itcrimea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:66:31:74:4b:9c:3b:34:f6:a1:44:0e:b3:a6:dd:92:d6:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itcrimea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:31:74:4b:9c:3b:34:f6:a1:44:0e:b3:a6:dd:92:d6:40
Serial Number (int): 383223681164764398048036586468480958780992
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:4d:a6:5c:e5:fa:10:27:b2:eb:02:83:2a:12:e2:d0:47:76:cf:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:07:90:a8:64:93:89:ee:15:86:35:ae:6d:d4:ed:fe:ce:3e:87:43
Fingerprint (sha256): f9:4e:d6:e8:b3:b3:87:26:5e:50:54:02:4f:69:a2:6f:4d:89:7a:f3:bf:0b:c5:39:08:12:ec:90:02:14:32:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itcrimea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itcrimea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itcrimea.com

Other certificates including the domain name itcrimea.com

(limited to 100 certificates)
www.itcrimea.com
itcrimea.com
www.itcrimea.com
itcrimea.com
www.itcrimea.com
www.itcrimea.com
itcrimea.com
www.itcrimea.com
www.itcrimea.com
www.itcrimea.com
itcrimea.com
itcrimea.com
itcrimea.com
itcrimea.com

Certificate

The complete raw certificate details for itcrimea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISBGYxdEucOzT2oUQOs6bdktZAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDIwNjUwMjRaFw0y
MDA1MDIwNjUwMjRaMBcxFTATBgNVBAMTDGl0Y3JpbWVhLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAOEa0m/7lXq+6iuvWfqMQBJSDTxguMPn6u1I
8cU0a83LBR6XJ2+2tFwR/QXKkVKAzOiQjWUXJI0GBlJl6ILAA9+N/y6WHdMjNr2g
i9oRTUYFePoOBRUyMOgKdGMVWMFcjKPvYCvFVsEwFIc70Kyx9AyNZwXuL9XZ6ME1
71h1ssL0AJibShkMgRFXOT6LfKHweqrnlbJ4OU1rMLochcDZH3U5OfNi/9t++f/O
KNmYlKeR9rSRIcS3iY/xOh12JTBwa4Rwmtd2+xi1AcHilcgNdgjG1yY9D5ly/g2D
YTD9zNznYZbVHs1+SrArMNG3z4lVeRiguVjszoqBFwu0V6qMTRbpEolHfs96wsNB
B91PtPuAobd6c7Uy4pFdrwG8SAf3RkhCTGK6xRLabDyB3m/+HAJTrD8HtVOqRX9I
GGLJZO0pRLh2Pro57A8/i3a2gSpzkidAIjRWwJ6iYuyhKdqrypKSQYwQ6esdLua5
HMNbnaHjRdz3L5hb4SYTza/CNO/SMCWu938sREPvIaUAqmBJ2/ZvWDIB3cNhAc2H
leSTI1OeR4BroAkf38uozGV5r0KaqGUDf/PEJYR/IT7V8HQS1ho+DnCyQqLxVJhS
e11czf0xGr2dykWGknY+B3JkvCNfoxHdaskiWro2fZgJJn58DSzJsHgE27/mQFFR
3C6wCmgJAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDhNplzl
+hAnsusCgyoS4tBHds9mMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMaXRjcmltZWEuY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwBOEUDAAABAMA
SDBGAiEAnpztv2of/deF+Pndz+mQKnZKf5GaRxn6oKrNudHvMlICIQDUuSv4N1EP
g00u/faW+W9bTJKWAXLb8GfdXMa/qKzq9wB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX
lLdq7rxhOhpp06IcAAABcAThFCsAAAQDAEcwRQIgMRNbJW6JbPTROm0sCGP0PenL
Tj1EXKpGFgKYtorC7HECIQCjyuB19FEM7Ehcj5NBvwU4zJhAR8SxQxy1KchPjyUG
AzANBgkqhkiG9w0BAQsFAAOCAQEAegW/7uNcXOVTkfff9Ydck/hUDkgYy/2I9RJE
QezHTBQAXSw/vEyF1KQID4rtPwvYgJCqDOvxRaMZSA8JLdmlJcgX8yvzSo/rxsja
FbnxhZGCdVfjyXO8w/V5pUSuLxZw832BS+7/To2zgVzmtNmSkl/KpMCgG+JE5LUD
uVMrwvU+1Mm+yLaDs8CI8CtUPrvoatPCyCnz29GyiirzCMAJDrB0F0HnlgmHJxiD
wgGk8POGcmi51RG+bEmamoZ9enjypYuOCL80nGRv/v5Jqn7occsoaFA+/tNrlbrj
tDyLE4zrlFz6+/U2l+sCy9wQ0O96vqN9xgcUtTUQHpV9KDCCfw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383223681164764398048036586468480958780992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 06:50:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 06:50:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itcrimea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918347353975494178486647742283060814945640069561065464257599564157163167359102392273176718321171860390739217958089468394073180713727329405516431072240971575109474776480591272233548696228873391362800528021679499228754001819939632495759618602116705549428789463008037938935265504364613189713617944402179327141071881621479599666869644578376457208965968540031361159814599165023316127215924949907425312755167598655267569383134932778879042144359766352182315177561388236521211043457291745811137493166008683446478670488716112604409456958263280921148934392220191197594631335679714710069047534954670568156880138375396716817268051186925764031768917495629613647397741529273967439537733040658259004151212129777407792067918091546442091273825621895915555899365981229103643706280999289557254285329170188567977483766947079180603446869156600738458927176703800883305312731218475989795005546088685571703793592563329545928968797867106877556940224067570762980209620625008457513101395119095041104714468596360623383328241423338378438968547994522703393362799330989162522457673370270892624399222606059989675580989238310676474387413941669185455819890240630888745356008688960212750599091480204957523353796263995433399351373565030758721441326526558669116564727817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							384da65ce5fa1027b2eb02832a12e2d04776cf66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcrimea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017004e1140c00000403004830460221009e9cedbf6a1ffdd785f8f9ddcfe9902a764a7f919a4719faa0aacdb9d1ef3252022100d4b92bf837510f834d2efdf696f96f5b4c92960172dbf067dd5cc6bfa8aceaf700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017004e1142b0000040300473045022031135b256e896cf4d13a6d2c0863f43de9cb4e3d445caa46160298b68ac2ec71022100a3cae075f4510cec485c8f9341bf0538cc984047c4b1431cb529c84f8f250603
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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