api.klr.com.ua

Issued by R3

About this certificate

This digital certificate with serial number 04:98:c8:6e:d4:a1:c2:54:7c:8b:64:47:a4:8a:97:71:63:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.klr.com.ua

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:c8:6e:d4:a1:c2:54:7c:8b:64:47:a4:8a:97:71:63:2f
Serial Number (int): 400438484563521767407318082135096757936943
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:c2:b6:5b:17:17:c5:e7:13:08:d9:8b:22:9d:05:05:26:e9:64:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:4d:31:44:fe:e8:53:c8:95:61:be:09:89:4d:18:e9:10:d4:ee:6b
Fingerprint (sha256): 40:11:aa:1b:b5:c1:10:04:10:fc:c8:76:a3:bb:ff:82:c7:67:75:7c:7f:a9:83:61:dd:9f:02:73:27:f7:52:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.klr.com.ua

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.klr.com.ua

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.klr.com.ua

Other certificates including the domain name klr.com.ua

(limited to 100 certificates)
www.klr.com.ua
stage-api.klr.com.ua
stage.klr.com.ua
jorgeluissixtoroberto.tk
feasibility.skywire.co.za
follow.beet.live
www.menu.place
info.klr.com.ua
klr.com.ua
klr.com.ua
www.busbeep.com
customer-connect.cookdup.com
www.tiptruerich.com
woodmark-cert.3dcloud.io
stage-api.klr.com.ua
klr.com.ua
www.klr.com.ua
admin.staging.kichin.io
api.union.do
www.etc-cat.com
klr.com.ua
stage-api.klr.com.ua
stage.klr.com.ua
www.makkan.trade
smea-dynamic-stage.ibtikar.sa
www.klr.com.ua
stage.klr.com.ua
cms.klr.com.ua
stage-api.klr.com.ua
resetpassword.gumb.app
stage.klr.com.ua
stage.klr.com.ua
api.klr.com.ua
stage-api.klr.com.ua
www.creditoperola.digital
firebase.ucentric.sisgroup.sg
firebase.ucentric.sisgroup.sg
stage.klr.com.ua
*.klr.com.ua
admin.coreall-bc.com
api.klr.com.ua
klr.com.ua
www.pcset.hashito.biz
api.klr.com.ua
dev.maeckers.com
stage-api.klr.com.ua
stage.klr.com.ua
finditly.com
partners.aseguratufactura.es
klr.com.ua
staging.app.botio.io
workspace.klr.com.ua
develop-api.klr.com.ua
klr.com.ua
api.klr.com.ua
www.hevasaude.com.br
cupones.javimogan.com
cms.klr.com.ua
stage.klr.com.ua
klr.com.ua
www.mieter.woonig.app
stage-api.klr.com.ua
klr.com.ua
stage-api.klr.com.ua
develop-api.klr.com.ua
hc-fc.travizory.ch
api.klr.com.ua
klr.com.ua
www.klr.com.ua
www.nathaliesaab.com
info.klr.com.ua
stage-api.klr.com.ua
invoicron.com
info.klr.com.ua
www.klr.com.ua
www.operandus.com.br
confidant.finance
alexa.radiozeta.it
cms.klr.com.ua
nftninja.app
stage.klr.com.ua
confidant.finance
www.klr.com.ua
twentyfortyeight.stuartsewell.dev
cms.klr.com.ua
api.klr.com.ua
www.nathaliesaab.com
boltchem.com
klr.com.ua
klr.com.ua
woodmark-cert.3dcloud.io
stage-api.klr.com.ua
www.klr.com.ua
stage.klr.com.ua
www.melevaprogain.com.br
klr.com.ua
atd.eco
klr.com.ua
klr.com.ua
www.creditoperola.digital

Certificate

The complete raw certificate details for api.klr.com.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi52YbH/Xy2qmIyWcJBR
/YYEj9Ddlggn1rgmcaKJuE86g32Bx2aSRCVRrvxLXL6poOFteh1a4xHFLBwA0Mxn
JjCu1+19GC/CtxtvUxc1N0LONAB7yhHA1pMhkRe8QYdGv7L1RH1EkRBvBaveSb3X
4HyWfd4WZsm7FrlZYeuPEckXZWtQzugJ8+R1UKMd0CWZsX2e/5AvKeE/nplxpmp+
9ABCNrBzY5LxoqzvPSogtveKNm48n2PbkfKeotr1D9q7aJI2s3D7lBm7wIv+kT12
aG/LQBCLHQjI5t//yMR0vGSo6XhGbbnuHg395mQiNzz+C1lY13uDhtDHF8XB+8d9
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400438484563521767407318082135096757936943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 16:11:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 16:11:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.klr.com.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26028002300281875139741514810791693733989396638846288673975501548261397471830462928868978025852609205732157032766613995001693129754629608399926881546994469912672969874342906926646965424086180290392439699834442653032366611761871778728239568695183224261778033306109737322353536093572487075398089663100127239258080117131563296877062288019072442148837563624878056908046389224666061630429218130288797181647902660654387838793748926748277748204957365662040618864486934443834642929783394668125629902860744075954240503329659903595382742980124057692138830453782190399675609756299424060830110719827469036341054535789373561470247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3c2b65b1717c5e71308d98b229d050526e96423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.klr.com.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185cb03d3530000040300463044022078941930b7dc34f1ddcbcc0ec88aaa5d0ce3cf90095b93c282021ec2fe54c1f402203273f0f42f69afc8f72a8fa6a08e0daadeb7503030f7d190661e867e11fdb18b007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185cb03d3610000040300463044022035ae8e22c5894accaf371ee461c7efb90a3ad929a528aac06d17e95fe0033ae00220409fc85d2b7667b76d6de2230219b34b874047fa07a3c0577bae99c15349dbaa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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