krugpark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:bc:ee:8e:3e:a4:68:01:b4:f2:87:6c:8c:4f:a6:2a:f6 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=krugpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:bc:ee:8e:3e:a4:68:01:b4:f2:87:6c:8c:4f:a6:2a:f6
Serial Number (int): 292213404333090288197034705278296912177910
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:73:08:e8:e6:fb:a6:62:59:ad:84:e3:e8:4a:84:06:f1:8f:50:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:38:db:2c:34:11:19:a9:67:46:56:4c:27:47:3d:0c:04:69:59:a2
Fingerprint (sha256): e0:30:a3:2c:d3:e7:86:95:46:42:b3:48:60:b5:cf:e4:93:20:2c:42:71:63:75:f1:03:75:d6:78:98:1f:cb:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate krugpark.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for krugpark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.krugpark.com
autodiscover.tinyhousebar.com
cpanel.krugpark.com
cpanel.tinyhousebar.com
krugpark.com
krugpark.jontvrdik.com
mail.krugpark.com
mail.tinyhousebar.com
tinyhousebar.com
tinyhousebar.jontvrdik.com
webdisk.krugpark.com
webdisk.tinyhousebar.com
webmail.krugpark.com
webmail.tinyhousebar.com
www.krugpark.com
www.krugpark.jontvrdik.com
www.tinyhousebar.com
www.tinyhousebar.jontvrdik.com

Other certificates including the domain name krugpark.com

(limited to 100 certificates)
mondays.krugpark.com
krugpark.com
obw2013.krugpark.com
tinyhousebar.com
krugpark.com
mondays.krugpark.com
mondays.krugpark.com
krugpark.com
mondays.krugpark.com
routineescorts.com
krugpark.com
obw2013.krugpark.com
krugpark.com
krugpark.com
www.glassware.krugpark.com
mondays.krugpark.com
krugpark.com
obw2013.krugpark.com
krugpark.com
krugpark.com
glassware.krugpark.com
coffinclubomaha.com

Certificate

The complete raw certificate details for krugpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ivAXKNifMo7kkijkH/
wSD+4OdOqNOGzU05YZ9zv9QkiHu0dZ0k/FznWOjFXOPaHbLhvjHnaf8sFWjVfVlY
FxhvGwvsCiSacy4xC8VS6eOov5MMZyXripBGfGf114N2HtzQFzKzmbp7oPspB1IE
5Lsbi+uNjzdqwajGQR9robBmhCkw1rTIxdFdsTvzCOcISLkRoy2fE2RmV5zJKnFX
SqIhFE1igVuyZvGeNmaXvs+DnHWd2gvd2ZATzkM6lPXw6JeiDIFxu95LUOqzRxR+
W2VeKRE0mXtSz8/b4sFDEJ9Wb3OPpySAIrlZAlxSDnXPRhrjiBetA5gU5o0F/LqP
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292213404333090288197034705278296912177910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 01:05:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 01:05:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krugpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21141308238317714166460095775998971744453686399181287497784787170103924243586584282376221653515161086424256944136472067508083013362891939756096678531618859077915974178978471760511471959808934022448918324568201842749957411813626517656906712781977973660410741460284991373422457833305296909837278285154677698673860895961826854478815114433400180940245636208356029316165822299531164235687745890105836785880691758144006491106734234098271936291479003126452867794977134108412163154379000459987248485694661185406285722761600106143283948459168854489447967330963346706571991255135187046855900312933883962803699270560245658324757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f7308e8e6fba66259ad84e3e84a8406f18f507e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugpark.jontvrdik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyhousebar.jontvrdik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugpark.jontvrdik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinyhousebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinyhousebar.jontvrdik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170cc7d01cf000004030047304502205fce96b2782166eae2ea6579948fce0b009fc50b69e423762afa78856f55a918022100d11f47036a3edab33af8a55d64f53bfea5bd47b2d0da20df24e19be1dd0b7ea1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170cc7d01d90000040300473045022051631fc75ec424c7db4f1d88edbe68820e0c7948efe1e1dda003727164560728022100ea44d70cc21dc2b2a048164b101503b651d90b275d3674a1f02f7e2be196c7b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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