laska.io

Issued by R3

About this certificate

This digital certificate with serial number 04:45:e1:bf:a2:49:85:4b:5b:45:d9:2e:de:32:04:b4:91:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=laska.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:e1:bf:a2:49:85:4b:5b:45:d9:2e:de:32:04:b4:91:7c
Serial Number (int): 372228698363912591050827292123681770475900
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:de:21:b5:e2:38:4f:db:03:f1:12:24:76:e6:a8:46:4b:fd:aa:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:96:df:a4:45:c9:69:cf:0f:30:72:51:fb:e4:29:c4:9b:98:c3:d4
Fingerprint (sha256): 48:88:03:6c:83:7a:d3:11:86:8b:27:1c:f9:78:96:22:b8:a1:ee:ff:f8:fa:2d:07:ae:b3:7e:83:a6:ba:3a:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate laska.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laska.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laska.io
www.laska.io

Other certificates including the domain name laska.io

(limited to 100 certificates)
classpariksha.com
finnianoneill.ie
www.skypetite.com
help.laska.io
runtime.laska.io
help.laska.io
packages.laska.io
native.laska.io
laska.io
distribuidora.onisys.com.br
help.laska.io
blog.laska.io
wedready.com
www.palmeirabeach.pt
staging.laska.io
isgyventojas.lt
help.laska.io
www.eleomanni.it
native.laska.io
www.irenegallego.com
admin.batistabrasileiro.com.br
dafidea.com
www.koolkid.vn
blog.laska.io
runtime.laska.io
laska.io
laska.io
laska.io
native.laska.io
meinschweinehund.ch
staging.laska.io
dashboard.smartpath.app
turner.struxhub.com
runtime.laska.io
crm.servetie.com
laska.io
blog.laska.io
delivery.mozserver.co.mz
staging.laska.io
ainomichelsen.com
distribuidora.onisys.com.br
kawkaby.com
blog.laska.io
laska.io
help.laska.io
react-native.laska.io
help.laska.io
unpkg.laska.io
www.tritun.net
www.testfix.at
laska.io
getracker.cl
runtime.laska.io
laska.io
www.cubeon.in
laska.io
andrewalr.com
help.laska.io
native.laska.io
roadmapgo.com
cheff.com
laska.io
safemelbourne.com
catalog.exolvis.com
blog.laska.io
app.coffeetrader.com.br
www.cafsoft.com
www.konjoapp.com
demo.tagbox.ai
strapi.laska.io
react-native.laska.io
www.thisissachin.in
runtime.laska.io
laska.io
help.laska.io
react-native.laska.io
risk.oraculus.cl
www.protechman.net
shipper-staging.cargolift.app
zivora.co
adopet.app
dankortapp.dk
strapi.laska.io
native.laska.io
app-staging.kwerk.co
www.unknown-future.de
inverde.app
coolsaas.laska.io
strapi.laska.io
staging.laska.io
www.milk.horse
demo.tagbox.ai
laska.io
www.eleomanni.it
staging.laska.io
*.laska.io
zap2go.com
mindwebacademy.coursely.app
firebase.laska.io
www.laska.io

Certificate

The complete raw certificate details for laska.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372228698363912591050827292123681770475900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 17:35:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 17:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laska.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 587483065630798163084831255902890830059121685284896978402312565495250236480935073011551862464844378826318639676585080756877870015625021452241540588720658163656523818329457120168706426000986140151107446681991592186477030892585266561397710901557252941643124037040135890627031725217431963818554069157704721981696894217219239305848998718772858441895258162342653288477217231254508593442078140712295053410853721533672687060628328144027181031131327290408586930215490925520021543016897721857989710126939832853014252946725622222250099242517560520366261841555548555582428132796191892930638253048680068522259458500668155009431091120311274641998018500266573197567691836233152853653322871757497867986767081412268312911860399230487060165448936116572830140965105680446229877385637936239656105890623930832143141930930207432880225413942536539472480494903508960133668198913917534658824023002079408291265993445817598738586079059612327230357617265536296263235167409043563167402575938404242928026067867201300773230649568724288148326119245812004512981604177504560147742975068884586081847443992438163725865920650185337508407803748947095151418592845663686141289898729028207819989146333151129911585655816122849943254453404288562937729740232412022725030760527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69de21b5e2384fdb03f1122476e6a8464bfdaa8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laska.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laska.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4c34d74100000403004630440220528c3fe28c020c26231af686fc991118b167f5758ef00baf904665be23f6bd7302207141717cd5bd357e970764cbb21fdb864589d48a3c6f065d041500af51a2c75900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4c34d7650000040300463044022001b89aee7eca75da1f290b9673e73b6bb6f2831758d1356bd2a03fb5ef16466f022015bb1dad1f7f4a17c6c2cf6719be3e93d4d217c73c5937f021e57ae8d7319274
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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