odiodi.lt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:8d:c6:5f:e8:9d:72:97:40:3e:9e:2a:5d:73:e8:a0:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=odiodi.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:8d:c6:5f:e8:9d:72:97:40:3e:9e:2a:5d:73:e8:a0:ca
Serial Number (int): 275476886006481453704385789710771348349130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:29:d0:74:55:90:2d:96:16:3f:36:22:a3:72:92:bd:cb:57:56:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:be:dd:8f:a7:a3:ab:e6:de:f7:eb:2b:f0:41:d3:68:6a:8e:0f:05
Fingerprint (sha256): 57:9a:ec:8a:a2:53:62:61:73:d1:e4:83:93:a3:c8:41:65:46:4c:53:e2:f4:1d:7d:4f:9e:5c:a7:8e:46:ea:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate odiodi.lt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odiodi.lt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odiodi.lt
www.odiodi.lt

Other certificates including the domain name odiodi.lt

(limited to 100 certificates)

Certificate

The complete raw certificate details for odiodi.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAymNxl/onXKXQD6eKl1z6KDKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDUwMjE5NDFaFw0x
OTA5MDMwMjE5NDFaMBQxEjAQBgNVBAMTCW9kaW9kaS5sdDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAOoYRYRqK7p9EvnRp6snubYKbcXrA2hsTFl9LjPd
0ZstB7FD7ONha2GsbGEjSvepjz6zA76BGc8KXs/gW6wGax/2FdGwwBLQQ8NHWwdp
MS6ET3lQ/UXO81/5NwPAWuLM+oIVmfY4FDAsGc/fDWFtHKlnMIWGuBrW6jPhN+qM
KZ1xYi8JczofVTK4TC7gNKvcsn/CrZ72jBVYQV+N18MjfaA3ZRWyEXKUJob99AtQ
Z8z4/XK0rcPUaqxM/lQGjLe/tB2lKgsLhu0YREXSBHejSqx1zy2DqtyEbbH1soDW
n1oj+asOfuNGs4fdzMtk0rUxlqzkJ9Y/pweOQpYIk8PoIM7fJQIsWrqIWlonN6se
KGaiJ+vlwXveNukclTsGYia+e2QBrxNVa8OCb1DIAgubBGLpo7PQAZ3i8BDh7mrB
xFTkQy5bdMs8HLhwFH6EFVDQ6FyA8LWE4ZJWvcVMZxoXbJ2GJ72n0nKCzQvsbk7E
PnsykZvn+a4NBqKa+wkFvDNT6QyvziofTPFdwUCiFcpItusemwnTmSwLgr7DIy0d
CyQbIbMPpCclctl6h4aw9+Jfcpy0OqPbtQf5zsSwS04kDCye0//38hrC40vy2sLl
4u5GlkgYN4Fh9gDcgkuNCDGaoDonL0KXFkq8e2rUICe17wQlscvB371No7/1rpFc
a9H9AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMwp0HRVkC2W
Fj82IqNykr3LV1bCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJb2Rpb2RpLmx0gg13d3cub2Rpb2Rp
Lmx0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIE
AgSB9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFr
JaZFUgAABAMARjBEAiA1k/mOXlzr0OJ8F2mH65KfQVVefTrmwpCvLh4+cpgEPgIg
BuWIpGeu+VnMvvVsgbzh50b7ZOZFvy8uDAuNdy8/IykAdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWslpkNPAAAEAwBHMEUCIGNtqfu9xvfoG7Fq
jsBUu96+bSiPvorG/GbO847TADJ9AiEAjsdq6q/vO9V7b9DL9Z+Bii+OhZ8t6BK2
vK3GQ9KaGXEwDQYJKoZIhvcNAQELBQADggEBAB2LlbmkDjPp5cLadk0LXolwGDGa
rVojgtFiNPJ/QGSvKGjy4s15hF/HfOmPObA4wz0CFeDovSd3MY8g+JFs1r5EKJ5/
U2i1bPiVEaxwteCrdH2jvke8xoiHk0B45LjWW/MZISPtbTj3AuG2poLq3Ds5cwbO
LD6AHVNeHIrDVYgfYNZzliOVAQZilw/MRUCNe/hl3EnRNrKXrVXSKxG0YORoJk5B
sBpXr//dBIZjUXQG2Apjpe2NKiEDp3jBuVQm2fvvgfMnObr//0QLPDVCOGv2nBVF
azvH9Zo8RoQv7z0FMR2YDfH73KLnbcPmA1ZeLpP6V/Svg0uT1Cn9qM16RO0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275476886006481453704385789710771348349130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 02:19:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 02:19:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odiodi.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 955023506026363342995820979610713536943056429861249815515864750861864170003178924771385519134204937430884239791240477996468090943591152167905460103552709227264302840205426679914315266827540438214469171013274433456501183942763403075691115647556456380848477470728143166926120979798216477100998038303701736689186791913334955410735283299845962557320307924692532803383724664216965818221542371005508503374727974690644378283542830270847927243532555608614445909324225218047907414631506164301316182687366229162561000132926262638499209247666541178645896572935255717671075018664054501829563272318840030701453682374577158423346310380943700540061930701747896625922908941377979329768422372812096441441979896769420969340155601564581760416117674143629393478817356864994547317071371013620783529923201861905437222579082645286830212997783951164200424953491660655010030158267119677676961774407665150215113330519092269396275408344815765442435982163330873149065329915528830444236809849387037672424772773308470067935555187304068792279546241257423894818043138798920399493828207237540058167082194483706157749718991489370771441725970891941121169039447923701980963611395061178081670668394285270573765364605309495949886902836666749922329325492560516421966877181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc29d07455902d96163f3622a37292bdcb5756c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odiodi.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odiodi.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b25a64552000004030046304402203593f98e5e5cebd0e27c176987eb929f41555e7d3ae6c290af2e1e3e7298043e022006e588a467aef959ccbef56c81bce1e746fb64e645bf2f2e0c0b8d772f3f2329007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b25a6434f00000403004730450220636da9fbbdc6f7e81bb16a8ec054bbdebe6d288fbe8ac6fc66cef38ed300327d0221008ec76aeaafef3bd57b6fd0cbf59f818a2f8e859f2de812b6bcadc643d29a1971
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d8b95b9a40e33e9e5c2da764d0b5e897018319aad5a2382d16234f27f4064af2868f2e2cd79845fc77ce98f39b038c33d0215e0e8bd2777318f20f8916cd6be44289e7f5368b56cf89511ac70b5e0ab747da3be47bcc68887934078e4b8d65bf3192123ed6d38f702e1b6a682eadc3b397306ce2c3e801d535e1c8ac355881f60d673962395010662970fcc45408d7bf865dc49d136b297ad55d22b11b460e468264e41b01a57afffdd048663517406d80a63a5ed8d2a2103a778c1b95426d9fbef81f32739baffff440b3c3542386bf69c15456b3bc7f59a3c46842fef3d05311d980df1fbdca2e76dc3e603565e2e93fa57f4af834b93d429fda8cd7a44ed