corona2014.baku-corona.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:89:1f:50:a7:6c:11:81:e2:80:84:95:04:3e:75:2a:59 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corona2014.baku-corona.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:89:1f:50:a7:6c:11:81:e2:80:84:95:04:3e:75:2a:59
Serial Number (int): 289762561082201097439755015088521382013529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:3b:41:df:73:b8:ab:82:2d:ea:6d:87:4d:86:0b:ef:4a:a7:18:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:66:c5:1d:3b:94:ef:0a:e6:44:ce:a5:44:cd:f8:e5:90:95:5c:23
Fingerprint (sha256): 97:1d:a6:79:db:26:85:95:07:40:13:8c:7f:78:cd:fb:42:9a:fd:0c:62:95:0f:4e:84:60:f9:36:d7:0c:d0:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate corona2014.baku-corona.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corona2014.baku-corona.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corona2014.baku-corona.com

Other certificates including the domain name baku-corona.com

(limited to 100 certificates)
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2016.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
blog.baku-corona.com
corona2014.baku-corona.com
baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
corona2014.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
corona2015.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
corona2015.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
baku-corona.com
corona2015.baku-corona.com
corona2016.baku-corona.com
corona2014.baku-corona.com
www.baku-corona.com
baku-corona.com
www.baku-corona.com
www.baku-corona.com
www.baku-corona.com
blog.baku-corona.com
www.baku-corona.com
www.baku-corona.com
corona2016.baku-corona.com

Certificate

The complete raw certificate details for corona2014.baku-corona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289762561082201097439755015088521382013529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 19:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 19:28:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corona2014.baku-corona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667870427847593264242029876493204958373535920673282745829086898856148673129105196182589861099644620100276361330277730107337666961095989806368926217516277569120320354344600419564997026376974481883805156988638143415765221402566419625173697326326023247928848659017548991955927847572646550660096995867821954241373001120643297892571815785993741259191198000818225111060787252133177567766006561968342203228595247577398674763966711488804618310406189632284555952841062720153779217671654412848852702308684665983658464781774036379261280382707569687631615680816604701378622034973276124571701369422029101765255524153908211256185865079596304578162915538619308980819156943982364121069409755061540663759415863983633876687794617445979006078802642150556356558073006290068469776246252881292969775957904777389706363348228311654481743567557248617721339493196754868303202249541365915523888630948261900596421732343740479334807663617873758392119655065765806010965769877296461447545169699052654628994661972612337660450911569981070598905692442102457236926577062067175623367012401825330641657624420488762330135804844936736034308278655326499016874869157241805739679021287596048861289566952781151287167489002640271659480909421928871610901376687833789690657697687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a93b41df73b8ab822dea6d874d860bef4aa71887
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corona2014.baku-corona.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017103ee76360000040300483046022100e5749199259aa454eaac7d9c5ad6d87284ee63c441ce829d13d9232c3c2c9884022100dce1f366a7b10afed85d0e1d2ab77fc5469b1b626a42eb90647cf47ce5007466007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017103ee76410000040300463044022033f53e9404a9e14af778d55b143ea622c88ae17083d8015f635701e0f51723ea02202f6dd5fb4d3309b397cb1d0b4ed4dca5d54f80511e161187f407059638a816e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0083f9a7463c30081b8086a759ba2dc3224235056f0c798712bd0f75db669af31b54d3906e9013330733101efade0bf9eeee082a7cf29e4b7a426c75621e24ff09bf6ff58d7f15a7c5c616cfac6fa1abe87c44d39d623276d61d4fb5dcb2340ec8e69fca2d70250be476673c30ed6aad760e67fd453b9d26459645cf8c7985817d6dfa1691d648c1ced79b62440acee11ab53e149f732ddefffbec352fccedb7c412d8b4b589c3973a1375e7e2deffa24c9deb555a771ee2d14682f73c014ae3d2f6c89041e8dd39c23a45fd8085d7174e6e54eb3abb93b4dedf995b88742e5a82860ab76bac785669536f2183b8863c5aadc8962f4899b374457127acefe80062