galloo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:56:13:1b:cd:e5:a0:f3:9a:54:66:9e:f7:1a:72:67:2a:10 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=galloo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:56:13:1b:cd:e5:a0:f3:9a:54:66:9e:f7:1a:72:67:2a:10
Serial Number (int): 290626541050503571703358968671717879654928
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:4a:22:7d:1b:ed:2a:d1:ae:e3:16:c1:11:e5:d1:38:ef:bc:f2:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:52:71:7f:62:43:e3:3c:b1:95:25:a6:ce:72:de:6e:7a:d3:37:40
Fingerprint (sha256): 0f:26:c1:1e:16:2b:62:64:b2:3b:14:43:2c:71:bc:ff:8d:8e:9b:6f:86:27:32:8b:b1:82:66:7d:e4:0b:63:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate galloo.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galloo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

galloo.com
galloo.dspdev.be
www.galloo.com

Other certificates including the domain name galloo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for galloo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290626541050503571703358968671717879654928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 08:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 08:47:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galloo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617039725064281542414377548842377917745935635447461675271384864634803025622074721812588653336327864932199655511968672954828461666316030166328475846674946448401599882157189238624691799551896636473272965197767331167722977309201463181061948775292511006774546417313737098425574501578377355653691858560855515016521887350221437958495320260969834635616070510418877660487025338291405478723119671513703142466045120951073983588068820608020652296710094611595303861197498369121533331129462141143261729324114775444129562205394157722579988288331396261261267577866723448598539343986252641788453419582100717584086268149035374894274247324085524027392276981935731448736733021193416744416561569111889624703145792659404040274861364590939050815894746402778034092889228076630501202891209228205790430153941359630789062300111320711054856422018062145814474607061800810327445713180304897154567675489955823108304742656631079227414901449780086993851487794214284450114594140202520741038908690539665824986622965446332455778540938390769855247566936215179655597283857261906078162829860026123113480938328128866948719309784263163347461740146045167775369129507829447918623861797315323375036354268793963545332776620325494436129580332591804005757799424680646778650842031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							994a227d1bed2ad1aee316c111e5d138efbcf2e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.dspdev.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galloo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee64df18e0000040300483046022100cab51d2c759a04578fbe73ac83ef84845a17775608d6b206b6581c2735b842ce022100b738d1d2f8e932059f3e5465611d3a65750c23678d6adc5e8ee7b33e124db0bf00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee64df1da0000040300483046022100bd7a54f7675bff0d87202e9e474d33555022ddcf2ffd41b689539f6ed47a958b022100a68c502928d4dff771c62c9ac061dbcaa1c03e12e20e2f22c1082cec532ea8e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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