salon-mstudio.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:1c:51:bb:26:69:0c:33:61:26:4b:f3:30:92:dc:58:06 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=salon-mstudio.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:1c:51:bb:26:69:0c:33:61:26:4b:f3:30:92:dc:58:06
Serial Number (int): 287576242803974297326209035930279889098758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:cf:8f:cd:9d:29:ea:0a:70:53:bd:db:a7:de:b5:9f:d4:56:6d:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:0c:f7:7c:b2:b5:17:ec:b5:f0:01:d5:d7:f7:39:eb:95:5a:b4:a0
Fingerprint (sha256): b4:09:65:19:2d:b9:5f:18:76:a5:8a:36:0f:0b:71:12:2b:2d:e5:d8:d7:47:9d:34:c8:9d:67:97:b8:68:c1:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate salon-mstudio.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salon-mstudio.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salon-mstudio.sk
www.salon-mstudio.sk

Other certificates including the domain name salon-mstudio.sk

(limited to 100 certificates)
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
*.salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk
salon-mstudio.sk

Certificate

The complete raw certificate details for salon-mstudio.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmcLOjAmqIcZ3MmmOKetA
8B15qnLGMNxSywQx84LJoO+e4pqaifz1nElVF71dguaWiEmsP6V/7IsZ3y6Ij/u6
wCy0jhnI1GYdjc7814GtKIVXhuFeyBxzYELTKXQKAFZzvPUJ2dfdSBEDVBSHaZfy
Xt4CjTMhsJD36dnaD1gWAAkJhOW9sGm2dNEcOMTnaf4JpEV0HvMLi57bDvkOpBKS
2SXqjVIex+TxQeewK0sdfWuHcAW3uIYp98qS3FsKnCZaCJf7PuCY9vykvHkcldmU
MCd785Nc+8MTjGJyR7F5dq3KxM+gybqnW2mrFCkZObwbnqMNq9yckJb/AR67doxv
xGIr4tTrKgIvRK3fjMQnIwmFJ6PfGP5fqaBoW9Tnho+Jm8YpcbgbQtzxRdqpijtM
iDSYuNvY6+RkDVNREhPQiuBlfqv9BnQ1lg/hCht0ePIxZ8lf5OO1RefShneEWQhr
B2aAyyftAEnJqbXRw+sfKR8V0/O+izga9cKO37LNHMd+aqXREO9PRzTFCt8JkdGP
KsK8qZRVWtbiu480ReEvs1Bphb8SWAwKt3yE3vgYr8erdjsTxOEYvHfkC1i8siWU
wXb3uoebfGgONZM8t9QPU62lQvcveyKSPplfEA6WbH+VAl7ZnbjmhkgRdH8eaa35
vJA/YXMaDlttdQW+iZzkO4kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287576242803974297326209035930279889098758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 00:00:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 00:00:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salon-mstudio.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627290005317985457223916330402857801181139045217914464796228893590443488727383967865812747399022196082267220415580481144226820845407084326254996462442506119230761030424151726206288620636049580608902598361353974768518515730603271525352975547017232364786631925577457903858760735298396228679164529269859256892818146455470683083084527426793570167637156627826867669156530293847476884385859828552493987037312601115284690159728291252099632002705493533680174853583955360954179282241458352863714626000598246104548433637156088370884578652541240486564881890610076041466328693070357233736190492370799169140303195671314603525652084900908401114081390241764238363464696679492256355899967257659114166516991723713347918251142385284646530817668386665850300132829500283851649663786133182808657864894171030343876463602255710997502732912979739028842293301216421476556795034251249584226476799528038835598719114700780482457850238039383978569559359862072463296690923126207266986894197277989944884413976327006801258497705538929194579887933352861442267024552153702982673271659377193268115752271965356523641724418825329112637223124693481456930003610679936656750324887913820510263330933571463223997583352216293626252859920441961701980398276694977265769484925833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdcf8fcd9d29ea0a7053bddba7deb59fd4566d9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salon-mstudio.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salon-mstudio.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001650cc02688000004030046304402204e17ff9af512b7f97254898835217445921ee10e7a0705a70614545a1189109502204d237d29cf68390c8cb040014a73d3f9718b1081f9337c3493ca10a29ef38023007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650cc0288b00000403004630440220688a315054b1d3ae4f495f221952ed2d7e4cdb48e8db2113f6cf80b43e2c61a7022008ae557e2d155399c6e603094d539734171caeea478ac42377486cbfabd48fa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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