berniunjauniesi.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:bd:d5:be:69:70:96:ff:33:53:9e:6a:22:82:57:cd:53 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=berniunjauniesi.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:bd:d5:be:69:70:96:ff:33:53:9e:6a:22:82:57:cd:53
Serial Number (int): 345979218704119322519990628969727485529427
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:05:8e:b2:9b:bd:d6:af:b7:45:c0:ae:27:0f:68:20:85:ab:0e:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:c5:dc:c3:d8:5c:88:67:47:e3:91:83:b9:47:8b:d1:d0:62:aa:1f
Fingerprint (sha256): de:c6:5b:a3:0a:61:f5:a1:03:9b:36:02:58:db:31:82:4d:01:68:78:2c:37:52:46:43:ae:3a:98:37:ab:82:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate berniunjauniesi.lv

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berniunjauniesi.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berniunjauniesi.abstorage.area.lv
berniunjauniesi.lv
bralitis.abstorage.area.lv
bralitis.lv
cpanel.berniunjauniesi.lv
cpanel.bralitis.lv
mail.berniunjauniesi.lv
mail.bralitis.lv
webdisk.berniunjauniesi.lv
webdisk.bralitis.lv
webmail.berniunjauniesi.lv
webmail.bralitis.lv
www.berniunjauniesi.abstorage.area.lv
www.berniunjauniesi.lv
www.bralitis.abstorage.area.lv
www.bralitis.lv

Other certificates including the domain name berniunjauniesi.lv

(limited to 100 certificates)
berniunjauniesi.lv
stude.berniunjauniesi.lv
stude.berniunjauniesi.lv
berniunjauniesi.lv
mail.bralitis.lv
berniunjauniesi.lv
abstorage.area.lv
berniunjauniesi.lv
stude.berniunjauniesi.lv
berniunjauniesi.lv
stude.berniunjauniesi.lv
stude.berniunjauniesi.lv
berniunjauniesi.lv
www.dzied.berniunjauniesi.lv
dzelme.berniunjauniesi.lv
bralitis.lv
paba.lv
berniunjauniesi.lv
abstorage.area.lv
berniunjauniesi.lv
berniunjauniesi.lv
bralitis.lv
berniunjauniesi.lv

Certificate

The complete raw certificate details for berniunjauniesi.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtIm4xGZEYZGT+ldxAsM
Mf19yoEEEHek0gvxO3pOdSchN9oD74L9vL978ywE2TEu0msiqZ87ct6ifpvMQj5M
LAA+HMRt4jwVMG796ZehRgEVbd1vse34mmaXuC93DVTRgT889+GTWUdbqdYmUxxx
7jaG7tnwE+z16s15NB19UiRAnjMqheVGnWpr7i21alr3cbZ+BXhK++8oh28FfKvk
EiXDKdUsU1eUzBrsR8i5j1gRWQw0B2gSvQYP2c+Il9PLT2Ayw0gw4tqNEcx40Y2m
6UTq5DVtlTA+QUZ6Yb6VnEww4kKKt6hu4U2YRLuX4DUX99hs87s6XvlIDt/RBYjd
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345979218704119322519990628969727485529427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 21:17:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 21:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berniunjauniesi.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21564141609585402375797434392417045890446618464045545740046417374255716653132474016851734118911106270699912374311188401605680038422624853533980276839342734428244292696464855739552841213387062442066485757061766481791269690898738949279639088350993721866848698282429634819791588834189733362943008033449083098574119048183838023485101532922025703998187409135605372661844285152913241276164338049623268512200269620508925619543961845276081676693304687956446319338666275379623266874200115351495478530187527382018271043696640922729557922989824058582680046072122748518376084122542456047948029660876740546001903544642314730790351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a058eb29bbdd6afb745c0ae270f682085ab0eab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (400 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berniunjauniesi.abstorage.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bralitis.abstorage.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bralitis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bralitis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bralitis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bralitis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bralitis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berniunjauniesi.abstorage.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berniunjauniesi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bralitis.abstorage.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bralitis.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a4c46beff0000040300473045022100ab4d7502fffbe5eec7260f96f2526c4cb0041c9be966f03b38fb940b1fd671b90220324f1e2f291086ac8f913163e6208f3fe8b0d16f71a6f140cf03327937202b31007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a4c46bf0a000004030046304402200bdfb0d32bac4bb330a3feca7998a8dae311ea08ebede72c51ae2409e8dc644802200ee499853e39d43edf6e2c224cabebf272db063f74c23e469fd6f6d9f31440c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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