jaluzistyle.by

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:ad:cc:37:73:e1:2f:ce:79:b1:2f:a1:9e:b9:83:2d:78 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jaluzistyle.by

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:ad:cc:37:73:e1:2f:ce:79:b1:2f:a1:9e:b9:83:2d:78
Serial Number (int): 293214134715471407404572031615060230221176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:37:1b:1d:08:57:77:06:d4:88:ac:da:6a:da:81:d3:c1:ef:1b:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:62:bf:02:2e:47:6f:aa:79:e1:bb:0c:78:b4:9e:a1:6a:97:a0:59
Fingerprint (sha256): 6c:f1:2f:24:9c:9a:fb:ef:ad:93:94:21:a9:90:e5:40:5a:fc:50:8f:44:b3:7b:99:60:af:66:b0:bd:1e:c8:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jaluzistyle.by

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jaluzistyle.by

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jaluzistyle.by
www.jaluzistyle.by

Other certificates including the domain name jaluzistyle.by

(limited to 100 certificates)

Certificate

The complete raw certificate details for jaluzistyle.by in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293214134715471407404572031615060230221176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 01:32:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 01:32:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaluzistyle.by'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898316414626405205299795460543720856272775812036005895200154022414200429903929548440306650170251342600885314845834389966056812811241609666645376028413008810878219241684304871866965076639341928631939336464591695609723679425240996481138772863165654674858891352990566032197004944266816895142530511502825399556550321893072907895990627137486841618031058349428176297699988331152565617208678540397314752954273757987012722874278360543870902457037368803769466150869644770007116943310036320397769303426189531089610816482573801213930304693497437185225469556328773674066948949903955171856869368073127715941441239570859092140806815293770938129894586464217300572996633907154641084461181330776470303488709460480845381276633719882190351326919252137972988345825313681050291794452689722046446351990533867720613367032355338385412046048831432235451244699071792292449452929437331736386866115414865588469113649799823904932295118383879593718542409669110863814327685422742049868173631334135377173162341036082510093708986327688207080311575663181135144153079050493788961417450451890357148215366770609425408352825994645322268990543771991095840284897967526190980502981528513034553789841197297787749228171609115133387951363215724351019403520169187182695783364881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22371b1d08577706d488acda6ada81d3c1ef1b61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaluzistyle.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaluzistyle.by'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b96c75bc80000040300473045022100ca96c57edae8544eeddcb4a967bbf8a9df1aa7a5ab5cd57a97b80eeb5881423b02206117f4e3aa7f6dbfdbbea5beb3084a7265b78e9408e1f673febd3d4cdf1ba168007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b96c75be7000004030046304402201d74c6bcd924f473116c18179c11083ce23a4d90dad5c7f0f967e69fbc418b3902203e3adaf0ef070fdd93f24bc8ce3520810a7b6f5dd5c54c993fe79d2361f9ed01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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