autolevi.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c9:5d:32:4f:ee:86:72:37:c3:44:eb:30:d4:0b:12:79:9d was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=autolevi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c9:5d:32:4f:ee:86:72:37:c3:44:eb:30:d4:0b:12:79:9dSerial Number (int): 416969778917808812099263984600275173407133
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:a3:33:00:3f:38:d3:bb:a8:07:02:bc:bb:94:45:c9:fb:8a:78:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5a:f9:ba:c0:1f:04:30:44:f5:11:e0:67:1f:6f:74:63:85:74:6d:7d
Fingerprint (sha256): 57:6c:ca:ee:e4:ff:ea:e1:13:54:30:2f:1c:5b:9d:97:2d:c1:56:52:3c:5e:8e:3c:2d:fc:1c:37:53:05:5a:c0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate autolevi.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for autolevi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autolevi.com
autolevi.ee
autolevi.fi
autolevi.lv
forus.autolevi.ee
www.autolevi.com
www.autolevi.ee
www.autolevi.fi
www.autolevi.lv
autolevi.ee
autolevi.fi
autolevi.lv
forus.autolevi.ee
www.autolevi.com
www.autolevi.ee
www.autolevi.fi
www.autolevi.lv
Other certificates including the domain name autolevi.com
(limited to 100 certificates)
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.fi
www.autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.ee
autolevi.com
autolevi.com
autolevi.fi
lv.autolevi.com
autolevi.ee
autolevi.fi
autolevi.fi
lv.autolevi.com
autolevi.com
autolevi.fi
autolevi.fi
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.fi
fi.autolevi.com
autolevi.com
www.autolevi.ee
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.fi
www.autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.ee
autolevi.com
autolevi.com
autolevi.fi
lv.autolevi.com
autolevi.ee
autolevi.fi
autolevi.fi
lv.autolevi.com
autolevi.com
autolevi.fi
autolevi.fi
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.fi
fi.autolevi.com
autolevi.com
www.autolevi.ee
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.com
Certificate
The complete raw certificate details for autolevi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISBMldMk/uhnI3w0TrMNQLEnmdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjcwODM3MDVaFw0yNDAzMjYwODM3MDRaMBcxFTATBgNVBAMT DGF1dG9sZXZpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALa5 o4gfDBZP5KXZfJ7jPWLiEQTFMpNZS4xiiG4/yh2O7SZZTK9+Yw2tbtsCXRRCBzIg WjDGMIEuhFehnQQkfds2bebXV7zOerGIsyOBOw1GLnUxOPe5r3dimnF20vxsyFU8 yZfMS1ckI0nsDvyfX/b379K5Msyf91SqFAjtnpjc/VCihJU/oETaX78wO1RuesCd MiHAkz3Wf6e9CGySR7nLX3NlnJAw7V3K6Yuf4G8ezgjXYFa7fSR/1R9jlp3uBcAg Fz9lEbyk6fEJn8flOaSn114V/krKzenj/ks1YvRpxmjuwvZ4vuTY9jhlvbpVTpLg EsZefxvaXvZzQxvq1AECAwEAAaOCAo8wggKLMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU4aMzAD8407uoBwK8u5RFyfuKeNowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w gZgGA1UdEQSBkDCBjYIMYXV0b2xldmkuY29tggthdXRvbGV2aS5lZYILYXV0b2xl dmkuZmmCC2F1dG9sZXZpLmx2ghFmb3J1cy5hdXRvbGV2aS5lZYIQd3d3LmF1dG9s ZXZpLmNvbYIPd3d3LmF1dG9sZXZpLmVlgg93d3cuYXV0b2xldmkuZmmCD3d3dy5h dXRvbGV2aS5sdjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjKqi f34AAAQDAEYwRAIge192KRDyLe1EW+vnniARw90oSfaeylV2KWIwTnggKu8CIE1n WjyIEeAP+l2red7UUgpt4o5RRsbF1AN0VAsGsncxAHYAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGMqqJ/2AAABAMARzBFAiBm+cMrfb3BxL1MjplV r2f//Xo8H0NwuClTHtPc9JjP5AIhAJLSfXTIRj8FSe4iQpzQpIKb3cwGvBgpwZag Ovi0+viOMA0GCSqGSIb3DQEBCwUAA4IBAQBQNHaaFXHJ5WF50onOveNgR4J7RSm8 s9ECaInmBDVEPGZc8O/C14o0hggVbizF9q+L3vY7cpUwv62rY+bP6mDGVKMpqiS+ BYt5KVoTjXIioGdopaftSiSeJASlP8Yelf++/Dj97PB5fQwmod+/ASF68Ycn96Cz rCCp6OHx0jNb2UiPjFOS4qYfhE3KFSXWgR/LSBe/WyargKbjck2QRoZPwHVKqtOt FtmHoW1WFhsVCFjF/oXvpIbBq8k+Ibz6TRo9FNAG86CICtKaAqOnktd12onfHj/o 9N+m033pFwQ5rTNEY28dvSpOVmDdanAMJjqbJfek/P3+LyzZUHyj8At/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmjiB8MFk/kpdl8nuM9 YuIRBMUyk1lLjGKIbj/KHY7tJllMr35jDa1u2wJdFEIHMiBaMMYwgS6EV6GdBCR9 2zZt5tdXvM56sYizI4E7DUYudTE497mvd2KacXbS/GzIVTzJl8xLVyQjSewO/J9f 9vfv0rkyzJ/3VKoUCO2emNz9UKKElT+gRNpfvzA7VG56wJ0yIcCTPdZ/p70IbJJH uctfc2WckDDtXcrpi5/gbx7OCNdgVrt9JH/VH2OWne4FwCAXP2URvKTp8Qmfx+U5 pKfXXhX+SsrN6eP+SzVi9GnGaO7C9ni+5Nj2OGW9ulVOkuASxl5/G9pe9nNDG+rU AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 416969778917808812099263984600275173407133 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 08:37:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 08:37:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autolevi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23066913405843024771592970315421472532414062255141116950408619430579988336169116672309378765280074276078064662927213419871654977043792593016745281044273443159957207940119312547288564131937207406651519689274160488915783937052094994544467777778156792301185445611436251101982642221670244364819976191548688029371431213852418205827252237598916160440520939408232708334934654152438781316152826568257439690802606433708359271900764458613269435050771494017733479974042723232162988085458742771557736404219312337780258080586389501528621658167419814891539904201914699957315911684704125882001362307589478682315523523403714984072193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1a333003f38d3bba80702bcbb9445c9fb8a78da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forus.autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018caaa27f7e000004030046304402207b5f762910f22ded445bebe79e2011c3dd2849f69eca55762962304e78202aef02204d675a3c8811e00ffa5dab79ded4520a6de28e5146c6c5d40374540b06b2773100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018caaa27fd80000040300473045022066f9c32b7dbdc1c4bd4c8e9955af67fffd7a3c1f4370b829531ed3dcf498cfe402210092d27d74c8463f0549ee22429cd0a4829bddcc06bc1829c196a03af8b4faf88e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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