zbogumnavojnata.mk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1c:bc:7c:f3:a3:56:ac:f1:83:d4:45:fb:3f:41:b4:2b:0f was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zbogumnavojnata.mk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:bc:7c:f3:a3:56:ac:f1:83:d4:45:fb:3f:41:b4:2b:0f
Serial Number (int): 358227593650411835029990691719354778921743
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b4:76:19:dd:06:0e:ee:d1:25:db:f4:0e:24:0e:11:52:0f:eb:f9:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:67:9c:96:ea:06:07:14:a0:f3:dc:3e:62:b0:46:ac:70:5e:3a:ea
Fingerprint (sha256): f7:42:f2:b8:ca:b5:6d:48:f5:b0:d3:9a:d0:e4:06:3d:2a:bb:3a:c4:64:15:23:9c:6e:7e:8d:2a:bc:9b:69:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zbogumnavojnata.mk

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zbogumnavojnata.mk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avtokampkrani.com.mk
centarzakultura.com
centarzakultura.nova1cloud.com
kapri.com.mk
kapri.nova1cloud.com
krani.nova1cloud.com
mail.avtokampkrani.com.mk
mail.centarzakultura.com
mail.kapri.com.mk
mail.zbogumnavojnata.mk
www.avtokampkrani.com.mk
www.centarzakultura.com
www.centarzakultura.nova1cloud.com
www.kapri.com.mk
www.kapri.nova1cloud.com
www.krani.nova1cloud.com
www.zbogumnavojnata-mk.nova1cloud.com
www.zbogumnavojnata.mk
zbogumnavojnata-mk.nova1cloud.com
zbogumnavojnata.mk

Other certificates including the domain name zbogumnavojnata.mk

(limited to 100 certificates)
cbcivet.mk
zdravjeiharmonija.mk
aviokarti.com.mk
zbogumnavojnata.mk
zbogumnavojnata.mk
zbogumnavojnata.mk
centarzakultura.com
creativecrew.mk
teona.mk
skipi.mk
zbogumnavojnata.mk

Certificate

The complete raw certificate details for zbogumnavojnata.mk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd0nRKDmU1ILfGKaUOUm
oCWNqVkxlxiQ7l/Qi4k7ydk+fCgjguTJz2d+ZMtsZVQ6IPHUXSSjpaQnLMMo8Erl
8elL5SPCefBjLWZNjD1K70i2GajSeNTFh5DqjxTFUBVU5/eaSaL+QtOgytcbxuNv
dSyJFMGZwjtI0QGDPExn9+JjOXYIvM3i5nPDsGsXyoa2CWllPocI0NNb82QG04am
PkitF6wDOs07trjx4QEdHX8KjJJr4sWedqHowrXDIhBM0IrSVw8pPYgGNnZck39b
zbFfFPAUmuqbNTxrrxedbD7LGSXwUbW7ZWMDdJeCxc44PGh5KR+QZiNEawRS1v2y
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358227593650411835029990691719354778921743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 09:25:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 09:25:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zbogumnavojnata.mk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23968094440184737975966626053859752681689007892558395913342614095256701178610976530486771871938249569156006540902288492934178013503227657498122247281602261553785564192099141574000478798855418807520711829917242054666759927939602806869846976954288365131790680365241659095557133819477177996724794789952447416550531452551231968807475293811349143593128528917610231257437961712747337218688695093850389175314185292224068775267962386397478557881800989506305641709326235452813741532083437162465308574796389979579484764219905536948767146215611397617115049490599589655164500830399739009059869872194191915327550714728109618082547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b47619dd060eeed125dbf40e240e11520febf952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (509 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtokampkrani.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centarzakultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centarzakultura.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapri.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krani.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avtokampkrani.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.centarzakultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zbogumnavojnata.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avtokampkrani.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centarzakultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centarzakultura.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapri.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krani.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zbogumnavojnata-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zbogumnavojnata.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbogumnavojnata-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbogumnavojnata.mk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e54d88dd900000403004630440220128d88087d306b7cd23725adf4d4bb7988a48543351821e7e63dc00b332b90c902201ac4b000c8103ba1f2bf0451241ba5d66dd14423bd638de8da4fb9f458018001007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e54d88dcb000004030047304502203890657a155f73d8720d4ed26ffa3fde9af0ca2e798ba543bc22595cc61f2fcf022100b67a08adab04103b89ce93a48174e5e8f001677e36b63e999481c736703a0edf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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