top.hefa.lt

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:7a:d4:3a:35:86:90:c3:9e:de:a1:cf:cf:70:8c:5b:65 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=top.hefa.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:7a:d4:3a:35:86:90:c3:9e:de:a1:cf:cf:70:8c:5b:65
Serial Number (int): 328876034208666820451050454987937220942693
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:a0:54:9c:5a:5d:0a:0f:cb:72:26:f3:08:27:8a:56:8a:3d:23:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:ca:9d:27:d5:eb:e0:84:34:ea:1d:7b:39:2d:61:13:c9:a4:04:fb
Fingerprint (sha256): a5:65:c6:fb:01:cd:42:4d:5a:6b:17:42:52:2a:70:f5:e9:a4:25:c2:24:f2:25:21:07:18:86:4e:ee:78:d6:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate top.hefa.lt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for top.hefa.lt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

top.hefa.lt

Other certificates including the domain name hefa.lt

(limited to 100 certificates)
vlv.hefa.lt
inventory.heartandsolecycleandfitness.com
chq.hefa.lt
sha.hefa.lt
jex.hefa.lt
hefa.lt
joy.hefa.lt
fly.hefa.lt
claudia.hefa.lt
dev.elog.ph
www.hefa.lt
dld.hefa.lt
bws.hefa.lt
claudia.hefa.lt
www.hefa.lt
outlet.hefa.lt
echofive.app
son.hefa.lt
hefa.lt
inventory.heartandsolecycleandfitness.com
sfg-manching.de
ats.hefa.lt
smt.hefa.lt
solvarea.speakylink.com
hefa.lt
luc.hefa.lt
top.hefa.lt
fly.hefa.lt
www.dead-fund.com
fcp.hefa.lt
autostadt.buildonvolkswagen.com
fry.hefa.lt
api-test.wecovr.com
key.hefa.lt
app.taskfolio.pt
tir.hefa.lt
podiumai.org
hefa.lt
fsx.hefa.lt
its.hefa.lt
gtr.hefa.lt
www.torly.co.il
top.hefa.lt
ankitpareek.com
fastify.pandicorn.app
ldf.hefa.lt
trinidadrugs.com
sni.cloudflaressl.com
trinidadrugs.com
ensio.hefa.lt
fastify.pandicorn.app
reservation.pneusystem.sk
wdp.hefa.lt
www.torly.co.il
wlk.hefa.lt
stk.hefa.lt
ghs.hefa.lt
val.hefa.lt
cow.hefa.lt
hefa.lt
utb.hefa.lt
hefa.lt
grw.hefa.lt
sfg-manching.de
gaz.hefa.lt
fds.hefa.lt

Certificate

The complete raw certificate details for top.hefa.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISA8Z61Do1hpDDnt6hz89wjFtlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMTEwMzQ4NDhaFw0yMzA2MDkwMzQ4NDdaMBYxFDASBgNVBAMT
C3RvcC5oZWZhLmx0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPW1
ahTH173IlKVsT7w9z8UC1J/g376SGpOwLTjeq8yC+iV8an5V03yOt9fovbbqLqbQ
Bjt5OWq+alLpxYoZf6+bi/UCxUcbSSlzmoUdHyT2aEueRIzsB2ahFoV6WsOVLgOR
bvqcBzyA2WGDhCAi8Iv157rluf+NR/xeleU+Yow4iGdExrdyWPyNG3ugTrHWfwUQ
Ys4b68Q5x+r2vjTtJOUJ/Z72pxG9AFmjvBff/TlGfBTYAruzUlaArPNmOXJFLOrp
kQkCg0nDmMFQx2KRmnTXoX3Vg3QELLnR80lvpW0vcV3urolCPz31RScFtNdVTEAQ
4gd3LGGPCoRMCGcBdwIDAQABo4ICRjCCAkIwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBSUoFScWl0KD8tyJvMIJ4pWij0jBTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAW
BgNVHREEDzANggt0b3AuaGVmYS5sdDBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHoyjFTYty22IOo44FIe6YQW
cDIThU070ivBOlejUutSAAABhs7//AIAAAQDAEcwRQIhAKCSqJYDHzHJv8RLFWlL
MvSJgLQX71Zyr7yMsH2vSInsAiAhjqUx12dLNrTcWSmMObOMZ7scZ23Cec3LbS4M
I8k0DAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhs7//A4A
AAQDAEcwRQIgEPIrqqGR2XLT6YW6Uk8feInClKD2Z2tYnvcSg1ds5OsCIQDOzDaY
BiEDIWlTnBGWm0CNLYDuAeSMlVA1d4lHDaf2ZzANBgkqhkiG9w0BAQsFAAOCAQEA
tsG+9VhWSIFwywd2sNiMtK9juLfDDBD62jwL1xDHCS1G6dPs/C4l6FnpNebV8Zb3
RmYsc6AI7ub56CDdIjCUyjwFvl38LDXcknzW2ERHgPzbRv/Nq4levcGWzSChq/gY
xzxN+huWWZT78I3ESX124wuB5lbaiujWBhX94emB6QXtxnBj+Scbvee8WvjxRL0r
lq6JjTjT3Kc2LeOnpLgJKcCdaLoRJKsU5IU69OzGNan7ckMlxlEb0by+54UPbtzO
OvEt1GfA2RrkpaxaJHYZxzb0hMG/xlxm6t7Vq+VJymrwhaDfVFhL1zOJEBvfXNQu
GxgKEqQIviZnEg1+fEWESQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPW1ahTH173IlKVsT7w9
z8UC1J/g376SGpOwLTjeq8yC+iV8an5V03yOt9fovbbqLqbQBjt5OWq+alLpxYoZ
f6+bi/UCxUcbSSlzmoUdHyT2aEueRIzsB2ahFoV6WsOVLgORbvqcBzyA2WGDhCAi
8Iv157rluf+NR/xeleU+Yow4iGdExrdyWPyNG3ugTrHWfwUQYs4b68Q5x+r2vjTt
JOUJ/Z72pxG9AFmjvBff/TlGfBTYAruzUlaArPNmOXJFLOrpkQkCg0nDmMFQx2KR
mnTXoX3Vg3QELLnR80lvpW0vcV3urolCPz31RScFtNdVTEAQ4gd3LGGPCoRMCGcB
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328876034208666820451050454987937220942693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-11 03:48:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 03:48:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'top.hefa.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22339105125125664005542244980211658099012233357292854725915103747587029489482452875522387247566254970158529718646286301590479752737284483127926306646501954017159126620639867151649631806356679420109302375315825632962938967222513303399806814382438596663027756185808309884649943451327477000947937484588933393624473695686781348935307797987434494940201412902719023403015788633948839435030438003162562700064654327879504769218558688193013576998261033432286249926992252533248190079295305298269826837020760905057504258970172354488480790938546245155119275722353622054077250465890411288431329863593644476273203553170212618961271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94a0549c5a5d0a0fcb7226f308278a568a3d2305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top.hefa.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cefffc020000040300473045022100a092a896031f31c9bfc44b15694b32f48980b417ef5672afbc8cb07daf4889ec0220218ea531d7674b36b4dc59298c39b38c67bb1c676dc279cdcb6d2e0c23c9340c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186cefffc0e0000040300473045022010f22baaa191d972d3e985ba524f1f7889c294a0f6676b589ef71283576ce4eb022100cecc36980621032169539c11969b408d2d80ee01e48c9550357789470da7f667
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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