baltic.jazbina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:da:fe:a9:96:e9:dc:a6:cc:28:e1:9e:ff:0c:af:b5:45 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=baltic.jazbina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:da:fe:a9:96:e9:dc:a6:cc:28:e1:9e:ff:0c:af:b5:45
Serial Number (int): 337851201971737959415097845920918569727301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:57:20:a4:3e:0d:87:e8:f1:12:1a:25:96:68:bb:1e:f6:9a:77:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:cb:b7:a7:f6:91:72:c4:47:5b:aa:89:27:07:7d:a4:60:c2:cb:c6
Fingerprint (sha256): ff:79:97:1d:71:0f:be:37:b9:f7:00:f4:3b:17:5a:63:1c:c7:c0:7f:f0:a1:29:68:a4:c4:89:48:db:a4:8a:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate baltic.jazbina.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baltic.jazbina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baltic.jazbina.com
diva.jazbina.com
film.milan.jazbina.com
mail.nova-nada.com
mail.tefter.com
mail.vecerica.com
milan.jazbina.com
nova-nada.com
nova-nada.jazbina.com
tefter.com
tefter.jazbina.com
vecerica.com
vecerica.jazbina.com
www.baltic.jazbina.com
www.diva.jazbina.com
www.film.milan.jazbina.com
www.milan.jazbina.com
www.nova-nada.com
www.nova-nada.jazbina.com
www.tefter.com
www.tefter.jazbina.com
www.vecerica.com
www.vecerica.jazbina.com

Other certificates including the domain name jazbina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for baltic.jazbina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF2muh6cIUme5bMvIw62
8ISwzByOOlUT9MTzCIP08Xy/501dOBdrpGh80lL4jAhADxzRMhseceDpEn2k8e4f
Wooppdv0WocFqNiAKurHV9wKNI44+fC7KAWbS8U6lDyKLoWYpiB/Hu7pp0j0wFqS
pl2sZyj7jISC70Y0TGuhdhe+dLTvVZ/iX6GGQYmFNzd8PF3VQg6EQezqTihnE09s
kpAABG/o+GI3VE+UOX1+Nt9xEpZLhH0O5kSn9PdY0UVwLDt1ABo8FDaTcR7nWOfo
IcxIkW9Arsr5v5Gu/kpmkFzkIGgVH0jXS2tCBFW4CgvJ8EvlWW1MJ++mFLdMCzaQ
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337851201971737959415097845920918569727301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 16:51:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 16:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baltic.jazbina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23274029279865578038722261406550298540366359684235597061634553535984436102907750140986818052071651599185658800071408484200473500259028406057011540433568413891327937847117050488452895354214620647087375519826672518060682992275583716369176821323469637726214525654294561885639206561046121496787359264613364948677120988075299895338319014991384063400377282139857182063655965460230055550774243500741933591217124684487022145801252692829266892859244000956514811575941240258424925060740649521239517830140202089687023884654994772415442038406415975328300269798528837335020059724841994278642193847283576301809151670588279440707747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							205720a43e0d87e8f1121a259668bb1ef69a77db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltic.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diva.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.milan.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nova-nada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tefter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vecerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milan.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova-nada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova-nada.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tefter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tefter.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vecerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vecerica.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baltic.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diva.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.film.milan.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milan.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nova-nada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nova-nada.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tefter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tefter.jazbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vecerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vecerica.jazbina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169782e6d7b00000403004730450221008b726f06b910ce747e14adf2963fbd540db130794d0612d1e99defc8f003c5d302207d178aaa3730d7055db75e221c68deba4b9aa1b1cad373b2cb3d6a551dfa62ed007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169782e6d7a0000040300463044022036535a6df77a8d050b56c74c7075d65a65a844a0c323494d994a2d98c138a12e02205d331bf8e05d93776ce7559577e8b170c459fe26e23611956b59898414294792
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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