server-15.io.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:1f:c7:7a:18:09:8a:47:87:77:cf:8d:be:38:0d:d4:80 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=server-15.io.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:1f:c7:7a:18:09:8a:47:87:77:cf:8d:be:38:0d:d4:80
Serial Number (int): 309358913342435644191450212499924269782144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:99:bd:54:0b:31:2f:c0:78:08:d8:8d:95:fc:04:a1:60:57:85:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:31:99:40:0c:23:36:31:4b:71:af:18:48:eb:96:e2:04:ff:51:7f
Fingerprint (sha256): b1:b9:e9:a1:ac:d4:f8:05:9a:a9:e6:d1:ec:15:5c:fa:01:6e:cb:b9:57:2e:43:8d:ac:d7:36:90:d1:dd:01:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate server-15.io.lv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for server-15.io.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

server-15.io.lv

Other certificates including the domain name io.lv

(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv

Certificate

The complete raw certificate details for server-15.io.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309358913342435644191450212499924269782144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 01:01:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 01:01:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'server-15.io.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706040769109607609349513797512461412399433850229445511744945404613750437964329491764224684152698070592948328053053808615684754448714442957292297800164269960383622315418979461276415101934757973524942805570566336040287789563444031825252258596796670762935592977328276008263555542681701576012242408767424948842734827729311193183386251390390170735120550115375665795375106586466175479693799830292199708449703643871005598274913440367610840483239299759743591897123123365632014058944931298967856593535645414665626045047452318113763850287312070493950948401802523153368977450522897523180190348227799818690538674884845932142660904678797922616755442023322103781380679991858682042495354845645608810341413437870106152229513861310485596821489396885346880529919099710051085168475498877817328034964352333328457477465521628844371563344796286601941208808740761724523336162500118671428315407939328939434397188056860864052329201397282020263619118663835089844987240221016918428716038455684375847166694660242686294150167983137417951016261344694457829606706582631827531860258870546665547197055831841719069427860617963595507353217480675821021976437447069654181450576435199741271317144908147013977283218021011781230027127385595089768919255806604818204285525933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf99bd540b312fc07808d88d95fc04a16057857b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server-15.io.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001714d385e540000040300483046022100f37084973ff5d91c1eb239557f8344632952a0e74ff39c85aa773235321e62a6022100c06327f57bc8ab00240de98a9fa9b7b014fa77001619b8cfa47811469913f17300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714d385e56000004030047304502210083fc7549828e88220685e0ee43a1dd06ad420b5df686389983789abd9b563ec6022005d38b098edc3bb80ff24e026a7d79753e8c75006ad47c41684d5fc6ca680d6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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