*.lingid.ee

Issued by R3

About this certificate

This digital certificate with serial number 04:29:02:7c:17:6b:b3:64:6e:ce:ba:9a:be:0a:6e:49:36:c8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lingid.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:02:7c:17:6b:b3:64:6e:ce:ba:9a:be:0a:6e:49:36:c8
Serial Number (int): 362404023546629845244494177077448336291528
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:57:49:2e:59:8a:0e:c3:d1:0e:a4:ff:13:d4:68:85:3a:ca:2e:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:90:50:4a:68:79:99:27:32:76:69:11:5d:ae:e7:33:5b:07:6f:94
Fingerprint (sha256): 57:91:8b:24:22:e0:1d:43:79:91:e5:d5:af:c0:92:73:3a:ed:ba:c1:e7:ec:fb:6b:bd:26:c8:f0:ac:1b:7b:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.lingid.ee

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lingid.ee

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lingid.ee
lingid.ee

Other certificates including the domain name lingid.ee

(limited to 100 certificates)
imo.ee
imo.ee
lingid.ee
mmmm.ee
*.lingid.ee
ability.ee
lingid.ee
min.ee
imo.ee
mmmm.ee
mail.lingid.ee
min.ee
alamdomeen.ability.ee
lingid.ee
lingid.eu
lingid.ee
lingid.ee
lingid.ee
lingid.ee
min.ee
lingid.ability.ee
min.ee
imo.ee
min.ee
lingid.ee
imo.ee
min.ee
*.lingid.ee
imo.ee
min.ee
min.ee
lingid.eu
mmmm.ee
ability.ee
lingid.ee
lingid.ee
min.ee
lingid.ee
lingid.eu
imo.ee
mmmm.ee
lingid.ee
imo.ee
lingid.ee
lingid.ee
min.ee
lingid.ee
mmmm.ee
lingid.ee
lingid.eu
lingid.ee
imo.ee
min.ee
min.ee
min.ee
imo.ee
lingid.eu
*.lingid.ee
imo.ee
imo.ee
lingid.eu
lingid.ee
imo.ee
mmmm.ee
min.ee
lingid.ee
imo.ee
lingid.ee
lingid.ee
imo.ee
min.ee
imo.ee
lingid.eu

Certificate

The complete raw certificate details for *.lingid.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362404023546629845244494177077448336291528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 23:18:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 23:18:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lingid.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780619578357320032440001580943291623864108880681796173504814377986919868317648300826164952255135115611984815370578454798240841673164931701978227691616129897968408926513181941607677227352275584865638703775553006111142174446541204014021860639733552311880381161072311115489838297580350428452849385346861259768947264558245870814565636888288320491829577909844229667409375292575975026060501661333405774175439646552627611479585124595631913610446456646438785792160456391255282531142109499433679402294758386744093295572979790794463115471750189836489305986324090917679253673962457304643448890237732426360708144924759841256868946997579376226416256126886906090361029375051119745996487864417706330973233058335678332190395480666249519198306661227347398797512658469857789356565013783493585739754094886159177283608647468875074152482547210715406568463639994548317272739477655634583747428303887055549863061871906754055863171553450941558116872519477818396904676744571600823876406934989118253990759737395016431682536693838368114515446841060932696558082712229951293035744350470571596132541187434143936607627299677672464514875794162975800267822185141124797769060569773490743509291552766389733627040256743356487665118005304844168964200500240741073014766529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7757492e598a0ec3d10ea4ff13d468853aca2e2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingid.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingid.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018652701a030000040300463044022053f26eaa5824407d2d85b7a5f733601cfdb9bd917b6951c230a4820cab8d09d8022039978f6931373010c333935dc8e00a61b032bfc58ead3e08bd4a5f994705d4b40075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018652701a1600000403004630440220736e89d94b2609485fee52aa0b3dd426d5f7b9d67248b3b16136670715a3efb302200f72c0c6fe51f374a2d07e2b3274dc27f33d5f2fa03d8b4a8979905d3eb003a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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