test-po-kasse.companyasb.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:5b:d3:cc:56:27:10:4d:ec:28:67:e6:98:d9:7a:9d:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test-po-kasse.companyasb.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:5b:d3:cc:56:27:10:4d:ec:28:67:e6:98:d9:7a:9d:fe
Serial Number (int): 327133414077712712328709072260757743902206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:f1:e5:99:ee:65:d3:16:6d:e8:ec:e4:e1:89:2c:f3:54:73:51:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:c4:4f:d7:34:a2:78:96:de:56:41:7b:21:7a:a8:f2:06:1e:0b:6b
Fingerprint (sha256): cc:78:4f:75:db:c3:54:fb:31:ea:4f:b9:1f:ec:a3:2a:84:63:7c:36:21:5f:af:1a:89:a3:df:7a:2a:12:96:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate test-po-kasse.companyasb.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-po-kasse.companyasb.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-po-kasse.companyasb.ru

Other certificates including the domain name companyasb.ru

(limited to 100 certificates)
test-market.companyasb.ru
test-ofd.companyasb.ru
54fz.companyasb.ru
test-ofd.companyasb.ru
companyasb.ru
litebox.companyasb.ru
54fz.companyasb.ru
viki-mini.companyasb.ru
test-market.companyasb.ru
mercury.companyasb.ru
viki-mini.companyasb.ru
viki-mini.companyasb.ru
litebox.companyasb.ru
54fz.companyasb.ru
litebox.companyasb.ru
test-ofd.companyasb.ru
test-ofd.companyasb.ru
litebox.companyasb.ru
test-ofd.companyasb.ru
54fz.companyasb.ru
test-ofd.companyasb.ru
test-market.companyasb.ru
test-ofd.companyasb.ru
test-market.companyasb.ru
54fz.companyasb.ru
companyasb.ru
mercury.companyasb.ru
mercury.companyasb.ru
test-market.companyasb.ru
test-market.companyasb.ru
litebox.companyasb.ru
mercury.companyasb.ru
viki-mini.companyasb.ru
54fz.companyasb.ru
companyasb.ru
litebox.companyasb.ru
litebox.companyasb.ru
companyasb.ru
test-market.companyasb.ru
test-ofd.companyasb.ru
litebox.companyasb.ru
mercury.companyasb.ru
test-ofd.companyasb.ru
litebox.companyasb.ru
companyasb.ru
viki-mini.companyasb.ru
mercury.companyasb.ru
companyasb.ru
litebox.companyasb.ru
mts-kkt.companyasb.ru
test-market.companyasb.ru
54fz.companyasb.ru
companyasb.ru
test-po-kasse.companyasb.ru
test-market.companyasb.ru
viki-mini.companyasb.ru
test-ofd.companyasb.ru
54fz.companyasb.ru
mercury.companyasb.ru
test-ofd.companyasb.ru
54fz.companyasb.ru
test-market.companyasb.ru
litebox.companyasb.ru
54fz.companyasb.ru
litebox.companyasb.ru
litebox.companyasb.ru
54fz.companyasb.ru
viki-mini.companyasb.ru
test-po-kasse.companyasb.ru
test-market.companyasb.ru
viki-mini.companyasb.ru
litebox.companyasb.ru
companyasb.ru
test-market.companyasb.ru
companyasb.ru
54fz.companyasb.ru
test-ofd.companyasb.ru
54fz.companyasb.ru
mts-kkt.companyasb.ru
test-market.companyasb.ru
litebox.companyasb.ru
viki-mini.companyasb.ru
companyasb.ru
test-po-kasse.companyasb.ru
viki-mini.companyasb.ru
mercury.companyasb.ru
companyasb.ru
54fz.companyasb.ru
test-ofd.companyasb.ru
mts-kkt.companyasb.ru
viki-mini.companyasb.ru
ofd.companyasb.ru

Certificate

The complete raw certificate details for test-po-kasse.companyasb.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327133414077712712328709072260757743902206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 01:09:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 01:09:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-po-kasse.companyasb.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724707889283600956448638173543943573843350034420119806169287575596483572663242379989659370694827518190187063871242397297024524463826263110023927248349890105058181384333309952284324201680691760987393072784810605880063374664611977855583683674095043108758022156289160414790311102422220014792725792583789392576667334543267182082044416369968596455950712967693498227684560975098612410170482644476584275825807956532838943503464314610017121319551812687719441135197453027592966659060109218874207749841542378306426431985555791093980709681831830934917681520204877475810085834439913674024517589981879400328625836625022342710715369619980574095061759182947315512929840988647241233696417651157615289957737301439094297538357543855751756034246185184043631113013357828959690499540691485048626986597909802489913015422478855622121688341209708263734382635342196431028527361290223151366638835112686111807414013028692898215023613756184873788673343383023762709960458592010686813796986177110113925809694889761571763269071969302737089158316623217849952097060711980434269245818573029593727399211291389961252540405865795018188623373703010865601958710877880964788460887598327312429723411132069088340056650069535636381347559455448277591987417951604876378296907933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88f1e599ee65d3166de8ece4e1892cf35473512e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-po-kasse.companyasb.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f6e505d800000040300473045022100bbd8663e6474d306b2c4078e705c425e8b4a8d279563d0f8dedbda740f9a23380220030d1e1baaa0342fad79207959a2c547fe553f725db96a3aa8d0060949cc44a4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6e505d6f0000040300463044022008cfd96e105e824f6ab859797586cda7f283f62aed23f1d283e85ef1352aa34a022010dc52f839d540bd1b94b1aee2bbb6e4e17883418f651fa260806177b0efec66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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