golazo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fc:64:40:6a:7d:74:e6:6e:76:f5:c7:84:c3:b1:9c:11:db was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=golazo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:fc:64:40:6a:7d:74:e6:6e:76:f5:c7:84:c3:b1:9c:11:db
Serial Number (int): 434333557457570034332617239457407621140955
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:2f:5b:33:51:5b:54:fc:f6:88:34:15:18:90:23:68:43:77:33:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:3d:e0:29:8b:11:72:06:18:7e:21:a7:fb:43:00:7e:57:20:08:ef
Fingerprint (sha256): 0a:97:79:40:c9:97:e5:70:94:d9:a2:60:a0:3f:2c:b3:36:62:94:54:ee:bd:a6:9d:f9:b1:5e:4b:40:8f:98:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate golazo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for golazo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

golazo.com
www.golazo.com

Other certificates including the domain name golazo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for golazo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434333557457570034332617239457407621140955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 20:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 20:37:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'golazo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749444016439640668538603330254713194091766198372638539840778822363518453843789145115526475740763505244465029957665490338704248090198859322810115345420176090185413129859456662449198541670106714976895008728344076166760120079620590411518406072724519606238129994480345665732948737826863646106160520045479739092499623771693316305889060170745460965017507307979767201759864027065863066732672381928753969865442825492117516640218236998410249575925907083147360273477722270564209193936476542309596909317459039559682002787345694566374814423448792990229761345981474177525942730373130636352766199261116304028952747341285278617301399089822772463742063264317994979300549017559073721724563150526568451028136656850345775944237676533976074192183128572150054485854587881135322459070578052066664740008403223977954491113043042153139308098131189521952851870398711977516837856984015694826814388246552948603096338239044975194353790504733090311519836347647940762277987109896996899700961317536143240992986141049541358082381118870298466939838594512652808030562386723963056870445027017857674955058923700949293434811025096673574783729380175655551080934475807200577397009736542280763201172135401367224197492289295004050892815879821709988632801714060078167708622249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							982f5b33515b54fcf6883415189023684377332d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golazo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golazo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db3da06d10000040300473045022100b9444edfb0ba3a64620ca955961e1a56382695342fdeb20f956b5aea7b166c8d022048f695955b77978f758595e8aa4848570dbbf6d79815b5f9383db9f872d5ada2007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018db3da06d60000040300473045022100d9648e2dd63e78b929c69bc09996a4f05148b09913a62fe009f5d77ec3817b4902201c09fce6e14905c7909f6d70475dbce6f1e0eb7b3c459941550321d252ca866f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0005d475c70535028c077a6374c57d9ac983e7eea7db54e3392ec0ad968d62d4ffc9589d9c1319c47caeed28853ccb21d7dce083484fd540211833541601f6df1b6b5cc96af086351205dd9f9e0b04f6c154534d274be129e7e900407231f32d38f5fc2e4eebf6521e54981e875b59c4ebfe3f54449f259993f1062dd0f96252cf9292ece1722bace31f01e09f430175ae597ab70e387c65d09dfeaa8706e69f70c4ceafd51fb0d463a9ea0749946eb0fcef96ce04f34f0215a3fd9f2694c57cdd138fa4abbec52f3a50a6571838c94df8d3878e899aa020f67e73962e9b5db2e67e7c6d59a08fd35bf5f0a42ed73018f71465e72030bcd31f8035bca9d462e647