dom20240503-1.forumotion.net

Issued by R3

About this certificate

This digital certificate with serial number 03:59:f8:e1:6f:fe:88:7b:86:4c:c6:d9:9c:9c:48:e3:d4:e8 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dom20240503-1.forumotion.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:59:f8:e1:6f:fe:88:7b:86:4c:c6:d9:9c:9c:48:e3:d4:e8
Serial Number (int): 291952807532505751238192066327307964634344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:17:d9:33:14:02:bd:44:ed:39:f2:a6:2e:41:f1:2a:44:51:69:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:82:7b:6d:c5:8d:4d:50:f0:1d:b5:16:0c:53:b4:dc:9a:08:6b:25
Fingerprint (sha256): 0b:88:d4:13:d0:52:a6:6b:e4:d0:8b:23:c6:e7:8f:25:9d:1a:ac:13:3f:26:0b:8f:f6:a7:fb:9b:52:e9:35:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dom20240503-1.forumotion.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dom20240503-1.forumotion.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dom20240503-1.forumotion.net
kolybris.com
sanata.biz
trainsdumidi.com
www.kolybris.com
www.sanata.biz
www.trainsdumidi.com

Other certificates including the domain name forumotion.net

(limited to 100 certificates)
dom20231222-1.forumotion.net
sub20200409-33.forumotion.net
dom20230911-1.forumotion.net
sni169818.cloudflaressl.com
dom20230207-1.forumotion.net
dom20230405-1.forumotion.net
sub20180304-1.forumotion.com
sub20191217-6.forumotion.net
dom20210614-1.forumotion.net
dom20231021-2.forumotion.net
sni169818.cloudflaressl.com
dom20230523-1.forumotion.net
dom20230914-1.forumotion.net
sub20171129-4.forumotion.com
dom20180709-1.forumotion.net
dom20200303-7.forumotion.net
sub20191214-1.forumotion.net
sub20200409-48.forumotion.net
sub20200127-1.forumotion.net
dom20200208-1.forumotion.net
dom20230314-2.forumotion.net
dom20231021-1.forumotion.net
dom20231110-1.forumotion.net
m92.maxns.net
dom20230131-1.forumotion.net
dom20191223-1.forumotion.net
dom20220302-1.forumotion.net
sub20180127-1.forumotion.com
sub20180318-1.forumotion.com
sub20200211-2.forumotion.net
dom20170801-7.forumotion.net
dom20171010-1.forumotion.net
dom20171006-1.forumotion.net
dom20210117-2.forumotion.net
sub20200409-39.forumotion.net
dom20220504-1.forumotion.net
sub20171226-1.forumotion.com
sub20191212-2.forumotion.net
sub20200215-2.forumotion.net
dom20220316-1.forumotion.net
sub20180222-1.forumotion.com
sni169818.cloudflaressl.com
forumotion.net
sni169818.cloudflaressl.com
sub20200222-2.forumotion.net
dom20230827-2.forumotion.net
sub20200217-2.forumotion.net
dom20220813-1.forumotion.net
dom20230414-2.forumotion.net
dom20230901-1.forumotion.net
sub20191212-1.forumotion.net
sub20200206-1.forumotion.net
sub20170818-1.forumotion.net
sub20200308-2.forumotion.net
dom20220508-1.forumotion.net
sni169818.cloudflaressl.com
sub20180417-3.forumotion.net
sub20200116-2.forumotion.net
black-dagger.org
dom20221018-1.forumotion.net
dom20221220-1.forumotion.net
sub20170805-1.forumotion.net
dom20230223-1.forumotion.net
sub20170913-1.forumotion.net
dom20230721-1.forumotion.net
dom20220630-1.forumotion.net
dom20230314-2.forumotion.net
sub20200410-1.forumotion.net
dom20240503-1.forumotion.net
dom20230904-1.forumotion.net
dom20230426-1.forumotion.net
dom20191215-1.forumotion.net
sub20200304-2.forumotion.net
dom20220110-1.forumotion.net
dom20240221-1.forumotion.net
dom20231218-1.forumotion.net
dom20220508-2.forumotion.net
sub20200221-2.forumotion.net
dom20240108-1.forumotion.net
dom20240418-1.forumotion.net
dom20200303-10.forumotion.net
dom20191223-1.forumotion.net
m92.maxns.net
dom20221220-1.forumotion.net
sni169818.cloudflaressl.com
dom20200203-1.forumotion.net
sni169818.cloudflaressl.com
sub20200204-2.forumotion.net
sni.cloudflaressl.com
dom20180417-3.forumotion.net
dom20230314-2.forumotion.net
sub20191217-12.forumotion.net
sub20200216-1.forumotion.net
dom20221031-1.forumotion.net
sub20200118-1.forumotion.net
m91.maxns.net
dom20240213-1.forumotion.net
dom20231013-2.forumotion.net
dom20240506-1.forumotion.net
dom20210602-1.forumotion.net

Certificate

The complete raw certificate details for dom20240503-1.forumotion.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uyJ37C0DfYgJnzxZ7nQ
lVXS8B6dY0pHypQpye2BK+Por2A/xKwWrSWDQbBs5wg33KR8RK1cdfSkiJe+8pXA
qAPXDiz1tX1PQqjIom2oADGJo37frafanp+4h894/oRc/xxi/8OyrM9aIJyD7cxU
x57cn/3pfVxhea4LOtz1uUOnoemUtUjcip94J6fghPYkg0GpDnG321b0Bcs40IXj
9U55LPZV/iZ7I+S/mzT0uIOrS9wfAfEw6+LxJl43rLbDx19y80zOqrtWqedfVdZa
0Umxk2MSg4fJ5otNOkZBuzVW1lLyn79cnNUOTtPiye+G/YvkjRDlzqqaW1EZ/zKt
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291952807532505751238192066327307964634344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 14:02:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 14:02:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dom20240503-1.forumotion.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27636591998506265191067313600594103547357898854986495567351947674518933445335136219574045601755615819740374547247469800817959503462369436858197128101014303765902869213931041747730392726926198510013522756300897490274203543347994619378127837324811971674389223694249702184184874535214306978372335430314053805107401807449164058987529864256770796194665407620932432972521785034231693365244047181299507391124269238183883244144872263234863111180365774831159705190149364684004714078763702291920609631013537492828391887518748851595441156561390667230405492314311897872878293319345136901846938567699686357532736675858167463325149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3517d9331402bd44ed39f2a62e41f12a44516926
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dom20240503-1.forumotion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolybris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanata.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainsdumidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kolybris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanata.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trainsdumidi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f3efa5a56000004030048304602210093c39b99704e20befe08de942eb195dc09073872ed37dee3a56b80bc594f1c22022100f14d5701783603ee5b52b5e700645ac65eca2ae92258d01dfe5c7a5bf305db22007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f3efa5ac90000040300473045022100eb39ead1b4431b943090a4cfd000a7ba1f33e8c608e7cfbac99f8c45be6cee7002201e893cdfe42e05d032b141c4c4421e2b1b9ba390954d14aa586dcdc3b70182c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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