gyvai.name

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:c1:3b:07:6f:62:38:30:44:a7:9e:1a:82:17:62:d3:05 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gyvai.name

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:c1:3b:07:6f:62:38:30:44:a7:9e:1a:82:17:62:d3:05
Serial Number (int): 321483401872868642551119620049141586121477
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:3b:9b:3a:7b:96:ad:ab:26:d2:00:49:4a:78:b5:be:30:86:3b:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:c0:76:c7:de:15:d8:62:b2:e9:c0:64:90:5e:fe:6c:ec:3d:fe:75
Fingerprint (sha256): 81:43:d5:01:69:78:2c:c3:d2:4b:6c:a0:65:58:ca:8f:00:95:4f:c6:8c:d3:ad:c8:b5:80:8a:41:3c:9d:bd:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate gyvai.name

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gyvai.name

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aikido.gyvai.name
gyvai.name
naujamuzika.gyvai.name
www.gyvai.name
www.naujamuzika.gyvai.name

Other certificates including the domain name gyvai.name

(limited to 100 certificates)

Certificate

The complete raw certificate details for gyvai.name in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321483401872868642551119620049141586121477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 19:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 19:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gyvai.name'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954057393646078631655324650859108981051541705265038500133573562044936937719843167409577961846843491170871918372175243040558260502892620624359795177174137261906313940627732864875086867461760601148232733952898668394877159896322227025311323431877187512802502122073757461342737104678918958809164816763604613760785287017435252973538619337260234015010887827085882930570197703366800089569191222712196819155784110025619375793002521297222928554719788172433598661181547997489845637002600385445069855333025900823965688495452172787739259471364457573537728621396315630759342670903567798285189387562097504336759164973602408925921615149478282882540258339854000574333251244889441293670824382271370868879860789769198848934825448204614090500847111564577093543297860693581206051644179106239662748558538096750373801082737284860110642072515498379872571750500798078634378892279271829125920195129329978039460166478393336718802032143219182901275753823578578790788075317976792838117072670626750183950533410336184422538384202395233277671563478208561552408977686661702643531650856798508464649720799219329193903418398831014550121317217257980118883698183955022204544290555464982525860532923919028238161636603219648301223934043221332334418749797347916217970119823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c3b9b3a7b96adab26d200494a78b5be30863b51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aikido.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naujamuzika.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naujamuzika.gyvai.name'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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