autolevi.com
Issued by R3
About this certificate
This digital certificate with serial number 04:91:38:16:af:05:69:d1:56:fc:5c:76:9a:77:fe:0d:a6:32 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=autolevi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:91:38:16:af:05:69:d1:56:fc:5c:76:9a:77:fe:0d:a6:32Serial Number (int): 397864641478722477297695303238385482442290
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d2:61:e0:e3:94:17:c0:bd:a2:48:e8:54:fd:ef:4e:5c:52:0d:be:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 26:fa:32:e9:e2:ac:df:cb:45:d2:64:0b:33:1e:47:62:2a:60:25:85
Fingerprint (sha256): ce:df:a0:bc:5a:2a:89:b9:57:3e:3a:5f:1e:c7:3f:cb:74:f8:11:8b:26:11:46:ec:46:7a:2d:d8:e7:68:34:4a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate autolevi.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for autolevi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autolevi.com
autolevi.ee
autolevi.fi
autolevi.lv
forus.autolevi.ee
www.autolevi.com
www.autolevi.ee
www.autolevi.fi
www.autolevi.lv
autolevi.ee
autolevi.fi
autolevi.lv
forus.autolevi.ee
www.autolevi.com
www.autolevi.ee
www.autolevi.fi
www.autolevi.lv
Other certificates including the domain name autolevi.com
(limited to 100 certificates)
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.fi
www.autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.ee
autolevi.com
autolevi.com
autolevi.fi
lv.autolevi.com
autolevi.ee
autolevi.fi
autolevi.fi
lv.autolevi.com
autolevi.com
autolevi.fi
autolevi.fi
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.fi
fi.autolevi.com
autolevi.com
www.autolevi.ee
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.fi
www.autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.ee
autolevi.com
autolevi.com
autolevi.fi
lv.autolevi.com
autolevi.ee
autolevi.fi
autolevi.fi
lv.autolevi.com
autolevi.com
autolevi.fi
autolevi.fi
autolevi.com
autolevi.fi
autolevi.ee
autolevi.com
autolevi.fi
fi.autolevi.com
autolevi.com
www.autolevi.ee
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.com
autolevi.fi
autolevi.com
autolevi.com
autolevi.com
Certificate
The complete raw certificate details for autolevi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISBJE4Fq8FadFW/Fx2mnf+DaYyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjYwNzUyNDJaFw0yMzEyMjUwNzUyNDFaMBcxFTATBgNVBAMT DGF1dG9sZXZpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMM9 uwdPZCnJpdbFq0BaSMrMDi44onCkoXtkfi9sesvwZEvIZqQxfYa0Q+/Yx1qqOHrp IBPTCKZ42/0dnLCQM8Op0IISHtkWgAWdXearhrDESZgXvKxOmYEgwWI7UWWhf/x9 veHaZBFUAE558C2cbw7sWl/R+zCFQsGxUWK6WdNHH+f/a3a9ht1EtimWMOWSHaUg wg8OA/AhgZZ2MpFUJVvWawDYFWl4aZUTbdiT5UT4z569cO5DYpOpZHWMHSmCJBWL Z1DE/zac7idAVwdnjibRwdzVOoUFZwmXjoEa29j4Ac3SXg8Cl80qoOYLHgo1haNN kcJh6uV+pR/tXaOHRFECAwEAAaOCApAwggKMMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU0mHg45QXwL2iSOhU/e9OXFINvh4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w gZgGA1UdEQSBkDCBjYIMYXV0b2xldmkuY29tggthdXRvbGV2aS5lZYILYXV0b2xl dmkuZmmCC2F1dG9sZXZpLmx2ghFmb3J1cy5hdXRvbGV2aS5lZYIQd3d3LmF1dG9s ZXZpLmNvbYIPd3d3LmF1dG9sZXZpLmVlgg93d3cuYXV0b2xldmkuZmmCD3d3dy5h dXRvbGV2aS5sdjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABitCw z3IAAAQDAEcwRQIhAOG9JXwJY9sniUdulZ88kuV82SfAZLx1dMjKl7MernGPAiBz 4yyESIuTmu9jHZJ6rb+Wi0HJweO82iNcDgbybIq/egB2AHoyjFTYty22IOo44FIe 6YQWcDIThU070ivBOlejUutSAAABitCwz40AAAQDAEcwRQIhANKdu1QKH2OL8rUu XC5+KlBpdsAfpV+rb/oEJRKI/ODRAiAWQV41KuKn+QA29ZNGtn5iA92aHVboAlHt OcnVPA+s7jANBgkqhkiG9w0BAQsFAAOCAQEAN1HqWcmDK8eC8swjR1F8vyg3sFkd 7ZZLIY1H14K7DKSXUQGnvRd8BENhZg/T7pO4AUYeutz6n+fLvpildtIaRBMRUvfq orv+c/tYrlP3GYLujDNJ7eW2odx3DQQRZDl1KGkL2gT3FupEYKKR1wCWZlSvWo8j C5uF7t6CQicLr/SOwz3cVbiMPkMsrzAC1/TYaDSITo2jGB8NmrL2j7GDELYsA1lj 0e3Sb58ZM2s97o5eZWZ1ZyhivKF34dkG70A7Sv+gbdKLbE+F7PZkUldYS0zbuXpL +HKrtjhYGO4QI7l3J4fOcN5HmC14YEmt5UssdogO6BgKqnZTcnr/YC0bkg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz27B09kKcml1sWrQFpI yswOLjiicKShe2R+L2x6y/BkS8hmpDF9hrRD79jHWqo4eukgE9MIpnjb/R2csJAz w6nQghIe2RaABZ1d5quGsMRJmBe8rE6ZgSDBYjtRZaF//H294dpkEVQATnnwLZxv DuxaX9H7MIVCwbFRYrpZ00cf5/9rdr2G3US2KZYw5ZIdpSDCDw4D8CGBlnYykVQl W9ZrANgVaXhplRNt2JPlRPjPnr1w7kNik6lkdYwdKYIkFYtnUMT/NpzuJ0BXB2eO JtHB3NU6hQVnCZeOgRrb2PgBzdJeDwKXzSqg5gseCjWFo02RwmHq5X6lH+1do4dE UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 397864641478722477297695303238385482442290 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 07:52:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 07:52:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autolevi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24646909952056574663345071190724164013730212192733732029032645383214695810704616519631259749692828286754091177278932601479036501666774297542071054223004684043848577167250575059290348043660657856197658426673220799828580849065918173947407745039172025898047533718775265544686850962791276621525831741104497718870532961609669609184101286001187650234153496129160953864248108843294580845734675198093679081676667156884361366809711989149763063493012918629967355793035734921166505350546054535434664673494785343259162101110702019629154611696343707673795576772968887737549675921092778837103576079183000503567004074021724904440913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d261e0e39417c0bda248e854fdef4e5c520dbe1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolevi.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forus.autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolevi.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad0b0cf720000040300473045022100e1bd257c0963db2789476e959f3c92e57cd927c064bc7574c8ca97b31eae718f022073e32c84488b939aef631d927aadbf968b41c9c1e3bcda235c0e06f26c8abf7a0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad0b0cf8d0000040300473045022100d29dbb540a1f638bf2b52e5c2e7e2a506976c01fa55fab6ffa04251288fce0d1022016415e352ae2a7f90036f59346b67e6203dd9a1d56e80251ed39c9d53c0facee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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