sfek.kz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:25:39:91:90:7e:90:84:77:60:29:cb:d9:b4:04:af:d2 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sfek.kz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:25:39:91:90:7e:90:84:77:60:29:cb:d9:b4:04:af:d2
Serial Number (int): 290990904066564782387313814101967384129490
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:0d:bf:ca:37:3b:b1:47:bd:dc:15:d7:8f:43:37:83:79:19:85:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:a3:9d:4c:9c:5f:0f:9d:ca:87:98:d7:14:fb:a5:f6:b7:87:f6:3d
Fingerprint (sha256): 41:42:0b:cc:dc:62:c5:b0:db:44:6c:24:20:e7:82:09:49:5c:8e:14:b4:e9:70:4b:48:89:c1:b6:eb:88:4e:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sfek.kz

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfek.kz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buh.sfek.kz
calendar.sfek.kz
d.sfek.kz
docs.sfek.kz
edu.sfek.kz
lib.sfek.kz
old.sfek.kz
sfek.kz
stat.sfek.kz
student.sfek.kz
test.sfek.kz
time.sfek.kz
tiny.sfek.kz
www.sfek.kz

Other certificates including the domain name sfek.kz

(limited to 100 certificates)
sfek.kz
stat.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
webcam.sfek.kz
sfek.kz
sfek.kz
sfek.kz
student.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
buh.sfek.kz
sfek.kz
buh.sfek.kz
student.sfek.kz
beta.sfek.kz
*.sfek.kz
*.sfek.kz
sfek.kz
sfek.cf
sfek.kz
sfek.kz
*.sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz
sfek.kz

Certificate

The complete raw certificate details for sfek.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpbKPTfnylxW934nNELj
UsptUbS7UdCqs0pXXQa39QYUBMiuQP3oIZnb8OGooBmxf4BlhVQ+0BPWT/PitJHr
oXqOIenLkBeccaJ9chFH4LEnpeUY6UHmyvfg2otpuNBgdC/XtdUcLpC5K7KPfSsM
C/WKxA04JieTQ0K4YKddl/NiEsZAY+z5lGJlx0JV909nbOEdLSHeimnQQxBYaYK5
3cX/2/TRYpeQFLgKck24PE8u6z9nqgqem/lemrQM493KQr/G4aQ80i9Pl5N25Zko
835KY+idbxhtBwd2eiL1WKXDVBpHHBJsWqrOj1hqa13T1MoJRQUdyoXXRBb1/fQY
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290990904066564782387313814101967384129490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 13:56:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 13:56:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfek.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26079448141675806649472724713210366907834073080104860044371778353170206946081033000993488266705720400164342181837542190498943614523809170030781030569037328722374383637806979739532631447407011464015222461196221098619251367721354371538009078429460306264663317474533869794734868432136646608066549659725921883313542070707724451133461724801749666530462459863605079585286638978555990425312188859550223445182793052152530373812620423655084680646765865743176274621092897877948641314049352449876544942795594957063456633237364865017407858317800822198772647504754335757203811184089819191403614477677492121958522507634413967513853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a0dbfca373bb147bddc15d78f4337837919853a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buh.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiny.sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfek.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001683d6a3dfb000004030047304502207b471fa52972fbf6adcb7932459ed154655f3aa8855ddaae323e9e7c4b9bc8e2022100d98fa75293fd6dcc88671e63296b04900911f48a7e6a0ce81cbfd0e8051939ae00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001683d6a3ded0000040300473045022054554696a4d42a20fad1ff752dc4e6a23b648f2c11131c53aa89204e42f8a288022100e5ede596712506410527f079b46bc3cf48f1223e7639cc7332b7e1b16de545ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0054e401fe8e20b0e0897a445c4f3fa2d7ec6454fa0cbc3ee606b3ca08c8121c3d226e3bee326c29dff757d3e7c0c418ddfacbee6454b5be149f2b0e9a3a20036107b41f0a0bd32e391c4d8f30a50182451abdfdf580ddffb5eec2cdac265d80d6db0bb45c494276ab7794802e5a7f32d596d24adcacd2887b4d54a64739efd7b74c5886fccc3207b64d10857a0ba2f3369e9a185aa05d08f7d28c21ceecb8da5a568f52f76648df45ad1ad9de761bf931e80ab84bf6ce9eb1ea6cbf3cd15853fa1e47a92c0f8aab46380ec3dc45f80017076e080cbbb8c08894878ad52608caa943f1d2a83b40126c8a1c385bb9e9517a55d2f79df46794c56e6be7ede756117c