tim011.rs

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:eb:5d:1a:2c:d2:35:c8:2c:bf:3a:31:8c:6c:a9:54:4d:aa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tim011.rs

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:5d:1a:2c:d2:35:c8:2c:bf:3a:31:8c:6c:a9:54:4d:aa
Serial Number (int): 428539254065868425972752137020376748412330
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:0b:75:dd:05:3e:9b:f5:d3:b1:bf:8c:f0:98:de:6b:c0:2f:84:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:92:64:53:12:b6:92:20:8f:bb:88:4d:ef:66:1d:65:65:50:53:9b
Fingerprint (sha256): 83:03:22:9b:d5:b3:17:49:69:10:a4:1a:53:e7:2e:ef:06:5c:6b:17:db:ba:dc:ff:91:45:76:ea:42:1f:db:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tim011.rs

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tim011.rs

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tim011.rs
www.tim011.rs

Other certificates including the domain name tim011.rs

(limited to 100 certificates)
pri.mail.tim011.rs
tim011.rs
tim011.rs
pri.mail.tim011.rs
pma.tim011.net
pri.mail.tim011.rs
tim011.rs
webmail.tim011.rs
tim011.rs
sec.mail.tim011.rs
cloud.tim011.rs
pri.mail.tim011.rs
pri.mail.tim011.rs
pri.mail.tim011.rs
tim011.rs
tim011.rs
sec.mail.tim011.rs
pri.mail.tim011.rs
statistika.tim011.net
pma.tim011.net
tim011.rs
sni.cloudflaressl.com
tim011.rs
webmail.tim011.rs
pri.mail.tim011.rs
pri.mail.tim011.rs
cloud.tim011.rs
kapacitet.tim011.net
xn--g2aaa.xn--80adctj0ab4nqc.xn--90a3ac
tim011.rs
pri.mail.tim011.rs
kapacitet.tim011.net
sni.cloudflaressl.com

Certificate

The complete raw certificate details for tim011.rs in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428539254065868425972752137020376748412330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 02:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 02:00:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tim011.rs'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800092261649380000075096961474858579477960936863643156378463389236896523110244097673618684731451978660011852416074765987265711778763517472009370961558359297072042404997836444979147715430046553740782120751417647290554580861845812025277595048102103256797087631176891048817118168315260101919292202088377766017159574153307569137281820848411709763955937673676568087851170375490641064219076016327848922892605114269465214138899954257745227705115951484898401867395860897071078039178941780505360602391924464982207903920456592351064701963195979301721986718069800960156482350116176087226613037963194787907275218252512235756846563866777724219061474055478323980159133970784752565588725477693816584241513338147621528626303557116225784122774082051201354817728218203162665617133428394350405829379688142634301262531402147394238753514569388172462722641250472556675722161810262821251667591945410523565888165904017556363902769370494558483236494554399955879942611940275547430844356134649632890625346927316099785789629798116569730358741290484210744246398444371983128513233513818098496316918476655978801810081495923183560994308279385757046076430816948181193635408421613557506915767541845990484715552991431817268088994854826810173655835497938926744217417561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							020b75dd053e9bf5d3b1bf8cf098de6bc02f8487
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tim011.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tim011.rs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebf676a7e0000040300473045022100d294f2320c2ef623645be88883c669f34d20d11d7ddcccb3e1107ab1c964d631022025c40c7ad94e8adb115a453208afe2c8dc8815b1fe96aba7de7726ee41eb617e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebf676c3c0000040300473045022028575ea4e6169cbae2df11f8686b687c804ea71c3fe1b6f00c2aa2c8b801a5f6022100d2b5a5042581cbdd18c969ffbe409aa77f555ecd85c152c8bfda41192b27e01e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00669106cc204f0f3b91079954cf08532a57d8e2fa05e87af44bd78941518ff2a03d01db718c09198eebd48eb5983fe71f275094eb257c7b04c078f6819c5012044cc1f96240acd6617ad20d4d3a2c1eb5d6b02346dc53ca757a1b520ec3b16f2bf57d1f192a884d607e661a12cee42421ff779fdce525db40253d1b7998f2ab3901ceba4e3b619ae283ce04164cc3d413bc89419d4b8d4952d75b63b7365d969cb8120faa93a8470ce647b1ec7268c3ea4b9d82d6d9302e56f32ad495add29adc864fb5640958f287a98d3fe48d0771fe461171257456020ad54b62281ac009addac47e7920c56ed776b4931751e613f662daedf9f956a96f6d46bc67151847a1