saumal.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0a:1a:98:db:b8:98:27:be:3a:2b:29:ea:28:cb:47:75:06 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saumal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:1a:98:db:b8:98:27:be:3a:2b:29:ea:28:cb:47:75:06
Serial Number (int): 264775035077975804551263403759555448370438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:5c:cb:77:d0:8b:04:07:63:a2:e9:84:5a:da:50:1c:33:cd:1c:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:a8:8f:20:6e:67:27:84:45:49:f3:56:09:8b:4b:d8:87:6e:1c:e2
Fingerprint (sha256): 08:b5:dd:ac:aa:8c:37:10:66:6b:95:14:07:0b:1c:60:14:54:59:4a:e1:df:cf:73:2d:98:6c:54:70:34:63:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saumal.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saumal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

charlie.digital
dfa.life
elearn.world
fihe.one
foqr.one
hents.one
masters.capital
modaltownhomes.ca
puggy.one
saumal.com
supernova.website
tprv.one
wholesalepaymentprocessing.com
wtin.one
www.charlie.digital
www.dfa.life
www.elearn.world
www.fihe.one
www.foqr.one
www.hents.one
www.masters.capital
www.modaltownhomes.ca
www.puggy.one
www.saumal.com
www.supernova.website
www.tprv.one
www.wholesalepaymentprocessing.com
www.wtin.one
www.xrdv.one
xrdv.one

Other certificates including the domain name saumal.com

(limited to 100 certificates)
saumal.com
saumal.com

Certificate

The complete raw certificate details for saumal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbUxddJOevR2xb3zuSWI
GffWOa/ODPDGHTj8+TPeBvwt7jy9q2DWN6jHn3JEsHJh++oKaNt7E9ArYrHjTsbC
Z3sbe+gW4ys0QokL2yvXoXaCa2vNpWsk0619VtgykJ4TNbcnXsxXLO78uxLYPtW8
83+e5nVuMhuwuzNFy2rBXb0ODp59Po8xB3sG9TcMWuMUiO/faKg5pEpKHePGU7be
tgNxv80ajqoXxEWWUeLjy3ZLppV2cOJfee+10Ht+DAs4j0SluQ4xqH4mEJ4CEs0V
qhjKeBU0kUWLpx5Ri4zBNaMlj4OT4oXJgx5vrvIhuQMk6Y31XuBrVJjbOpd8RH0N
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264775035077975804551263403759555448370438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 02:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 02:06:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saumal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21928576458160774588188070339502394134475145072941893387214646565694532642618164541975600562720657157194024508647879124451253357265277753356344904725222463187226744432273152543073402282844755626612902252281828639097526276436258368409392218601619911513025529010021825161615179266224522918472955426125749533846867563559168738494273982345921646698946320907182614259494087362017173958701071189074008552410267751978474722391757017414246556063917230628063784159666662464578354263016120587356345400083832163871155771589136028147700635385868483158627579985648077905304218998691580675846744847006778384551725029681535366532531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b5ccb77d08b040763a2e9845ada501c33cd1c6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlie.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfa.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearn.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fihe.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foqr.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hents.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masters.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modaltownhomes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puggy.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saumal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernova.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tprv.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalepaymentprocessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtin.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlie.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfa.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elearn.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fihe.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foqr.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hents.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masters.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modaltownhomes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puggy.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saumal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supernova.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tprv.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalepaymentprocessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtin.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xrdv.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrdv.one'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab08e2839000004030046304402204b381a1e0c8a0153836523c90b7ab36d8d9171ae89e7265c7ae5dd0c9207b28702205a8ddf460508b827a36ec1b81d811abd7c291e661bf10f6c41e65f7db3b9d92d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab08e290500000403004730450221008674cb6298597f81f1b9d96380feef7cdafd1bb9c252bb172813c8ce70c0532f0220569bb0ca96d0ceda7e61ae355270301753f0cb17d5901a32450f20e59144af1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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