decortech.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:9b:5a:39:ea:2e:7a:e9:ba:82:6a:43:94:07:c5:5a:52 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=decortech.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:9b:5a:39:ea:2e:7a:e9:ba:82:6a:43:94:07:c5:5a:52
Serial Number (int): 269029568688256438570489324034126069979730
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:94:9b:0c:da:1b:38:1b:a1:39:a9:3e:c0:b9:2a:98:fa:d0:32:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:33:9c:92:9e:e9:80:51:c8:f0:f3:a6:02:8e:82:bc:ba:23:a6:4c
Fingerprint (sha256): 6d:c6:f9:c6:c5:f8:e3:97:28:17:c2:29:72:69:e2:8f:e3:f5:6b:dd:85:90:18:6a:44:d2:ae:e2:71:bc:0f:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate decortech.eu

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decortech.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.decortech.eu
autodiscover.decortech.netstrefa.pl
cpanel.decortech.eu
cpanel.decortech.netstrefa.pl
decortech.decortech.netstrefa.pl
decortech.eu
decortech.netstrefa.pl
demo.decortech.netstrefa.pl
mail.decortech.eu
mail.decortech.netstrefa.pl
webdisk.decortech.eu
webdisk.decortech.netstrefa.pl
webmail.decortech.eu
webmail.decortech.netstrefa.pl
www.decortech.decortech.netstrefa.pl
www.decortech.eu
www.decortech.netstrefa.pl
www.demo.decortech.netstrefa.pl

Other certificates including the domain name decortech.eu

(limited to 100 certificates)
decortech.netstrefa.pl
decortech.eu
decortech.eu
decortech.netstrefa.pl
decortech.netstrefa.pl
decortech.eu
decortech.eu
decortech.eu
decortech.eu
decortech.eu
decortech.eu
decortech.netstrefa.pl
decortech.eu
decortech.netstrefa.pl
decortech.eu
decortech.netstrefa.pl
decortech.netstrefa.pl

Certificate

The complete raw certificate details for decortech.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qv6HWCLwLNrnA/Is3Hx
wXaWcosdkL4X36vhThGjZR7XnwegeGJMwrfu7hesFifWGb/TGg8eHKxi+w27bY44
QH2LspnCTVrFNWuCIilxoUZwfLMPyutuZnlnLhOL0Wh+ZWf2OCtxYgE9HZzKMHFu
LTMKmBKDgTP7eusDk1EFNJUmhU/Eb9/7vrjyOfGCnhb259Kee7jwi+F1EDp2xY3E
BQJVmc8+g9crAVKtdY/5cviQaj2T9Lnn4CTEzyCP1uIR0+FqiX3HT/U47mMkNnha
7erObSSoOoJsFVsLRM0e84gIa0B2cx0Orep8Muhghqv21eih5fgjOOngc2GTY0Rq
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269029568688256438570489324034126069979730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 20:00:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 20:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decortech.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27904571481627218860862426283824144412836565457755086002850051308550963554430946619969735945839251806636992310223661349895855717863553657545871000528348464392840058440295212478225574968952683919969083675466215953040904688286970033323382995210239482195369134529871292433296312086905871158192707876109831953116647831284459317177616761250150331972285134598860353839310359166647313615826987656788301540066705507011204756296589001219571636405000063887082300895852310276653300320918013826912521078582570267315960092205931315811242575343167610475973550921462380758766816107482574779090599462075772865192077957524465824066171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91949b0cda1b381ba139a93ec0b92a98fad03203
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decortech.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decortech.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decortech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.decortech.netstrefa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e1e78728b000004030047304502205179a8775cb770dbdb6755fffff349d773688dc817a0e7ee929adb0f49f3ab21022100b830a0508fc91c65f57c5d5a44512b7fbd9c310c12c1c9c80470bcd99a07f7980076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1e7874350000040300473045022100a48d31758328d3ee45a276b154ae6707427dd32107ee957d3a4d0f59c88e5eed02205d0c7c9d87aadeedf3ba67400f9117e1e2ed4a5e4c72297b97457b01320719d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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