skh.dev.cone.ee

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:21:ad:a1:f9:21:2e:a4:88:39:25:c0:e8:1f:f1:de:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skh.dev.cone.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:21:ad:a1:f9:21:2e:a4:88:39:25:c0:e8:1f:f1:de:36
Serial Number (int): 299493248966849304643618759219503902613046
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:d4:bf:f1:81:19:f3:5a:95:5d:d4:34:4d:66:ca:91:d3:76:d7:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:f2:ce:3a:da:45:ba:53:69:d0:f0:a6:c3:61:b1:c1:01:e2:12:49
Fingerprint (sha256): 28:95:7e:56:14:35:50:bc:92:81:ff:80:87:00:e3:bb:89:94:59:67:cb:58:ce:70:5e:ed:3d:16:39:d1:ab:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skh.dev.cone.ee

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skh.dev.cone.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skh.dev.cone.ee

Other certificates including the domain name cone.ee

(limited to 100 certificates)
www.edss.ee
www.edss.ee
igor.ddev.cone.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
arlipo.ddev.cone.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
igor.ddev.cone.ee
www.edss.ee
www.edss.ee
liwathoneos.cone.ee
www.edss.ee
arlipo.ddev.cone.ee
www.edss.ee
www.edss.ee
skh.dev.cone.ee
ama.ddev.cone.ee
www.edss.ee
bws.edss.ee
sydhavn.dev.cone.ee
bws-devgos.kdev.cone.ee
www.edss.ee
alm.ddev.cone.ee
www.edss.ee
lvd-prep-gate.kdev.cone.ee
x.edss.ee
www.edss.ee
exchange.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
cfsfi.cone.ee
cfsfi.cone.ee
aku.ddev.cone.ee
qa-sandbox-lgw.kdev2.cone.ee
www.edss.ee
www.edss.ee
aku.ddev.cone.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
bws.edss.ee
www.edss.ee
*.cone.ee
www.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
bws.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
arlipo.ddev.cone.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
liwathoneos.cone.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
liwathoneos.cone.ee
aku.ddev.cone.ee
www.edss.ee
bwf.dev.cone.ee
www.edss.ee
www.edss.ee
www.edss.ee
x.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
bws.edss.ee
www.edss.ee
cfsfi.cone.ee
liwathoneos.cone.ee
www.edss.ee
arlipo.ddev.cone.ee
www.edss.ee
alm.ddev.cone.ee
www.edss.ee
lvd-prep-gate.kdev.cone.ee
www.edss.ee

Certificate

The complete raw certificate details for skh.dev.cone.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzn657LIZt8fHrBjRi5u
im8b9A+ic9BWM7Magc5Dvu1KMHf+2o70sODgu7YBCQ+nOwQu2usREwlC4R8doZkl
XRmJ/MCRFB2uVzgiTZqtpEdzx92jVrldOiC1ZsdL4Wpmco4HD65q0tFbHkr8FjwK
JJ9Sk9FJtUYrpciMbcb37UAL9f9OEhrvB2WQhhSnmHwre1+onmYQRNGalrSr0vTN
Qdw7EAI7r7nDVmYjHh+84ZifBRVBiCQyRBm1K4X6JODFZq/rV9bxoyxVMwd0EoHn
Nt/4dNi6EThfj657LGrXF39cvm1Fyon8ry2E3DRcjrLVuFH2nXbygvfe/XSHFqrC
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299493248966849304643618759219503902613046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 09:23:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 09:23:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skh.dev.cone.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24140107300412811675820009904910606402510557896529358865562216653351600926221251031080577363801422379516041583671364126048766109035941967750812472631263627557897820095869031866216156599693706603704154784001949875790610717306801223167052183212315006042816677311986078988672366998476889275707378867959893657384665415900855778179589090036422361470058058736700924477963932504257527164623703611296163246761066361451445824667497055986017569754369349156776332442472591738060158922305565823118669124780897674016511647418726700111738676388573756569379788406872014436109185536818112678462952931903915257402639857852144987849421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d4bff18119f35a955dd4344d66ca91d376d7a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skh.dev.cone.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016707729cb1000004030047304502202e98b01f7c97e3e549891f4ae5badc19bb3192bdec2a2c95b5c1c6f2a6366c14022100f3beb00492549ff971186cf82604561579ae2b4717523d186b97651b3ef3f8690076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016707729edc000004030047304502205098841a19112ffffcc45eee1e8a2f82aa485d3433ead354225faee2abeb3cc0022100df325ba84d1fa063de8b6b2b95b6050b488d0c74896116640c5513d6f0a1b917
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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