naujamuzika.gyvai.name

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:93:83:af:80:01:15:d8:06:c2:14:01:ad:1f:67:47:ce was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naujamuzika.gyvai.name

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:93:83:af:80:01:15:d8:06:c2:14:01:ad:1f:67:47:ce
Serial Number (int): 348304941625952120152244438759474796644302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:fb:f9:30:a7:e1:17:ba:23:d8:c1:81:15:ec:6e:40:72:1f:d6:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:cb:6f:15:f0:9e:9a:68:47:da:63:03:9b:9b:fa:01:fc:98:51:48
Fingerprint (sha256): 92:e1:30:30:f4:66:49:58:1a:1e:42:e5:c1:d4:86:73:67:a2:f9:1e:2c:84:1f:ec:24:95:74:a4:7e:29:64:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate naujamuzika.gyvai.name

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naujamuzika.gyvai.name

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aikido.gyvai.name
gyvai.name
naujamuzika.gyvai.name
portraitsbykarolina.lt
www.gyvai.name
www.naujamuzika.gyvai.name

Other certificates including the domain name gyvai.name

(limited to 100 certificates)
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
naujamuzika.gyvai.name
gyvai.name
gyvai.name
naujamuzika.gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name
gyvai.name

Certificate

The complete raw certificate details for naujamuzika.gyvai.name in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348304941625952120152244438759474796644302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-03 12:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-01 12:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naujamuzika.gyvai.name'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763863504748509693778068531226408049057139321832725292746948336120299997873999270481025827190582330225031000996076304727510353488653758231652188934423890887445772832187625469852190194577257389674769849635814600604089965672871434033488020301731022973293839722946587980055423412805320706998722682110538123008960102097818313093595818050708131077154328797658487630441396559906134365757196624145394166059103043696691843410035769945044417613881885094070395988395566016836493650115148481334473769100417003416205026456533190850275798244305925740349735004712073665877729883379078506304390597413392027206145326728659602509693965412899740244691629503112956360813473933210564688996665488546112066514593916437036700006815597088740593214453755185507987719448398501071037386884287533277022144665946201264523677160772584455158371406691196637525234185409004389241655301977696586564497458859144174133279450875388721471651266758816814897819375066030703099930651516693951352745502143222516080928259575092368628492862236424774734762558283636638100608010315044942924097220939164816105976394354163790353791914573525500360358713190485194016483490636921415081014096891374129999284749755225975728214490693509361523691005984542757162216152369025014874816457819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcfbf930a7e117ba23d8c18115ec6e40721fd6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aikido.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naujamuzika.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portraitsbykarolina.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gyvai.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naujamuzika.gyvai.name'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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