iqesonline.lt

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:89:91:de:03:5a:ec:04:45:13:00:e9:28:07:62:8e:ba was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iqesonline.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:89:91:de:03:5a:ec:04:45:13:00:e9:28:07:62:8e:ba
Serial Number (int): 316645462857900547521286981261720851484346
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:cb:4b:88:92:97:ef:a9:db:21:6f:17:d9:d9:5e:10:57:42:f4:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:af:25:ff:c5:ef:b5:42:95:bd:8b:f9:08:5a:bc:fc:5c:e7:18:ef
Fingerprint (sha256): 66:9a:39:1b:bf:04:21:d5:1d:c4:c1:7c:c3:53:6a:5d:7a:c5:b5:6c:53:83:e6:b4:13:f6:9c:73:14:5f:66:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate iqesonline.lt

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iqesonline.lt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iqes.admin.iqesonline.lt
iqes.survey.iqesonline.lt
iqesonline.lt
test.iqesonline.lt
www.iqesonline.lt

Other certificates including the domain name iqesonline.lt

(limited to 100 certificates)
iqes.survey.iqesonline.lt
iqesonline.lt
iqes.survey.iqesonline.lt
iqesonline.lt
iqesonline.lt
iqesonline.lt
iqes.survey.iqesonline.lt
iqesonline.lt
iqesonline.lt
iqes.survey.iqesonline.lt

Certificate

The complete raw certificate details for iqesonline.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgISA6KJkd4DWuwERRMA6SgHYo66MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTEwNDU5NDNaFw0yMzExMDkwNDU5NDJaMBgxFjAUBgNVBAMT
DWlxZXNvbmxpbmUubHQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDB
Teaw4UHgPQ/+H1GyCiRc1L5qAP60L0LvsXIU0sHAl+wi+xBwAt3y8dtY5x6x9gG/
wxZRaBi8FGxV4Kbj7YFmAOAWlpmoKj6ioSTb+Iy5yp41+IbM6xzXsIeg2lha7Wxe
bWnKDNGl5zs0RZqU1nHdaWn2h+0XHYXenoKIpkqs6iY0xUZxSxOyOKaXyZ7EgnLq
yjg0FLDXMYkDXhdmb6exagEXmFlClrA9IIedGkneLgwUlp++5hmrfxYYDlhEBmbF
lAMOuAUEsDdQOLYBMLV4jGwt9XY20o5wNAuJ2MtaripEjXd7g99eEiTbtbEYkBPv
qxL7xeT4ZprS/V1pONGxuCfxzRKek0PL8oDApDgoeXPHpOaU2UgGOlfOEmAhUoqV
ujJP+bFNu598cBpKg+VSt1w6f5vk3+/cHAWQalhsW7JPV/mi1sSXFXa8TJa2Z9sG
lYpQK7+6XoW+jEMi8VHGYu2MfC+yl6WHtYruDL/8gqbaVzRdBhGlxc/5cPQO7sD1
sB77XN5M0Q/I4XJs2kF1FogQsazdFrfKL8YtRrGdj6QUL1fbOntwty0llqIlIJqh
kwTpXBEQIjh9OAn4cc1EIWeTyuH9cepY23YBKkYW6kSLbxVtYG2ajUhpg33pMUeo
PtZnHw+hL0HnOK2xvLMjUfE+8mIr5BFlMrnH6czJ6QIDAQABo4ICajCCAmYwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBTGy0uIkpfvqdshbxfZ2V4QV0L0xzAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzB0BgNVHREEbTBrghhpcWVzLmFkbWluLmlxZXNvbmxp
bmUubHSCGWlxZXMuc3VydmV5LmlxZXNvbmxpbmUubHSCDWlxZXNvbmxpbmUubHSC
EnRlc3QuaXFlc29ubGluZS5sdIIRd3d3LmlxZXNvbmxpbmUubHQwEwYDVR0gBAww
CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB6MoxU2LcttiDq
OOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYnjLeZ5AAAEAwBHMEUCIQDFIYFGg0LA
UjoCgzV0duUGw1241DbwjuCZ1MMcySVxAAIgKNVQLn4mH3U2RebFWehNgnvX1lWP
Mmv3XbIShlqlIrIAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA
AYnjLeZoAAAEAwBGMEQCIHiGvia8J56Gk1txH+CdZYCPUU9DdZWgBE90hnY5BMsm
AiAda0Ss5mkxBuwgNGaY2O8/NpwZYjwZXsv71gX96hox+TANBgkqhkiG9w0BAQsF
AAOCAQEALdFWXqMNiKIkRi/XFeKurGO3Vjth9g8KdeMNzZRItqWIVbMUQc4/oewO
qacVaVP8dVm3jWgHLS+s3lr8Tebl0XGwUtoOep+I69R7VQeD2w8msVyERDl56uHc
7pPsHRcIabn5OrSe8v3B4hUWHiyujkD4258Hy4DkZz2ZgDMrHKwQQ23zzf55HnHP
PBgveeCrOfvVMKAiZM7/5Ix0rqGhyTbpc6wbaSETgfddj/29ZiHGQ2nY4Mq5v8Or
JJ/qY+UJ/wsinCkz2YnS/Kd54P2wwPfWaRwNT7mhv8MnjJsyWlL6elJvz1zw828U
Qxi3nz7J4Snqv9uFbbQ0i/INL2gNJQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316645462857900547521286981261720851484346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:59:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 04:59:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iqesonline.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788612746179857762450801100279640935973478984063429839791173376133039372656451770799000553769986332898226399565410926332649752726283395155426475745321873372654389556507235295383967824878271192126596438574933402212837131320979198511904035591666117094629789605733765031058710914616775260596122459732031178209339399470618474854647481922427540141541862467012050364675486834831412031165610957706406439322770363794448999827099072464827764857342034991978018200646783930655113178596703479628494879459979203096786912553025478948304096679525763354743613484228377214694914549044366929809099833451367417032211802279633934680255359248830575450504937989868421431871521306069683678114203091933345934855178391350624229111211703235068492685512276114441905815622313661479972317629714756024878774118467383869735337357419321917247329370271066503929729246422999919906848008967236981928965734374460911622118024817084345199541574539135543843001718519338589080887235253278624938579587887020714723071695061809442104384701695545953529682945033652078067011848313489074648356464422629510740512207162538369539547559236507202640353835500574825643532297049537931246233809964650648897120348470853853241685136901721561798050240976717858009409061715825553971134384617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6cb4b889297efa9db216f17d9d95e105742f4c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqes.admin.iqesonline.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqes.survey.iqesonline.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqesonline.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.iqesonline.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqesonline.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189e32de6790000040300473045022100c52181468342c0523a0283357476e506c35db8d436f08ee099d4c31cc9257100022028d5502e7e261f753645e6c559e84d827bd7d6558f326bf75db212865aa522b2007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189e32de668000004030046304402207886be26bc279e86935b711fe09d65808f514f437595a0044f7486763904cb2602201d6b44ace6693106ec20346698d8ef3f369c19623c195ecbfbd605fdea1a31f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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