ketaiconsulting.ru
Issued by R3
About this certificate
This digital certificate with serial number 03:ff:f1:0d:d6:68:c0:c2:65:df:d1:3e:8a:d3:3e:45:b6:01 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ketaiconsulting.ru
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:ff:f1:0d:d6:68:c0:c2:65:df:d1:3e:8a:d3:3e:45:b6:01Serial Number (int): 348429277155698414018684593465887887308289
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e5:ad:e3:3c:5b:ad:43:d5:90:13:82:70:f8:41:9f:e6:be:16:e4:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 05:47:d3:d7:55:8a:19:86:c4:f4:bd:60:be:1a:17:bb:30:8b:b5:92
Fingerprint (sha256): 6d:48:aa:68:dc:8b:42:9e:70:ec:3c:2f:f4:22:11:8f:14:11:ac:80:38:db:ac:0f:74:89:c2:02:a0:15:4e:b1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ketaiconsulting.ru
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ketaiconsulting.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ketaiconsulting.ru
www.ketaiconsulting.ru
www.ketaiconsulting.ru
Other certificates including the domain name ketaiconsulting.ru
(limited to 100 certificates)
Certificate
The complete raw certificate details for ketaiconsulting.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISA//xDdZowMJl39E+itM+RbYBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDgwNzExMzNaFw0yNDA4MDYwNzExMzJaMB0xGzAZBgNVBAMT EmtldGFpY29uc3VsdGluZy5ydTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaST59G++vETG2WXVUInC/IeF/rxu72BdY2YJGugD1cR7pHfgZ95ULKMWGU e5pIxF1CFdqq5ttG+4kub+lmHNqIGNHHEt942Tk4gzGWk5OXfdbhlRCXoGzeCyM9 QE6eNQtwg1szxDlx2qddg26qJdq/Su/0OvzyDLsu6/twmNt/GcCoLDFSCrcH9SHW eRKS92ax5clWaRoeNdUElyiZpmavtKJujm+aAMBvhYw29mGmuAnegru+j59G2wIV QnQwxP2CmBP13Tc5c32lQcOeEx9Nt0D/Z/4Z3egXjrtFVi0bw2J4SxH3lDSZ8KDq HRunU1nQ0bvy7vrCvR+ZkaFIT/0CAwEAAaOCAi4wggIqMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQU5a3jPFutQ9WQE4Jw+EGf5r4W5MUwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wNQYDVR0RBC4wLIISa2V0YWljb25zdWx0aW5nLnJ1ghZ3d3cua2V0YWlj b25zdWx0aW5nLnJ1MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIE AgSB9wSB9ADyAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP V0H+bQAABAMASDBGAiEAoQgmhSarsPL2JsL/qKHOXJu0SErxFgIPj0ylYf2qArsC IQDTTNMlIcrsy4wcAIenQDE6Vr783CclYpBv9Q24q0RGGwB3AD8XS0/XIkdYlB1l HIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj1dB/oAAAAQDAEgwRgIhAJ1JhDUJ4hxH NWiXZuyZgeIsGeERJeBRKHPQUPCBEdeFAiEAon8H82noShZUTGrzuYgXheUHQgLc mfrHlkmAqGvrQk0wDQYJKoZIhvcNAQELBQADggEBAIzWHyumzkEYO3eTB8elGO7w DABPJYuEotygr80Th0fGKbtfUpci8SfOTOMSgv8JAWGFCjplYzg2+gkKuRVQjLxi 3RUpBLrAP05i6v/vdjgefFrGvSodhQ59k90jgp4Y/Bd9nuJsQcKyQr4tOK/Zlmq6 2UFov9unLKet3PWSeu3yzQrfenJSIrcAxDsf7TE2+0NDtOHLXFmGNRlw7hd9k+1q WiKe1Fhy3fL1uLwDQUco/o+Gqs7Wmkrd51jYa4l2d+5fhNSOTNn2RRu95EjpuNXg Cfgs8PUiJXursIjhW+JAuePdO1oov1+Ew8v9ZyCvjTEqxU7Gsr8Prd6n408rw+w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpJPn0b768RMbZZdVQic L8h4X+vG7vYF1jZgka6APVxHukd+Bn3lQsoxYZR7mkjEXUIV2qrm20b7iS5v6WYc 2ogY0ccS33jZOTiDMZaTk5d91uGVEJegbN4LIz1ATp41C3CDWzPEOXHap12Dbqol 2r9K7/Q6/PIMuy7r+3CY238ZwKgsMVIKtwf1IdZ5EpL3ZrHlyVZpGh411QSXKJmm Zq+0om6Ob5oAwG+FjDb2Yaa4Cd6Cu76Pn0bbAhVCdDDE/YKYE/XdNzlzfaVBw54T H023QP9n/hnd6BeOu0VWLRvDYnhLEfeUNJnwoOodG6dTWdDRu/Lu+sK9H5mRoUhP /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348429277155698414018684593465887887308289 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 07:11:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 07:11:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ketaiconsulting.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25067333038294538831740715105230913060850429437715237074883147420186370703419509411794487884381943198895229062644743184712149964136346100052184723696236190149008767954208416234871406397857171011470292137744659560339400723319619923685602960499560277585352271415102076736745486484528759733563329267469426614430161016612024919087230541816254163571378341153590015132235312493471549468348924794596832921807345692652974422952464395365052092462082998837790962759051419191433321910443242996848017591809589710588682117208885970679192241618533029487358752580174609429164351251146618794241660227062047913713158727946602424061949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5ade33c5bad43d590138270f8419fe6be16e4c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketaiconsulting.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketaiconsulting.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5741fe6d0000040300483046022100a108268526abb0f2f626c2ffa8a1ce5c9bb4484af116020f8f4ca561fdaa02bb022100d34cd32521caeccb8c1c0087a740313a56befcdc272562906ff50db8ab44461b0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5741fe8000000403004830460221009d49843509e21c4735689766ec9981e22c19e11125e0512873d050f08111d785022100a27f07f369e84a16544c6af3b9881785e5074202dc99fac7964980a86beb424d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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