kempovanie.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:17:48:3f:01:6b:fd:be:c6:e2:56:df:5e:84:11:3d:d3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kempovanie.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:17:48:3f:01:6b:fd:be:c6:e2:56:df:5e:84:11:3d:d3
Serial Number (int): 292333500552267462535475973552340858912211
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:c1:c8:22:d7:66:3c:bd:6a:32:bd:5b:3a:43:79:79:ca:87:1b:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:47:f9:2c:80:cb:0f:59:b6:c5:2e:5f:cc:48:d7:3f:4d:59:ac:89
Fingerprint (sha256): 75:d4:e5:9a:e9:41:46:4d:b6:4b:b0:35:82:cc:99:ef:b3:58:b7:20:4f:be:8b:5f:d6:e9:85:3c:59:d0:6c:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kempovanie.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kempovanie.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kempovanie.eu
www.kempovanie.eu

Other certificates including the domain name kempovanie.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for kempovanie.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwioWlSlAFeZLJX0XpN5S
R+6SWuEMFKFr2yxj0bfAwv0sqblVLpkxhYz2DIQQp1YfZToxvziIqUf3V5JHeqws
ZEKEcuNuxd7RWOm6U3a/rNaYJ3onGUOiBNauok4Phpb/k3hx/YwQUhT+9tvNnxal
65AbbNSTW3cgGpc2TQFYdXFmVU4nT684ps/UCKJpG8qsq2RNxy/d/0r7Tc2Xwfoz
Fmtkbe3cQ7W1bakFOU5+yAubpqUVDTYwnrBzZgLcQdrCCgJXoDb/n7izsvi2QMFk
PG+aUqe9wSe1cYKgXIvIpQmRRHQ0Vci/7H+N4Oi9Lto4yd2ckncybkWKJ8UwVSnW
3jwPSG+cPkJ1+UlyDKVsL76Ei2jPh+QGXIEtt1rShGr8iCb9UY1xg257v7PCSKYb
5QYbHJKqu9md2Czuc/VoL0VuslETc7SXlrj5VjZdIR0cFfKqXtEOGAuE/Vr/4/V1
120Qg0nwHVUUUStbItcDdWzuNDJY68g2IBfYTbCO4Tf7pYpdiU+nOP6Vyct74a4U
UrrFiSl6VNB8jhZSzKAwE8Rl9pAgGeSooV26ifPuAA+4v4wQfx+pFg2I52v6w5b4
roBox4gBivae1cHd8GRTXjXUOUdPIol4aJcmsXtZfYqPTic3BN/lD70fD4Yg2r92
iTwfB7EO0pkHD58ayeoJomkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292333500552267462535475973552340858912211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 22:15:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 22:15:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kempovanie.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792121671581113317468903256412836439763367204702928434508076696192955143962056233748874919184708639537081387005154960508994348153505211340284602340712666320637618220664016356843183287740368335619661222031487704268759581576301156638495207356932565850863713338653674707287722756363462297632899468905457999748883252807450777637122781398883762412979248735105117364866356202939021230616941179422739015104528617154821218665781865803446952996118850722378413598085793730203543924774081243918334837278252161453176499696759936161725970262353798589712368871066987314849509890189401802358085299501488478098802169595243587359892338862630777434922227844098344920425714607225410336947686918243173173883116759782929390778681490143573314133120641860349453318007547629723915716424535308262821017617705571113601097375156094887022352682980228225594592527301063918844822643843104903752964404711381398052807800703017672215425779355086292988662793650243048330829433335128205891005804845015239954576110616537256469075953084671995044386994830679118223672637290512302365935636893903112746419536665806088633555402784823179150390483100766373892424537834792470832637654833445576681442841575226310621187950170390057609907290331845306609192559820794243723937030761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13c1c822d7663cbd6a32bd5b3a437979ca871bb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempovanie.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kempovanie.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cdfa9eb23000004030047304502207c95f1ac31b49cfc90fdf40c5dcdd9a9faf8710c257640fd914ec2878e3d7def022100f44aab74ede647877278dba8ccdcbc88998e64b3dfe3c9a1cbb46236fddccfb000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdfa9eb440000040300473045022012ad288d0b007c65f7f95c8568dd004792d6656137231e14a42f5816a469ed10022100cede60d4c4386a2e5ef520f9e9a3cd7159353d26df8b620a105ef3879f795c0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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