zivotistil.mk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:91:ec:88:b8:15:55:f0:ef:3d:59:9a:67:4a:e9:2a:dc was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zivotistil.mk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:91:ec:88:b8:15:55:f0:ef:3d:59:9a:67:4a:e9:2a:dc
Serial Number (int): 263912800578167027285940585701065146051292
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:d8:93:58:25:63:60:fe:15:68:80:e7:ec:b8:5e:98:e4:17:39:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:70:e4:2c:84:a2:7a:5c:52:f8:31:e1:91:ec:77:4c:56:97:1d:52
Fingerprint (sha256): 6b:1e:46:83:68:47:07:ac:ab:da:4e:bb:b0:8b:57:7d:12:5a:5a:0d:12:71:9c:58:d6:bb:e9:13:a4:49:a5:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zivotistil.mk

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zivotistil.mk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2001-mk.nova1cloud.com
2001.mk
mail.2001.mk
mail.zivotistil.mk
www.2001-mk.nova1cloud.com
www.2001.mk
www.zivotistil-mk.nova1cloud.com
www.zivotistil.mk
zivotistil-mk.nova1cloud.com
zivotistil.mk

Other certificates including the domain name zivotistil.mk

(limited to 100 certificates)
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
cbcivet.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
businessfinancegame.com
neurodent.com.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
zivotistil.mk
zivotistil.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
zivotistil.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
cbcivet.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
2001.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
zivotistil.mk
2001.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
zivotistil.mk
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com
sni203975.cloudflaressl.com

Certificate

The complete raw certificate details for zivotistil.mk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kq5rQ94WGcbaoVCeQAm
RqzGzjxYZDpfCqFOB/AcxvQQmeBqmJJ0ZZgWvRh372h1j7el3I2iAC43KFEs4QZ1
IeSDxYEhpOwsAZE938vUlxKjnBtBo7HaEU1T1ghSRL7nowGQYrzQvzAzE9Ze66Rr
oRR5GcvuKWsdwOfLnsyyQfcmzyQcOcbWsJyrT8boPC1tW5fWRWTBmziiuqDI+bO/
8oVAaNxXlkaptgGJQaXToF+Cpt4yjJFoBtpcD8YrKM5wZPFAowZ9h5xOOqnwQFII
mWy1BlzPQt7eL+g7iu8XOJtaUqGSJUhkKQg84heEtrheoayr22xOdZ8UnS8CnWQ/
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263912800578167027285940585701065146051292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 09:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 09:04:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zivotistil.mk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28361568094041117899396150648345683659002935828564609491407887351482578812995788280664219984556244821259524642693417010654336539101832195539718976099952307035300040651195187815525991060391502067995764688605316716752449369652345555300911068147002652992673103154955327252997928314564658877103922907739240261726647893038575411757868157679431233530712257492638513045889457085047744132485834262098503610554842350398925843435538092885483610626778706256868657441708615019984041986051319395389629051819706193900401735577265076759694105510901015345969143337263489933661595520071355293212976526611193629181227608363514022084521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bd89358256360fe156880e7ecb85e98e41739c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2001-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2001.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.2001.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zivotistil.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2001-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2001.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zivotistil-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zivotistil.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivotistil-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivotistil.mk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001712ae65ede0000040300483046022100e1aef9c124b938b00ffcc87f2b7ead8c421f9d76f3f555017df8bc0d6a033832022100fc09cc263c454fc454bcf3e2e6e92d28ed78276a3b4baca106faec44a5a9b295007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712ae65ed90000040300473045022100d51828d5f3376b7f75d921b5a666719a1d667b0ab61e89e14ee139e08d81de4d0220649f1b3cddc63a47382f3f3cc7ec149de6b9f2748f76801bccd4c6945bdf3ddc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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