its.hefa.lt

Issued by R3

About this certificate

This digital certificate with serial number 04:1b:95:a8:ee:4e:48:70:31:27:80:6e:fc:6e:d5:49:66:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=its.hefa.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:95:a8:ee:4e:48:70:31:27:80:6e:fc:6e:d5:49:66:fb
Serial Number (int): 357835699744566212313844720992635991975675
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d0:6b:df:eb:b5:5e:ea:33:9e:41:71:f9:15:fc:95:ce:41:1e:00:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:55:dd:f6:cc:2a:6c:08:09:a4:82:6f:d8:7f:4e:e8:3c:9f:4e:b3
Fingerprint (sha256): 96:13:4a:17:3e:d7:de:88:67:8d:a7:9a:85:c1:16:c6:46:3b:e1:8b:cf:4b:28:2e:ab:ee:92:2b:bf:ab:f5:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate its.hefa.lt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for its.hefa.lt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its.hefa.lt

Other certificates including the domain name hefa.lt

(limited to 100 certificates)
vlv.hefa.lt
inventory.heartandsolecycleandfitness.com
chq.hefa.lt
sha.hefa.lt
jex.hefa.lt
hefa.lt
joy.hefa.lt
fly.hefa.lt
claudia.hefa.lt
dev.elog.ph
www.hefa.lt
dld.hefa.lt
bws.hefa.lt
claudia.hefa.lt
www.hefa.lt
outlet.hefa.lt
echofive.app
son.hefa.lt
hefa.lt
inventory.heartandsolecycleandfitness.com
sfg-manching.de
ats.hefa.lt
smt.hefa.lt
solvarea.speakylink.com
hefa.lt
luc.hefa.lt
top.hefa.lt
fly.hefa.lt
www.dead-fund.com
fcp.hefa.lt
autostadt.buildonvolkswagen.com
fry.hefa.lt
api-test.wecovr.com
key.hefa.lt
app.taskfolio.pt
tir.hefa.lt
podiumai.org
hefa.lt
fsx.hefa.lt
its.hefa.lt
gtr.hefa.lt
www.torly.co.il
top.hefa.lt
ankitpareek.com
fastify.pandicorn.app
ldf.hefa.lt
trinidadrugs.com
sni.cloudflaressl.com
trinidadrugs.com
ensio.hefa.lt
fastify.pandicorn.app
reservation.pneusystem.sk
wdp.hefa.lt
www.torly.co.il
wlk.hefa.lt
stk.hefa.lt
ghs.hefa.lt
val.hefa.lt
cow.hefa.lt
hefa.lt
utb.hefa.lt
hefa.lt
grw.hefa.lt
sfg-manching.de
gaz.hefa.lt
fds.hefa.lt

Certificate

The complete raw certificate details for its.hefa.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7LwWU6sFXQ4X4KDKW6F
yblS8/IrKzMuQEwSGBfsRkk/h78XjLAKei3B1WEWp06L4vuZ+/gKbR8vxWRQ1uso
GBJrABxNhp3v7RaJKmpdemhetRHT4BtqyK62iO682XyzpPnGiqfkXHLs6w/UOrOI
wnvXv97TjkL70DzX5vpT43JN3cGkUbgYW+sIe+tGXbLyaNhHWfTHcXQZC86mEzi6
8ATYeVAY+5A6e72pTxdYQrN2SmuSDaL+EkE+sjp69QSt1knWR4qeeI2O5SUXruIc
KU8IeamoejYU5OiUOw3J5d60YZozUyaP1r+0vKPE5WxeajphncaWhXiERpF0946U
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357835699744566212313844720992635991975675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 06:43:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 06:43:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'its.hefa.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22179941410945066572148140999656373832872427190901391950837965478445276290578602094920775993855026492472200213084255520868300243050458097110675192749408353534622536466513457160315537738774195462193307712534706186233544852139089617868400661547077327412882977937829814684534228623900698850325318347682694256829178624930836421882254596925726726182730395545753139580725692808403989634102022716354564642136790809853050552164092062282326143637261059339009508425699503137927142503434977923917116849842952258612105553036410901582375178518135249839369147189912343319653151987487757787697795077973542451890002661554193202844799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d06bdfebb55eea339e4171f915fc95ce411e00cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its.hefa.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187a2c496850000040300483046022100dcbc5863ab8c21ccc464b7584231bc05debdad1e96e0c28517eea740853bea35022100d3ac986aaff5c681f2045529230d9df6c85a3ef61c07cf8b57ff7072701111ea007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187a2c4967c0000040300473045022036c50b4dce98bbfa6cffcd57acaffd690c13abf93d26d962607caf30e204221802210087a8a2cd52dd17974352fbc7b5d06477ef2ad6bf9e49a7f1c7506adb6196de4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e63227b276706a98d57a4a06e6b58fd3810ad2cae34d7449c471eda3e8cc9d2509ef6ecb143cd0eacdb27df2220bf97c8fef1c24b36d8a712c6d18457855ea0a70548b7ac52e032f1f4d3604458f66ce86c22e3b250285ec9545f474847b6c59ab717b7da50e283f2a5040b62d9073b3abfbaebec1927164df48f066a30d3de6740455c7626a17bc22365d267a1adb187634eb925cdc4e6fcbe4b6d4b72f0ed87cf62e882d6cfa1514ebe59f30ccf07b3d097a750184b4a228fb500293871b6ecedc2f9468fba134d625bc676a633c5bb04ba7a682044ee74ed1db55e861661ed7cbb037b14995dca8d5c44ed19023c978b01fd3f44a82e857aa70b7ccf9830