freya.sk

Issued by R3

About this certificate

This digital certificate with serial number 03:16:5f:10:06:d2:e7:c7:a7:eb:45:bf:0d:c5:61:33:60:f4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=freya.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:16:5f:10:06:d2:e7:c7:a7:eb:45:bf:0d:c5:61:33:60:f4
Serial Number (int): 268949429742294793857621438737576770101492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:c9:c9:76:51:44:a8:95:7d:03:a4:08:6f:ab:12:9f:f3:48:56:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:df:8f:98:97:fe:87:63:56:69:76:22:d2:db:e5:cb:11:71:fc:62
Fingerprint (sha256): af:0b:6e:f0:1e:af:a8:96:33:5c:04:c7:57:4d:6c:99:88:95:87:94:34:aa:f0:e7:f1:2f:46:16:49:ea:cf:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate freya.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freya.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freya.sk
freya.sk

Other certificates including the domain name freya.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for freya.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268949429742294793857621438737576770101492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 10:28:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 10:28:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freya.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852290932001159056035471956848118522110004696275246096508334725811784918144640609390198614405063200146512092386035861452289685244723412494960485975406614171108210434504222413801573746362847976635130329967518274796899019706177574020278536465836850499571050186040302254292319087155107446893951535981717059235461877646024725838186350205653379857095132936060013246040697608413577720774781694281765344672535733385815380378300957838484686105279460995519219872819593770106589175472355023779381274588489189289778688165892858204310443431008554431487603446646251017920284767912569102350883614081201840066005833588298069815548536292501578410459364382253106012456809931926581801219449286099241897652412026724060940811533188705120963100543439127580079353095008907026028137201537855331933775872931576369339784596495034111185614352892033613171222533532856698803911636006683928824681845654013685753258181615703842558616082618385996310083590438226464740985127775228850332731837961227205364994191281888227914417898251679436501629672029654125860984494855585363404764470320630348156134838951385868132583230058595513541226585790936798880071347430231872062954215987974117872313850571244797671446136659235542669097875941120981451008637318940084981458292057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cc9c9765144a8957d03a4086fab129ff3485645
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freya.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freya.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7faafc170000040300473045022100baafb36027f8d723917756b31a958720d68323562877b870f0dde7980fad62dd02203d4d79ef13c1ac756780874e1c2c56870f30a24c555b4f1547eb702f177377800076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7fab039e000004030047304502207756bd557ed8af72cb889d8e8c088edae4d069fe72ee7175d4856335d570c81502210083ccc265dc05a85dfde6b5e331cebe97140561bdcb8a679485dbf8f629275918
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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