DV SSL/TLS Certificate for *.krom-invest.ro

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.krom-invest.ro DV SSL/TLS Certificate

This certificate with serial number 05:2b:1b:c0:44:13:a0:26:5e:03:33:e7:be:4c:13:bf:49:7e for *.krom-invest.ro was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.krom-invest.ro provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:2b:1b:c0:44:13:a0:26:5e:03:33:e7:be:4c:13:bf:49:7e
Serial Number (int): 450230458894043370698316387876964440951166
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: da:4d:52:84:32:cb:18:9f:e6:7d:42:ed:6c:8a:35:02:56:c6:e9:41
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 4e:6d:cb:44:2f:85:09:95:ef:81:fa:18:2e:80:f0:f7:07:f8:46:18
Fingerprint (SHA-256): cb:b2:8e:67:0b:7b:be:3f:2d:b4:52:f6:4a:a1:dc:7d:05:6c:69:0c:1d:74:9d:04:52:34:05:c4:2b:0b:26:88

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/127.crl

Check the revocation status for certificate *.krom-invest.ro
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.krom-invest.ro

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.krom-invest.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTkbIs6OgNmanFMsXcMT
AC2jnDiVc0fTiuYQB6sQI5ta8vGZmN9hkJyPHH81NJpH1/O8I9WA0mrRbNg0veMX
qGbh+hZpVNorIUQ7R6x6T0I13kGi0k765I8v56yNJOz8Y00+xkfdrGKz4kObBr6M
SjZclN3yiu+Z7Tv6BJhy0lmB0Wkwxtm+SgTX5P7IahgA5NHyNwXZ2XgMwBADCrMC
2GJ6Y4SNUu1GGTmjmcL8zgcGbXtBoMmmv8uBabiYOeZ2+0LR+fSzGhmx7oShmgMe
+AQF195OQrmxPmS/0Gl020Y5z5jgKjBaCZJDPCEgffKh55rWJhxEMFJITBKhhp1s
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 450230458894043370698316387876964440951166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-26 07:41:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-24 07:41:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.krom-invest.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21362433557333397751521170365898906932478818222700050938060052782402489739290591315542471536765647381365606542208856878960905860568988088080157667264186799435707098140258755416380696969025936703873218233394594340269085154419799095214284369594877576009009344370018671855240771909360269555069099356404207424086718151490505974786050589784466533591674029533744460671362486656655360914581118739681510053277730007796632756083753007004805712703003308315400151571587449370403073123326912521994562061705306874601858903040735603711693969765090243957049486873468591388591811759023415560041152451221679405320753874240977843875009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da4d528432cb189fe67d42ed6c8a350256c6e941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krom-invest.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krominvest.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krom-invest.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krominvest.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/127.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001970bbf48550000040300473045022041bf381bb85e94076e7e109d4a03d93c59454a8b856482d8660669da47f0f17f022100ee8a00743541cf2cce03edf6ae26eb02255f11377b7ca4ce893502600f9c6e230075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001970bbf50ca0000040300463044022000b21f5e8f1fed6ed7a791c07499f7ceef72412b6b9c6b96102c72e9049c154e02203e9518a76f0f90f7af215fa2fb818aa0afcb8f226c0e0d6b16d5c41b1e397825
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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