pma.fr.ith.hu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7d:a2:ee:13:1c:c5:48:3d:2d:84:82:e2:b4:84:e9:97:5c was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pma.fr.ith.hu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:a2:ee:13:1c:c5:48:3d:2d:84:82:e2:b4:84:e9:97:5c
Serial Number (int): 391201010681773009078082395062240029546332
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:17:62:b0:ff:f8:19:c9:a8:8c:cd:00:fa:01:df:90:c8:34:44:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:7e:11:43:9d:02:a5:f1:2b:d9:7d:56:e9:19:c7:8c:a6:d3:ba:29
Fingerprint (sha256): 9f:b8:d9:14:85:72:49:66:15:57:3b:ed:be:66:cd:70:b3:98:4f:68:90:d8:cb:b4:60:1b:5d:68:4e:1a:34:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pma.fr.ith.hu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pma.fr.ith.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k.ith.hu
l.ith.hu
n.ith.hu
netdata.seed.itnetsolution.com
pma.fr.ith.hu
s.ith.hu
seed.ith.hu
seed.itnetsolution.com

Other certificates including the domain name ith.hu

(limited to 100 certificates)
itnetsolutionltd.co.uk
mail.ith.hu
pfa.ith.hu
pma.fr.ith.hu
ith.hu
ith.hu
ldap.ith.hu
ldap.ith.hu
beggerplate.com
ldap.ith.hu
beggerplate.com
pma.fr.ith.hu
ldap.ith.hu
beggerplate.com
itnetsolutionltd.co.uk
ldap.ith.hu
ith.hu
ith.hu
ith.hu
www.ith.hu
dyras.dev.ith.hu
ldap.ith.hu
ith.hu
pma.fr.ith.hu
ith.hu
ith.hu
dyras.dev.ith.hu
ith.hu
ith.hu
pma.fr.ith.hu
ith.hu
pma.fr.ith.hu
beggerplate.com
webmail.ith.hu
www.ith.hu
ldap.ith.hu
pma.fr.ith.hu
ldap.ith.hu
ldap.ith.hu
www.ith.hu
ldap.ith.hu
dyras.dev.ith.hu
ldap.ith.hu
ldap.ith.hu
ldap.ith.hu
ith.hu
directory.teknoir.ai
pma.fr.ith.hu
beggerplate.com
ith.hu
ldap.ith.hu
ith.hu
itnetsolutionltd.co.uk
ith.hu
www.ith.hu
ldap.ith.hu
pma.fr.ith.hu
itnetsolutionltd.co.uk
ldap.ith.hu
ldap.ith.hu
pma.fr.ith.hu
ith.hu
pma.fr.ith.hu
pma.fr.ith.hu
phpmyadmin.ith.hu
ith.hu

Certificate

The complete raw certificate details for pma.fr.ith.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRkRdTsBbVhTQT62QOfn
AqEGEz1sNegm1wlSghes6bJJWYP+oMKqGE6t6WLIkyhISLfeVDBsUB2+a/Y7jGol
2ldSE+S73wLXQ9+ZES1NfHKdfyNuWcI3IowRSQPgo+EAsk2mRyUewRXV7kEC73CC
dBYKbxCUDTcRoXbRH1z98iHD+Eij6Yaf15ufL134Mp09sehoBHa6RmIuDicrdMYT
ZNvxu/TF7qr/S0EKvhR3HiIaNH4Bu9rIicrGUI9xV98yljYLAP16cjNHBOefjPj0
30UKBsxm7cuF++lZvY6sEsNlNoj6/EO54V/x8Uw0Qs0+4FP33ICXJ91C5r2ktzJ3
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391201010681773009078082395062240029546332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 08:43:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 08:43:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pma.fr.ith.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22356541566691909670107539366144926217526161071245929853846652531318705906053193648015021451554806481930204359312137529477625034273372230084328216256043865348731035880571742987992483212498511915029461393077726219230796973701451555364606077919683705932267418260333961519304651812795683055368616007342762060026415539388371627433957872991219279313425258805386119773795290075944966729879638919404533202924522920753615236282523141760186872289960516049297738636500223664419050042411078591442193179525479403942171455854845242365504043021550863941126475811453246774648508596444004365563693553275524687521225236565019837233111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							331762b0fff819c9a88ccd00fa01df90c8344405
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdata.seed.itnetsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.fr.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.ith.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.itnetsolution.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2cfda061000004030046304402200526ef5e75b48c46ae1bf86c6cfad741ee07b39b9714d079a81310c928713b1e022030367c45f0137a3df371d807c5d3cb59bd6eb72cc27a152ac4db76ca37723d8c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f2cfda19d0000040300483046022100fbca31ef1b8a4b33fab249ea6ad1356a288ae57c73e4c9cd40ee73649f1ae379022100a3c92412b1b42dfb28e04f6f3d5a7613d5d15de390a171a159cc3bae5d7b28f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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