portvila.org

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:56:90:b5:cf:c4:32:1d:a5:32:e3:c9:52:05:b7:09:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portvila.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:56:90:b5:cf:c4:32:1d:a5:32:e3:c9:52:05:b7:09:97
Serial Number (int): 302966371545597451812268673165431615719831
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:40:1d:c9:0e:07:65:6f:a9:da:eb:d0:b2:50:18:3b:90:ce:94:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:5e:aa:d4:ce:7a:35:ed:a2:f8:e2:1e:e6:72:d1:09:33:b8:f8:57
Fingerprint (sha256): 76:0f:5e:5a:88:fc:90:ba:34:9d:82:36:73:5e:d7:a7:3f:69:c6:4a:34:7f:e2:b5:25:dd:03:e5:0a:81:d7:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portvila.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portvila.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portvila.org

Other certificates including the domain name portvila.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for portvila.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302966371545597451812268673165431615719831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 02:17:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 02:17:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portvila.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834850133117415699273078754503871657697210995767415549373375953124001367614102364803475239154320596991972279217028119148862148223792221123637831820835952789326878738518540900029233574490003764524737073858013522571997382957561816222188103256633728750051299083064683550916281225007652231084150876829911584056648880025429023134648709879671394685743883836390926489043513771089387578300166279128374860099142632642394146157741282619751558895026435299650098332010996231158438140510510662856273275696197261433271010233417464338061526186754951237275410404057357856060207747973900892317819034028050573396283040240098310542164891221942421657167530900872318382073406549676174831069709095878949202438654606435089581765430468081934067537542515941364897362024255877874277664715732604945584092138466523587730695870557088213420967039452931360768839292320914119221422145349256219612367413868666962748926064023834553803402995551136367600917331775587416919246568386958448599256794684566599405506075912625536349661106001616838099377885493712043531876530583704543975813235637771376231730405264725448411533675723816058028812686799403205290189681779382983338036405598232478493409090716300097977841459177219187124430278103427219103054506190524822403503411653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08401dc90e07656fa9daebd0b250183b90ce948e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portvila.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e830ff76c0000040300473045022100aedb36b983f2c9b273158e3cd7d104a2fc389e8c54e76f5cf66342a104d3a30e022035c9046797bafe4f889a7f5979242bc0e5260bbd0bb47242859e6ada829cf1c7007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e830ff7bd0000040300483046022100d60909fe48b6c6096370299d2237006c6d230b3ecaf76a73966f769d53c39fb1022100a55ef6a6b1301b0c7ba1018413b9b0e06a1a380ab40fd7a9e49e05dfd98efa66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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