kempovanie.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:ca:ed:0b:c4:e2:3e:34:76:a5:64:1f:7b:a4:d7:6a:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kempovanie.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:ca:ed:0b:c4:e2:3e:34:76:a5:64:1f:7b:a4:d7:6a:2c
Serial Number (int): 288488899650244148620289138767858454981164
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:67:92:a5:f6:40:31:6a:2d:cf:ed:3a:2d:5d:44:9d:6b:61:0a:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:5a:83:a6:1a:63:2f:a0:a6:63:dd:b8:20:e4:87:a1:f0:63:8f:9d
Fingerprint (sha256): 4e:a4:d6:8e:f5:ba:58:41:af:eb:1c:38:c1:c4:9c:06:cc:4e:0b:0f:05:96:bc:df:ff:35:21:16:86:48:f9:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kempovanie.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kempovanie.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kempovanie.eu
www.kempovanie.eu

Other certificates including the domain name kempovanie.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for kempovanie.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288488899650244148620289138767858454981164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 22:57:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 22:57:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kempovanie.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882596504853335698674611301076831790713235483543651371946909001883023693856350549914381171411032128057583103448798196149241785421986966086474120206369116259277925258526581560280187473513660787230861466442134123332837639584306111894707897523811043263436826884600165051491849263351293732867392412088571157186497841463774899408523961197461789559669551748969904660464438224069125497566413726669021122314306955141216595174487333747906630188567649232547993479388482213652643426327694306260314889887452098157456644969423500934131414695459801640553567764968003741427758059815785040838229358078170674983811856556965647556439859997435534027029209115166476189965933702805919778528872715002969827357352984498595660545297067869064248417024595096322965950605098357340423008226508635079116223540632167316787853471443619706097148772887890445479061815031307472543631733663500713125279445332184715733997670927202711806217572466752419229738972701568280917910330423288337961240790929386466326868597978456114366142448424911024985032081346167607877423377427971449714693095820008838097880733179447726798495479481815112247240186220486093409199494166250321292547892997984231541986526885032496178131127498610819746321545245791303534148768386642952004807623993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b86792a5f640316a2dcfed3a2d5d449d6b610a43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempovanie.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kempovanie.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e14cd9fc6000004030048304602210096cef8b029b201ac805e688f1602f351113706623d84e067dc9344d9ba0c619c022100962230d068f02e7803904c25ee85dc74f62b28611741930a99a7f138d7734ce500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e14cd9fc7000004030047304502207e4dd511754b18d11e8276d52ea7a80822d89ee9bb5d555215e1e858a17921c90221008e74aeb5827c9af6fe351171d58ff26a83a8654b857a2dd77d96c92ecb3922b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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