cpcontacts.aviatech.ee

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:20:15:6b:d4:76:3b:69:1c:3d:0a:b0:94:d0:8b:4a:f8 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpcontacts.aviatech.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:20:15:6b:d4:76:3b:69:1c:3d:0a:b0:94:d0:8b:4a:f8
Serial Number (int): 329435977700618368269764179931237446273784
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:98:03:d8:22:11:a6:e2:91:54:e2:bf:25:e3:22:9b:fc:94:ab:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:a1:b2:1e:1f:66:fd:2b:c4:48:2c:df:4a:85:49:cc:72:07:4c:9a
Fingerprint (sha256): e0:d4:52:c1:f8:d2:9b:31:47:a5:3f:e7:b6:f1:ba:00:c6:20:54:54:07:e3:f1:58:03:73:09:e2:c3:1a:8c:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.aviatech.ee

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.aviatech.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aviatech.ee
cpanel.aviatech.ee
cpcalendars.aviatech.ee
cpcontacts.aviatech.ee
jalakaauto.ee
mail.prof-elec.info
mail.profelec.fr
prof-elec.es
prof-elec.info
profelec.fr
webdisk.aviatech.ee
webmail.aviatech.ee
www.aviatech.ee
www.prof-elec.es
www.prof-elec.info
www.profelec.fr

Other certificates including the domain name aviatech.ee

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.aviatech.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvegkQZeFiOd2hv317FFs
z0HfvAgue3QTnOBXA0KtBuhrmqk9TTzUjPQ6+dlODWwtFOcx6xQGePYiInjv/Pp6
XLQbKVduJPCx/FYOFKqgN7scqUGjfKTfKl0U9mKNC8E38+kOGOHwbXQ788Z/DNMA
qd7chZZhz+dGV8v6klpg26qWx4ERReGpLV4j66Q+KbNhDSsA/3D+3NC5iu53TkI/
2sS6trsMuuiaztwVmUYN7M17mFpIX9fEpJZw+e8vtDkuPfNoDThAGtSACyLt4n9J
3LF1q3M/TGcuPMaUK+nz/WwFQT8cyAn6GYoiafRjSB287JiLHKvnaNfVQkqLjBjn
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329435977700618368269764179931237446273784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-15 12:22:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 12:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.aviatech.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23973512940771436931564772778657132244555791363868325771454189174869799746734181096986860092362914931951504228113928364328943169853575572372168233278471758960527481950093719669125172941123092785181323612614043474187461746690571074292601048874986211218450159320740477238232301173459685823820075672778127857203942008183487166049735248300586161114264672479626966720474673759249833513921378982816338887612579088084734727732458028411739820332728752430410020033626767987571511394591203700405388020785824623769245556188774575670368618983470871672854570699508324939038956811191072267661293545867900181154734368008562500233003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd9803d82211a6e29154e2bf25e3229bfc94ab12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalakaauto.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.prof-elec.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.profelec.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prof-elec.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prof-elec.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profelec.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviatech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prof-elec.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prof-elec.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profelec.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186e56f499c00000403004630440220419b5ba6f996f348b3f61dc8e6d0a0482966c35a2261ffce57e88a852717a2ac02200b9c2be21c874c1b11f41db3dde033c22605d283112a3009ea08edc0eaaa4f8a007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186e56f4b820000040300473045022100ea70f01064f197fcb26a6eafffcf236874d0631290cefebc64d21e3fdda76793022048e0fbd03d53cb977bb75fe29d1dc69deedcd3202d61b1fb78aa440715a66f3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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