noderigi.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:d7:91:b5:54:a8:e1:52:40:5d:8a:06:ad:60:5d:4e:f8 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=noderigi.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:d7:91:b5:54:a8:e1:52:40:5d:8a:06:ad:60:5d:4e:f8
Serial Number (int): 289866834829680446660543580142945353682680
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:a3:de:6d:31:7b:00:fe:c6:e3:0a:7d:54:de:1c:3a:bb:cb:79:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:c8:6a:28:0a:23:8e:bf:93:44:36:3c:47:46:37:64:47:8b:3d:ef
Fingerprint (sha256): 6d:08:37:1f:4c:d1:46:ab:52:16:4b:47:55:a1:bf:56:e7:3a:6e:f2:5b:db:ca:26:fc:b9:72:d4:ee:51:83:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate noderigi.lv

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for noderigi.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.lolok.area.lv
cpanel.noderigi.lv
lolok.area.lv
mail.lolok.area.lv
mail.noderigi.lv
noderigi.lolok.area.lv
noderigi.lv
webdisk.lolok.area.lv
webdisk.noderigi.lv
webmail.lolok.area.lv
webmail.noderigi.lv
www.lolok.area.lv
www.noderigi.lolok.area.lv
www.noderigi.lv

Other certificates including the domain name noderigi.lv

(limited to 100 certificates)

Certificate

The complete raw certificate details for noderigi.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprB2GTCjv59mAvEvo1xz
xPgkXSsJ47G3b+K6vjov2pcBmocnZQnKR0KztJx7LPVpFJ5bkQx7Ia7sZcGrldHm
6bOOPxZbn8l02vhjcIo0X1BcValcGNyr/s2NASuWf9Ttmwi0Z21+/plLZrm0LQzV
duFmr6B/iytgcq95j58+5Lxx9JLW5plrzaQWQa3wCGjdfVzUXeaQYLdpnym8HR/F
1DXpf4hOKAruxl/qVbIg7iHlcSU+8GWUtvM1oBk7NpwN6ndDVEdLji/yJUb5gOMO
LWuLQruytY8QInSq0jHmeUM2kkSTh0KNoqONyeaNJdKf6dLsxew+JVOrHEZu0VRF
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289866834829680446660543580142945353682680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 21:59:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 21:59:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'noderigi.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21042574945321969169251035905042360685433575395417607920503805726906161752842921085083672090516356254449740960680675333005202547163088344225131891642723251026329556906705283623716307246311657095095791752305052780924357498498451002955202165962801693185421595754239169921555453161324359899293340916810088953980632471888761338591542184600440121909574692947710458457514412297806600502860913458646260816369888653600092807591132065452092368458139068115593259429034594708467587451993394423284975305763065285142609442875492905348787716689734819895100374169700762796842290541588186263470147435396561764442631861020739423716673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61a3de6d317b00fec6e30a7d54de1c3abbcb7933
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.noderigi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.noderigi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noderigi.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noderigi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.noderigi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.noderigi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noderigi.lolok.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noderigi.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b05d1e6ab0000040300473045022100d24ccc9b6f8def04e4efb2bc3769994fa8b68a45619e2bf37b852803b9a3658c022059427a6347f34867c5bff630bbfc5b97a7fc3e6172c580352b7dc7ceb13245b6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b05d1e69f0000040300473045022047a39154095277faf7f426922c5a75b86d9d939bff1e4a5c6b934a92dd1447e5022100887584040f95cd0b975a6cfeba636ecbdfeb6eb8a87d308b2564179fcdb82846
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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