www.rezumcy.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:3c:8b:6a:36:26:fa:d3:33:e3:52:0f:d5:bd:90:95:e0 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.rezumcy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:3c:8b:6a:36:26:fa:d3:33:e3:52:0f:d5:bd:90:95:e0
Serial Number (int): 415224965206781159140783561173188738061792
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:a5:35:3b:c8:30:2c:6e:17:38:47:ac:7f:ad:33:64:94:93:28:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:28:4e:73:ec:b2:81:d0:de:e6:af:92:49:07:cc:6a:97:75:48:f8
Fingerprint (sha256): 0b:e7:79:b1:8b:e0:27:83:af:8c:5d:6d:95:c3:4b:74:62:c7:f9:d8:a3:4f:70:e5:44:fa:0a:c4:e1:58:3a:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rezumcy.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rezumcy.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rezum.zebrac.com
rezumcy.com
www.rezumcy.com

Other certificates including the domain name rezumcy.com

(limited to 100 certificates)
www.rezumcy.com

Certificate

The complete raw certificate details for www.rezumcy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415224965206781159140783561173188738061792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 16:58:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 16:58:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rezumcy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3684456750521155130938419904178158473710449851408966193343732777319712427558551029981302977588689522590762784951448153183939669462791399377062845373766155559215039515514957653834207216596831366728123407287431643529114665000437780215807777238835564771324489460807556553407694400825131656610471236124009855970333641899333773709700938389915069017600910668559854008005734750083384548676300557837620995973689720262775462104435916738693650208703187001879330408464532561513186361564860260956769473817252763076287892761113293783915560299116891302493087259914471682567428203577967022566207319830790646089745731648265857708899477024680489236447328310944609953449036976766527246869656928943830571996538620681820409167615987422178499913017151870407690376790427230329533409041783313485409672959382227965709879836352577585481492151993634824496587989301161412977721014567775892093473530731115450894636520720519091237713213040922345028946031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00a5353bc8302c6e173847ac7fad336494932831
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezum.zebrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezumcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rezumcy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e33d0b69100000403004730450220067987940186d44d7dc449363ecc0ae469970716def6825e5a6a253410863e00022100a6b67d47463fb69502e10859f6490566d5ca1a3a08f7e09d7b1aa1793b5bc3e200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e33d0b6c60000040300473045022100a25cb2be9af89b8e6a9bf5d4674bdac4092a839f15732ab458395b62f7cb7c3402204a4dddfd007b706383d955093b148104df775c105f852d7df628ebd2769d11e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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