ainazuskola.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:64:3e:6b:05:aa:24:60:e2:b0:96:7f:c1:01:fb:75:d9 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ainazuskola.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:64:3e:6b:05:aa:24:60:e2:b0:96:7f:c1:01:fb:75:d9
Serial Number (int): 318297259963727808918686670398569253139929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:7e:b2:7b:63:e5:b0:00:65:9d:3a:d9:43:25:81:db:7d:c9:50:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:f5:29:d9:ba:80:dd:61:a2:74:47:c0:1f:d9:0d:26:80:01:48:c9
Fingerprint (sha256): 78:75:58:0d:a5:4e:dd:d3:e1:6f:59:09:1e:be:f2:14:6c:de:36:b4:4f:22:13:b8:ed:3c:a6:57:1e:9e:12:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ainazuskola.lv

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ainazuskola.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ainazuskola.ajtunost1.area.lv
ainazuskola.lv
daugmalespamatskola.ajtunost1.area.lv
daugmalespamatskola.lv
dzervespsk.ajtunost1.area.lv
dzervespsk.lv
mail.ainazuskola.lv
mail.daugmalespamatskola.lv
mail.dzervespsk.lv
mail.mazsalacasvsk.lv
mazsalacasvsk.ajtunost1.area.lv
mazsalacasvsk.lv
webdisk.ainazuskola.lv
webdisk.daugmalespamatskola.lv
webdisk.dzervespsk.lv
webdisk.mazsalacasvsk.lv
www.ainazuskola.ajtunost1.area.lv
www.ainazuskola.lv
www.daugmalespamatskola.ajtunost1.area.lv
www.daugmalespamatskola.lv
www.dzervespsk.ajtunost1.area.lv
www.dzervespsk.lv
www.mazsalacasvsk.ajtunost1.area.lv
www.mazsalacasvsk.lv

Other certificates including the domain name ainazuskola.lv

(limited to 100 certificates)

Certificate

The complete raw certificate details for ainazuskola.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/hT+6seOO1inFDnHEZ4
0HNplPf0P0rdi/08CyZRuJeE0lD+0l66mOzZbnItP6vqbIBIUspqaT49CaRvdlSO
+2psYUeJk0dWwDWwdoeMFyVB4aAjPbLI/HrykY7IzPAkufi13vwPCWzHhQSfDlZL
QPMSIPixdykwJRG1OEj78TxaJixUVJhd7liw6NwvaBRLUGfeCfGEiAKPsSRLfZZj
h8p7TAhbBhnfzjxpru29cmKOC9QIO9QWg5xmPQHJy4Th2iKL5jQnutSrugEgtFLL
JYUS39IWfCYUEfSv+euEP6s5TYScdlajywXot5wRzIEMMbcr9Zp6bfpcP7GwPYiu
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318297259963727808918686670398569253139929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-11 20:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-10 20:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ainazuskola.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26758737477649853930484422657333459120387915628365447204032541812393254010731666040321828116445617955650213893672229456106159708722468763770048162170048163950749451316358257122568192722096217224130823498220109835267927785586385719422893591990758033851272942961028654507769170236158280346443797547136031934940915439305093284261360576092715813712001745119646376465677738662294502176621687096967286189263823988368997764613074042903432196093421982671839218416217009103517638129011725276401556020030885837034256676878490408531820099410722734353077456295315782571989650828496638009058530455765953523216316841347255152193187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb7eb27b63e5b000659d3ad9432581db7dc9509b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainazuskola.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainazuskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daugmalespamatskola.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daugmalespamatskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzervespsk.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzervespsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ainazuskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.daugmalespamatskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dzervespsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mazsalacasvsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazsalacasvsk.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazsalacasvsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ainazuskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.daugmalespamatskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dzervespsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mazsalacasvsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ainazuskola.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ainazuskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daugmalespamatskola.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daugmalespamatskola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dzervespsk.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dzervespsk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazsalacasvsk.ajtunost1.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazsalacasvsk.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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