corona2014.baku-corona.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:b5:78:a5:3f:ee:0e:8f:ee:3a:99:4f:49:b4:b3:44:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corona2014.baku-corona.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:b5:78:a5:3f:ee:0e:8f:ee:3a:99:4f:49:b4:b3:44:e9
Serial Number (int): 343926407284670575928235548827616575440105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:3b:41:df:73:b8:ab:82:2d:ea:6d:87:4d:86:0b:ef:4a:a7:18:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:0c:25:25:0e:22:df:ae:de:c8:91:fb:e1:c5:83:d7:5b:c6:2e:bd
Fingerprint (sha256): 78:fd:d8:90:2e:68:f6:55:3d:ff:a1:b5:2b:c1:6a:5d:86:58:ad:22:45:8c:45:68:f2:fe:1d:5f:07:7a:6d:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate corona2014.baku-corona.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corona2014.baku-corona.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corona2014.baku-corona.com

Other certificates including the domain name baku-corona.com

(limited to 100 certificates)
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2016.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
blog.baku-corona.com
corona2014.baku-corona.com
baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
corona2014.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
corona2015.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
corona2015.baku-corona.com
corona2016.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com

Certificate

The complete raw certificate details for corona2014.baku-corona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343926407284670575928235548827616575440105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 18:28:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 18:28:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corona2014.baku-corona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667870427847593264242029876493204958373535920673282745829086898856148673129105196182589861099644620100276361330277730107337666961095989806368926217516277569120320354344600419564997026376974481883805156988638143415765221402566419625173697326326023247928848659017548991955927847572646550660096995867821954241373001120643297892571815785993741259191198000818225111060787252133177567766006561968342203228595247577398674763966711488804618310406189632284555952841062720153779217671654412848852702308684665983658464781774036379261280382707569687631615680816604701378622034973276124571701369422029101765255524153908211256185865079596304578162915538619308980819156943982364121069409755061540663759415863983633876687794617445979006078802642150556356558073006290068469776246252881292969775957904777389706363348228311654481743567557248617721339493196754868303202249541365915523888630948261900596421732343740479334807663617873758392119655065765806010965769877296461447545169699052654628994661972612337660450911569981070598905692442102457236926577062067175623367012401825330641657624420488762330135804844936736034308278655326499016874869157241805739679021287596048861289566952781151287167489002640271659480909421928871610901376687833789690657697687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a93b41df73b8ab822dea6d874d860bef4aa71887
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corona2014.baku-corona.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e99bc7f7c00000403004730450220778478f40f3843b96fbf56b660a44cdf1f28822def15d402830c3fb2feb0c29a022100d6a964c3c974c827e6a119e704c054b5069b28ffce24580726c7bc2f08d1d10c007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e99bc81800000040300483046022100936034a10a80be653e8f7578fb80dbf3154140a00e4c5a25c677e1e72b4e40ad022100e42f685cc0775047c6d8cfa5b67282c7dac24aaaf8a3ebe5d05e26b8f8d0d091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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