www.gandhi.com.hr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f7:d5:cc:80:d2:35:b6:cd:c5:8a:61:ea:9d:e3:6a:3c:ec was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.gandhi.com.hr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:d5:cc:80:d2:35:b6:cd:c5:8a:61:ea:9d:e3:6a:3c:ecSerial Number (int): 345670789829216835698248093059192084643052
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:af:11:17:fb:a8:6f:a2:37:f7:df:1b:15:db:64:6d:93:87:b7:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dc:af:c3:49:98:83:ee:f2:a5:0c:69:86:22:58:e6:e6:f4:6d:54:f2
Fingerprint (sha256): dd:cd:d1:b6:b0:61:39:40:8d:f1:ec:6a:7c:74:90:cc:dd:7f:e5:ac:dd:16:ef:a5:0a:8e:08:5d:c3:4e:95:ee
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.gandhi.com.hr
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gandhi.com.hr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gandhi.changeip.net
gandhi.com.hr
www.gandhi.changeip.net
www.gandhi.com.hr
gandhi.com.hr
www.gandhi.changeip.net
www.gandhi.com.hr
Other certificates including the domain name gandhi.com.hr
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.gandhi.com.hr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgISA/fVzIDSNbbNxYph6p3jajzsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTYxNTI1MTZaFw0x OTA5MTQxNTI1MTZaMBwxGjAYBgNVBAMTEXd3dy5nYW5kaGkuY29tLmhyMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4r8XppKGRcWgIKrdASa+L9APmGX1 ulf39u8qalQ9e/p15bH5LIdNPsw1AZF1PKDxFQObVBQLdSk1wFiBtujAe1pf5nC8 o1mvxWC1S77ut7Eipvn3cmHRY86CLOetuR98EDNxcecZiCjTsNhtLqAMaym2ZA9+ f0HalGDl09z9y38I2i3ZXP61YyblBJWXvZFAahBWWOfl5VXJFqyJc12Ih8hAdVSu cVAmQsSbUXlKFYjZfBwbHESObSN9UnThvuf0PZqTyxIOVGWVf81MYT7+X9nT2aCB fCIzQqvoJ5e8O8gfLpqCcXcAF8EQKDQN/UYWOWByj9ghAxdcVu5AiHdZS1Uy2+Pw 1miPK8qAg0hwi3cXTz9z80WDxahgWpcgICnixHH5jjbp5N5NK8m+OZimJtGLSaIY 2U8BwqJ2FVqp32yE4u0rvwjpspV9PgJdUA07PO4urF4p+yeG0iAMmJG7st+UlAh/ NtZD8r94x9GsETwTjECPJ/XvlluujiGXCxbw9W7xiCQcmpqVriprbPMHxFPHWy5r Gwxt8pn3zVRsHwCEmZxAQIbljEmersiPITKEXMWEO0C8S95SYrlYPtECOxEoxQEE YnFBtRaeCraaB2k6Ng0Kl8btS8171pckB9XIEe04BbZN8G8sDGuIZdxJ6nlXigOK YfZAKeYGAjd+HiECAwEAAaOCAqQwggKgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU Yq8RF/uob6I3998bFdtkbZOHt94wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzBZBgNVHREEUjBQghNnYW5kaGkuY2hhbmdl aXAubmV0gg1nYW5kaGkuY29tLmhyghd3d3cuZ2FuZGhpLmNoYW5nZWlwLm5ldIIR d3d3LmdhbmRoaS5jb20uaHIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg CMY3NXnmEHvMVgAAAWthG3GaAAAEAwBHMEUCICHB5gWztznjXnqTVNA0xD2a4IoM S0kqezz670GxQCRfAiEA4fYHFCw4blJfcEAePl4fsKtuixEoOgac5SeeAkjHA5YA dwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWthG3G6AAAEAwBI MEYCIQC++iKjNHL2AFC+KL4+NQ9z2k5YbAZIDYEI8GSwa3YdbAIhALZgOPfihvM3 T9w3CnJZOb+ybfXmA1vsrwiBiCkstfbkMA0GCSqGSIb3DQEBCwUAA4IBAQBDzGSl Uc7jLoO/9WAlVvi0FFex4TrmLG6vzwT5N13fWaHASLLt731co/UA7f7pKF+NKx6f C4T7AoQ2d+c7CnDzN3R4uMVAtwz/w66wvav9Ghj0Ne7JXGlGsALEuPGeRPQyN1e5 LYc1rlgnMERpYrU/dy3PVPZ5sFbKO45Z/qG63eXs2PxIdiDXbe26pGC87g+OICId mUO+xbgTsZAfi7fFStP0gn5sbyl9wFdNWKD/7F9a3Hwv1MfRSZ+DGzdC63GemAbS pkl3QLjLyWdeux+0EUc2m522DU2LN8zR6IFKbljAo8D8KpXDw0uzWMfPkJpzCIeh W/u/5ILOELvxpvib -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4r8XppKGRcWgIKrdASa+ L9APmGX1ulf39u8qalQ9e/p15bH5LIdNPsw1AZF1PKDxFQObVBQLdSk1wFiBtujA e1pf5nC8o1mvxWC1S77ut7Eipvn3cmHRY86CLOetuR98EDNxcecZiCjTsNhtLqAM aym2ZA9+f0HalGDl09z9y38I2i3ZXP61YyblBJWXvZFAahBWWOfl5VXJFqyJc12I h8hAdVSucVAmQsSbUXlKFYjZfBwbHESObSN9UnThvuf0PZqTyxIOVGWVf81MYT7+ X9nT2aCBfCIzQqvoJ5e8O8gfLpqCcXcAF8EQKDQN/UYWOWByj9ghAxdcVu5AiHdZ S1Uy2+Pw1miPK8qAg0hwi3cXTz9z80WDxahgWpcgICnixHH5jjbp5N5NK8m+OZim JtGLSaIY2U8BwqJ2FVqp32yE4u0rvwjpspV9PgJdUA07PO4urF4p+yeG0iAMmJG7 st+UlAh/NtZD8r94x9GsETwTjECPJ/XvlluujiGXCxbw9W7xiCQcmpqVriprbPMH xFPHWy5rGwxt8pn3zVRsHwCEmZxAQIbljEmersiPITKEXMWEO0C8S95SYrlYPtEC OxEoxQEEYnFBtRaeCraaB2k6Ng0Kl8btS8171pckB9XIEe04BbZN8G8sDGuIZdxJ 6nlXigOKYfZAKeYGAjd+HiECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345670789829216835698248093059192084643052 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 15:25:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 15:25:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gandhi.com.hr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925044828578464376643580018454823179560285619133044187322675832853904983848719349548901548547618102060078057961338880407380951537166022765069715754205608346686309552323302693094342363656643660307588802837019152844128649590281669370015485561312181190480016880214664095248825003241650213556826101680146834682158174274702582705929443516722706591201008013512763177670995826247609208531908206411718456523321479679259462664973611616256021311845231962906836174306019589886117242477409708725966673641531427168085366934405206279150495980936452679910036453684675870867885005698942108496058609140169267762830925741641491076817994292735986594199958866557363986071086773634001517381519358599490992460353926710825883264224700195274399192594663223374268124408193513094405057572996245899261585536049773515876210740067396565564703596161641712361718467946848165700430663259305930579435001972096532727373709932482511733759622485106536059761928435338532743386388430548948068880790879224822402260982451387667770647096494230293267176617487311697430481022936542180855767546803967762172892550994928722582933996337511859608449728255959932187781545803708091794968591564525396587624074560456628663956855114075033857513323402676886329131638883658892882724396577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62af1117fba86fa237f7df1b15db646d9387b7de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandhi.changeip.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandhi.com.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gandhi.changeip.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gandhi.com.hr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b611b719a0000040300473045022021c1e605b3b739e35e7a9354d034c43d9ae08a0c4b492a7b3cfaef41b140245f022100e1f607142c386e525f70401e3e5e1fb0ab6e8b11283a069ce5279e0248c70396007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b611b71ba0000040300483046022100befa22a33472f60050be28be3e350f73da4e586c06480d8108f064b06b761d6c022100b66038f7e286f3374fdc370a725939bfb26df5e6035becaf088188292cb5f6e4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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