blumm.aca.ee

Issued by R3

About this certificate

This digital certificate with serial number 03:25:05:a2:72:af:34:a6:fc:59:00:3f:2a:95:19:1d:68:9b was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blumm.aca.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:05:a2:72:af:34:a6:fc:59:00:3f:2a:95:19:1d:68:9b
Serial Number (int): 273934794989501388659618485024607809923227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:8f:1e:98:54:51:c8:3a:db:3d:f1:d6:69:da:6b:51:96:62:bf:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:64:48:97:e0:a6:86:10:1f:19:1e:c5:e2:76:15:9a:61:27:aa:b9
Fingerprint (sha256): a2:e2:3b:49:91:a4:1d:13:89:c3:4c:93:7d:82:26:f2:d4:02:3f:36:33:05:6e:bd:57:4e:32:82:d4:38:60:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blumm.aca.ee

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blumm.aca.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blumm.aca.ee
blumm.digital
blumm.ee
www.blumm.digital
www.blumm.ee

Other certificates including the domain name aca.ee

(limited to 100 certificates)
publictv.aca.ee
aca.ee
aca.ee
publictv.aca.ee
1market.aca.ee
aca.ee
blumm.aca.ee
blumm.aca.ee
blumm.aca.ee
aca.ee
aca.ee
publictv.aca.ee
blumm.aca.ee
blumm.aca.ee
1market.aca.ee
1market.aca.ee
blumm.aca.ee
publictv.aca.ee
blumm.aca.ee
1market.aca.ee
1market.aca.ee
aca.ee
1market.aca.ee
1market.aca.ee
aca.ee
aca.ee
publictv.aca.ee
aca.ee
publictv.aca.ee
1market.aca.ee
blumm.aca.ee
publictv.aca.ee
blumm.aca.ee
publictv.aca.ee
1market.aca.ee
1market.aca.ee
1market.aca.ee
aca.ee
blumm.aca.ee
blumm.aca.ee
blumm.aca.ee
aca.ee
publictv.aca.ee
aca.ee
aca.ee
blumm.aca.ee
aca.ee
1market.aca.ee
publictv.aca.ee
blumm.aca.ee
publictv.aca.ee
1market.aca.ee
1market.aca.ee
publictv.aca.ee
aca.ee
1market.aca.ee
1market.aca.ee
publictv.aca.ee

Certificate

The complete raw certificate details for blumm.aca.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpP38TpZOG36SKwU6Fg/
XqtME5wxakbHr9ceCj1J2rG8UlIQCtHYlP/BPd+VU+vcJhYP6zxRHnOlyOkmr2UI
WpkieYu9cu6ZaTCRps7QUU3/Pve0/02aF9QkyB+6+nkDdV50X5ejiDuFwC1erFps
QuLkBAVF7GEzY+QkG6OJWiamZS6tuYLj9GsWi3PatDjBu03j2YXGxlZ8LhQCFzkk
JtAS66VrlFzPTDcClvpt6e9/8HF0MmGlCnkQEVRH6To2od4Ow10ribiLVfrqnNqf
GWG86bPSEWxQNhfYlot8vxsj73W70MyVpwFprWYdNdMpvEhioXIpQ0VQ6kkpWzei
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273934794989501388659618485024607809923227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 05:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 05:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blumm.aca.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23048337502780983476093601606249564432392100115768758609818338194404741251706658120518618500109394823259924967382004227804145313887917262718623632258194203506045965214601088713588001413703160569488434339253539107340560434052526864766594873085792475721406500506344911340988506511574852897731860005104668994433038893018430388615346725274822518533123345523966017945191089485622925255314805079293618864913362808271129442373440553343013212635421550060483061472766144948098991229925703183545976890084202335415116916003449015101088905628523030200051405740341383529716791171802308688119933192035591842129135573457097071239887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							918f1e985451c83adb3df1d669da6b519662bfbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumm.aca.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumm.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumm.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumm.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumm.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018634c46df50000040300483046022100fecdd7879283042fe06db9220db5b395e5517d6e4e2650f8bf98c285b8e5962002210091737059748c66692e32d762e26c2abcc85dc7a53fecf32f226c6f29863e559d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018634c46e6e000004030047304502205269e820bb43397b7a23e83ed2efd25e5cbe0f2c4c0e2f936dc29cb5b4680259022100b5f2fa0bbfef4c1cd5d4004eaa45435db69787ecaffbbab9230d6cf834065efd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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