura.mk
*.aura.mk
aura.mk

Certificate

The complete raw certificate details for aura.mk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6+uCQLQJNXFvYoyM2+T
khhD8zcHTKru9K7B4ukjs2U5grOTCUVkpruMnfDo5Zmt8Yi1xBYaHXBmiOOZWcpB
NZvvclhV1fnFI4c/QuC+9YiuQh0nUqn/0bI+k407lDaCvtdRq8cnGNa7QqvgWgkH
5FxIaY4kJVWqrmuCmwz1XcLChyLbwnW6imF/b+NuEE/9WazIcTJTf/FoQ2Z8cJiu
yENj0rU1PLxOTxrL1MCQn+DYWI8OrP5ISrqLuGMFWlkd7JWj0mkV4zxV7j+SNE1l
6H+f3ZO5zs8fhURBL60fzW8tpURfXFl7TSLx8S0gK5+iLKBRFVLBdrC7lEwDcRHT
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411533483156207980760351138994352865793262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 12:56:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 12:56:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aura.mk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21168427879817440132688187652728479201881103225668904016253397158629378312113684744663655824118285236538149213888067465128597331384764164337935132039689572799802635060760076749531966561955331452958687455941313857000661509301064909704935153210068335499881382861384671818070214573859263870446071719287512502975427228262570293833431715365346207263602961530316265990846258139495109905315457844527906617704931012277258941565160552572654803576666262187536907343600789973561028106032653635156874302579444868120806077443744189307790519868923684681734485492974171933820466050867735546993976239632586697688800026428169138590619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33305a2037b1dbc0720c9d8589a26f8319223570
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aura-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aura.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviokarti-com-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviokarti.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkanekofruit-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkanekofruit.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aura.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aviokarti.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.balkanekofruit.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.teniko.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teniko-com-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teniko.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aura-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aura.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviokarti-com-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviokarti.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balkanekofruit-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balkanekofruit.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teniko-com-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teniko.com.mk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016475078bc90000040300483046022100c8d0ba87fd281375a23f635ac7219026e326a84b5f38cf59a10f6c836f7b6997022100d3cf8a2ceb887c37e7597f0cb2dae9922768982362b49a6197e991d5b16e2c35007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016475078bb3000004030047304502206b460deea69267cd5c78655e2c90169c7973cf3f0cbcb243d44e0b2e044670e7022100be0f0a0eb1451887bec860acc5904001b54dc60ff485a70138a7ac0a35cd3c08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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