vitriina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:7a:81:ed:2e:f8:ae:21:1c:65:97:a4:f4:94:6e:ed:39 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vitriina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:7a:81:ed:2e:f8:ae:21:1c:65:97:a4:f4:94:6e:ed:39
Serial Number (int): 323771371374245523815919876360165804404025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:b4:9e:41:28:f2:7b:f8:66:8b:f6:b2:29:69:a5:c9:04:d1:e6:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:62:fd:36:3d:3b:53:8c:16:9e:50:ab:76:ab:4d:13:9b:90:66:bf
Fingerprint (sha256): 9d:dc:0f:3d:d7:78:e2:b5:59:50:e5:45:eb:e4:74:6d:f3:46:d7:58:be:24:5a:20:b0:96:1a:34:b3:81:d9:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vitriina.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vitriina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vitriina.com
www.vitriina.com

Other certificates including the domain name vitriina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for vitriina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323771371374245523815919876360165804404025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 19:05:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 19:05:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vitriina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750636670040325251752794165694400075861463454641255578947791884740085469884120847640150605995638860718397555771177091254159758641327173728141144991715137122567673740569373555588100478579941662435303072887956295425228078317048641781856387876570301739838027480240892585669125321661695533332059406423006554443195596075437033184769504887718917257981109710070517629328895115987765371575480404257726691252772551676687993139878176499738620307351360165612314345738003110162936698341023823796649911841326639878509751619543453965756751963239530808355304558004828168854564614098742547093252224538907519258001395878355563373346828062961985636522168350315282415404749474393758282942179147088352273103237121883390873047572189075929412488708481909927053099505105640124129775269385963220785450170060646897842959432794610347378150696407699794628419263807926639210447500273039526149505093024337870965967380532457044159530853485286599645446606610764053344338742033653492765517768615377307935386969521075170613587855468727519840131483614609720196778417831887356162394198776731647378573082611472443150764594982290996324950701550950091231481993232620449770306149905144896504863481852867015285912836160363223438575076795282960506512827049565589337105601821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26b49e4128f27bf8668bf6b22969a5c904d1e6a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitriina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitriina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165f370346f00000403004730450221008f6de13d9febf31e79dd2257cb6791bf888375a46544731c0a8dbcb1832e4bc5022006521c3695b35d2aca37ff61a37254cfaa86520afb23a825832f815a78721805007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165f37036280000040300473045022100b28f9f208efddb52126003c0f1fe1b7efea0bbdf89ab7be9c5429d1ca8605bba0220068edd401e77d7ae08b614edd7eda038af5032bd90f5bfbd023b57d66a4a93ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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