online.ut.io.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:84:5c:92:cd:70:2c:fc:6d:d2:2a:22:40:9a:31:5d:1a:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=online.ut.io.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:5c:92:cd:70:2c:fc:6d:d2:2a:22:40:9a:31:5d:1a:93
Serial Number (int): 393489467378339867567345485630773395266195
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:b8:43:8e:8c:52:8f:12:2d:2f:67:05:01:c5:36:4f:a0:58:c4:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:ed:38:25:4c:f6:ac:c2:56:94:aa:1b:9f:06:ef:57:9d:c6:e0:f2
Fingerprint (sha256): c5:8a:1d:53:2b:2d:c6:6b:79:a4:47:39:5f:c3:45:70:32:00:7a:94:1b:47:8e:bf:d8:95:67:8b:85:3e:d2:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate online.ut.io.lv

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.ut.io.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.unitours.ru
online.ut.io.lv

Other certificates including the domain name io.lv

(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv

Certificate

The complete raw certificate details for online.ut.io.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393489467378339867567345485630773395266195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 23:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 23:41:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.ut.io.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808784630519004752132855892366276899545062815962563477450891219762594188693566866089028625079810011958050285191011885408516209427508912159819277841365235513200791947611324007774561210688699510372492760093637243075169962340384384533855622323390081800676697554407444439528479148563723826004760223253931591766825905334290174437891077774953198834294190109052690016578842691770508018736067667486046602565635535380338330331075575863375642432473330016164597304582906466185843518319253969261871606646896509311988292181048451285970253244973143754757576327499705236646230220608551231964330246202038361801877127400205470859169088955579908009668191250416086199292652583505231394554491336011593339676861035221596339871683557124390379470574110928827189006853996393076502927481051664137436734355797834195945939627400201791287113376595011101165415023950021819072799142017683566946884865968371695891612633984500098603754592341259629302427288609257176734176027910429707518714070811947188507080442388996847600219171649603871246151530979365603008233016458990138112017368128475020638140628926338638408575269497249870865454372893346575696443312475861189171584426881418134525421550204504679625144911079965616654592634781863054060300484128358351959726025211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75b8438e8c528f122d2f670501c5364fa058c492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unitours.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ut.io.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001715215999a000004030047304502200953c3d186278e310f23da222dc628f280e6633db594797b02cc8809c7c7c574022100888627701530dc56367acec13309bf30061a37681155789fc8944e57cba4b859007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715215999000000403004830460221008269ae7b6e1288046ff3ad02bc147e095c0bc663885867b1c83478f45502bb76022100a34a72e0bb9a35f78e1b501c82eef3127d00dd8077d2d9f029b4103d3ac5caad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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