www.piter.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d4:c1:8c:66:41:7a:6f:24:13:f7:1c:9e:67:2a:43:b2:22 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.piter.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:c1:8c:66:41:7a:6f:24:13:f7:1c:9e:67:2a:43:b2:22
Serial Number (int): 420846275513020126148304678128108863468066
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:29:08:f6:a2:74:c4:5a:d4:c7:0b:33:97:e5:d8:7f:14:92:59:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:ea:86:5c:71:a1:e6:94:b6:03:40:73:ee:7f:3c:b2:2a:77:23:68
Fingerprint (sha256): b9:29:9d:c3:e3:f6:02:dd:27:85:a4:a4:89:f9:06:f2:e7:b3:d1:f8:bf:a4:ad:3b:71:6b:0f:a2:dd:13:3f:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.piter.lv

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.piter.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piter.lv
www.piter.lv

Other certificates including the domain name piter.lv

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.piter.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420846275513020126148304678128108863468066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 12:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-25 12:06:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.piter.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704549186261985868318005600653313880052075068503938865223512355732971857099994150012665388207562077525861747290195494922414999199830298837019252149109428858218743553455671099725093145777512102806453639634364704014797028623011977534476802443775139642408741084019842413000040205913303730196271999422697522224612052891839277873780796783783951427704283283876492115115643925706842481758049980647670954361506801475160853553854098368487075539685054844428986382375688731353190475108879939528511725506736030063534340848461030747899419151827890008472633610365916176933542284734502424439405049146473048701717691886801184522295463881009988688325752448737809181720089034067500775398224687584538914163397024836325545756854528755760936445377642774097725775490761481427660511790127472381141458352601490980931276371712270485445485306999681275263372948435644742260536085997267750902443411196575816847430387984181667268613718257137702090686781244003226591591577783672353369779069626804982665338616926746728465678938352794481772282751511418396992532974563599763168734868608170455320071287799033603256706978294288883195855973622405085245387888088456527928266277272658601232991223723488299499065680834914065747064051284768334769299668967033619425942770231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b92908f6a274c45ad4c70b3397e5d87f14925929
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piter.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piter.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001711c1a3ff30000040300473045022100c0eb6dde631800cb93d4789a0785c8d5a5eebc76c510ae9091515f7e5b05297102203b7492f876ef14dc7433887d259d3857d4bb80055d1bb7508c9b34b260565bf500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001711c1a40220000040300473045022100cbeb903c562ba31886f73114b75aa39abfba3e2b23161c0dc0f688be6e525f9d02200b0234412a3118f2842c4c4486a179bec8d3c2507c79aaf7dd1e6858a97f57a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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