salon-mstudio.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:07:87:35:d7:b1:5e:c9:fc:e9:bf:df:06:cc:9c:da:87 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=salon-mstudio.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:07:87:35:d7:b1:5e:c9:fc:e9:bf:df:06:cc:9c:da:87
Serial Number (int): 263728841011830363170687371919894926645895
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:af:3f:66:de:0d:f5:49:fb:4f:26:70:7c:14:2f:0a:31:7d:3a:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:86:95:67:8d:6d:9a:61:4c:b7:5b:98:85:b1:fd:ab:16:62:6b:10
Fingerprint (sha256): 79:e2:14:a9:ee:2f:0d:ee:11:b0:02:42:e4:0b:01:4d:c3:bd:06:1e:72:46:f3:54:3e:6a:40:1f:16:f4:7e:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate salon-mstudio.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salon-mstudio.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salon-mstudio.sk
www.salon-mstudio.sk

Other certificates including the domain name salon-mstudio.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for salon-mstudio.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263728841011830363170687371919894926645895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 01:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 01:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salon-mstudio.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642380932417097420529749390862124979798673309258175254657677391719677687049551393121361830823518051970314677495770546505734559790715073365640212615378006276218382127599401289891378438272697246480840739409550444161165936654601025771513976140862696951146874628352338861440130535937574393940062784924517244889648044287653439363373266811698158852981966161057068750934624934606443528092172815145487189666842030512813924989618014558700852583589439801275221997710739014813791117433624856626976297247847043030530851472655590044930907711845375450478175132950246358185623016850873485933494377262841375454797366224312792653335345686806093909484512933893033698110066352295102116284207858634388561923334798449208565358944514973328147663202581785069429968725413135060466607693701792883388088422809415894302852760724527079028639296736115613885986600874181910645880158117463874260963880173533500805297966744593288520659605469992411283879785362992875477109478376575490038653868533234314117977473063561460326488941826706305819429758758405800627063917832505127697716878394217606174132326412887654381715440116254370872833722796943182929028252734755170228693046852710508192939823415174514741609510703769228754599792484604039563037197505008595970289663127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6af3f66de0df549fb4f26707c142f0a317d3ac1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salon-mstudio.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salon-mstudio.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017003a21dcc0000040300473045022100d8aece3220fa26edffb47427f6e77d0f8629df14c7697cddc9b5b186d59d11a802206dac7bfbeb241d60fe277f9244161dd6d22de97d20695ea8a1c1aef4a77521370075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017003a21f9900000403004630440220387b674434902620f0b89848c4c91d9a0273865919c185263bcb38bde5b93364022010728133f004acf659ee7bf74b76d557f371d589ad3ffbca486e9da14fe37a0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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