vitriina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:32:e9:a0:f2:3d:84:65:30:cd:8c:f9:59:7a:79:5e:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vitriina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:32:e9:a0:f2:3d:84:65:30:cd:8c:f9:59:7a:79:5e:d8
Serial Number (int): 325717899612673184497317935953111460437720
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:04:e0:be:92:32:a5:fd:a6:f0:96:42:a4:96:a4:15:77:c0:63:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:ec:b7:3b:38:74:fd:5d:1b:5d:6a:95:08:96:cd:e2:16:eb:d5:8a
Fingerprint (sha256): 32:d4:df:e3:96:7d:fe:80:5c:81:4d:d1:e4:37:1f:95:24:65:59:db:e1:3d:73:19:77:cc:80:e1:96:0b:2f:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vitriina.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vitriina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vitriina.com
www.vitriina.com

Other certificates including the domain name vitriina.com

(limited to 100 certificates)
www.wesweswesweswes.com
tanaffas.com
basaata.com
pilab.dz
pilab.dz
monservice.club
tanaffas.com
globalchances.de
eldjamelschool.tk
ta3allam.online
vitriina.com
flecomat.tk
vitriina.com
vitriina.com
mobile-api.weeronline.cloud
www.femaletechfoundercommunities.com
vitriina.tk
anthonyavila.org
profinders.tk
app.teochew.com.au
www.vitriina.com
profinders.tk
travlingo.com
ta3allam.online
shopgabriellamrose.com
katchup.in
www.salobbyy.es
dznuits.com
vitriina.com
monservice.club
efe-academie.com
healthgauge.chat
www.wesweswesweswes.com
vitriina.com
www.accola.ca
www.naidugaru.com
profinders.tk
www.delvalscottishdance.org
exampleecole.tk
monservice.club

Certificate

The complete raw certificate details for vitriina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325717899612673184497317935953111460437720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 20:09:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 20:09:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vitriina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866682011208843820932283385746564197244921456528139775330735590989473969388720268477106750410529745552472361855128138139732032433816120879580834507134924141692804648348576784749190090494714517558959715428042580554424854988181023418807334194992242185742408064904277579365170688949635176394139421683705430808864517609941479634606654501181854922084128767997454386505719730422172118676540784564250428647431166035485242940837952690867482502843876016278596864817636685936486993200720992833585863208344501519287913534275132287128727216525985043454563095017167928097434323621698427019405305599522297754783432826140884087365409355261127066623831703675325096467825529261827776336680905618481849622995212927698812481664572668835265136317732301216308693178119235071175050535771673483490909620178474702450628341352752984805666626757016966166891241441852521376640053754312338437934177693565321825611160466094527892870427941045567189985020505176105654194797270986144240741337747376175446680038127161896613107987056667588179363424753653297337486411533638437186136487090175477641146889768195770085141483711373476872284513638605713694869833905746782091340795387569731454831574912215456906083886076677396968456000810806679743512844465369141786994854293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b604e0be9232a5fda6f09642a496a41577c0635b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitriina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitriina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167a440bafe0000040300483046022100a8a98589b59e5a81e18d41c44d7a3861fbc84d67b2598b25ef9f966e6e57ebef022100c81efe3f96369c26623d4178fa005f38cf73aa6af2e2dd76b553470dc1f77ccb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167a440bb1100000403004730450220728ae55d39efd97f51dc4f3c86d55c0c38a70d689d2fc98dcc6aecc5972f9446022100eaebf23122c31a7456e1bfa982a3070079039cce5e46206f54b60d45d62d5649
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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