galloo.com
Issued by R3
About this certificate
This digital certificate with serial number 03:56:13:1b:cd:e5:a0:f3:9a:54:66:9e:f7:1a:72:67:2a:10 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=galloo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:56:13:1b:cd:e5:a0:f3:9a:54:66:9e:f7:1a:72:67:2a:10Serial Number (int): 290626541050503571703358968671717879654928
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 99:4a:22:7d:1b:ed:2a:d1:ae:e3:16:c1:11:e5:d1:38:ef:bc:f2:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f0:52:71:7f:62:43:e3:3c:b1:95:25:a6:ce:72:de:6e:7a:d3:37:40
Fingerprint (sha256): 0f:26:c1:1e:16:2b:62:64:b2:3b:14:43:2c:71:bc:ff:8d:8e:9b:6f:86:27:32:8b:b1:82:66:7d:e4:0b:63:cf
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate galloo.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for galloo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
galloo.com
galloo.dspdev.be
www.galloo.com
galloo.dspdev.be
www.galloo.com
Other certificates including the domain name galloo.com
(limited to 100 certificates)
*.galloo.com
*.galloo.com
galloo.com
owa.galloo.com
uat-stapels.galloo.com
*.galloo.com
galloo.com
telework.galloo.com
sovaga.be
owa.galloo.com
*.galloo.com
galloo.com
galloo.com
owa.galloo.com
galloo.com
exchange.galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
stapels.galloo.com
*.galloo.com
*.galloo.com
*.galloo.com
galloo.com
owa.galloo.com
uat-stapels.galloo.com
*.galloo.com
galloo.com
telework.galloo.com
sovaga.be
owa.galloo.com
*.galloo.com
galloo.com
galloo.com
owa.galloo.com
galloo.com
exchange.galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
stapels.galloo.com
*.galloo.com
*.galloo.com
Certificate
The complete raw certificate details for galloo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISA1YTG83loPOaVGae9xpyZyoQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTYwODQ3MzFaFw0yNDA3MTUwODQ3MzBaMBUxEzARBgNVBAMT CmdhbGxvby5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCXP5iL FdYdI7UsbwfxufF65Fzs5v/+jQ5jqCO0zGLTFfXekiRPTrNFWfDAJpHxTvCyuNF/ Rdxke546BZZVD5HtFAF1QiGsveEe3jugoGv+7xB9oEeC84H9njsr+UKXFLgzssl9 97i8XU81usKQtQma1sywgs5kisO9IyqTqcijb2NAFAfbf/y45QXeko3xzf6MSqZh pGhyU1TEvuBvg2sXU7kn3i5nQt7K8Dekx+hNthymzVr+tew99SEen3W1luSJm5C9 DHuL4R0lIkGRXy6hhPpXkzULdvifJSPSOC73+pwqMVD1gqOU1GJa2r+8VX0FBc8c QZDSX02s/LudntJ5OcaHuCdotZke4VmJrKeA8c7f7lH1u+TX8O6xqf6geNKOvOkD bMHgOtp4TCNVBvJ2GPR2kYchkdwgrmfiyxKVCWWtlVe3ircmWwTrCO+PUkN/TrJt WlIYLoRIwC2ndzE+nJxlU2xyi36/kHYT4+daQpTlAKEMmO4qlyOrr3d45D5bGNwX V3wK17BFtes2KfjFJQtGpnzRcwI0wKgtwKOLoOTJ+S3Nk/l4FVgTGHYDVtvlZ46N SSTfstboEmaT5FgI+H5I2JvX5qKMgKfcnuuNxkFrTAPYtM2KWukt0KOYNJ7cFHsR OFbh1/PfDK9k/pDQPBXoOpHRP2nerZ0nQv9TrwIDAQABo4ICMDCCAiwwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSZSiJ9G+0q0a7jFsER5dE477zy5DAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzA3BgNVHREEMDAuggpnYWxsb28uY29tghBnYWxsb28uZHNw ZGV2LmJlgg53d3cuZ2FsbG9vLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYG CisGAQQB1nkCBAIEgfcEgfQA8gB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t cm/h+tQXAAABjuZN8Y4AAAQDAEgwRgIhAMq1HSx1mgRXj75zrIPvhIRaF3dWCNay BrZYHCc1uELOAiEAtzjR0vjpMgWfPlRlYR06ZXUMI2eNatxejuezPhJNsL8AdwB2 /4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY7mTfHaAAAEAwBIMEYC IQC9elT3Z1v/DYcgLp5HTTNVUCLdzy/9QbaJU59u1HqViwIhAKaMUCko1N/3ccYs msBh28qhwD4S4g4vIsEILOxTLqjlMA0GCSqGSIb3DQEBCwUAA4IBAQAi+beYuXDC +6b7uskTmd0+m/BdnUwRFzP9oBro/KXV82niFdOWRSyV67va9Nhee7XgadqwYsSm OqNuySmAHAnbPcVlyGPgBqYx5BDdvhnOIgabfYdNL6fwDYUW5FQNPp0nmkTL7gnl BUYFIwZAccOAwTW8tIEQIX16odEvqugMisaparDucvkei65UhnNmLSitNb9Zi8hz OTkBP3v/xhfR0B4HSFaV1au8PiFVbdNsaCVG+PuZYzscGAh65II6fQ2ZZ0vLLC13 Hhb0hCF8HUqYvM2kAnTdZNpf9zQZWl3Ai12RCKZc3UCpUhwCPgV3yUPfXm++11Iv xhXJSjogESDp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlz+YixXWHSO1LG8H8bnx euRc7Ob//o0OY6gjtMxi0xX13pIkT06zRVnwwCaR8U7wsrjRf0XcZHueOgWWVQ+R 7RQBdUIhrL3hHt47oKBr/u8QfaBHgvOB/Z47K/lClxS4M7LJffe4vF1PNbrCkLUJ mtbMsILOZIrDvSMqk6nIo29jQBQH23/8uOUF3pKN8c3+jEqmYaRoclNUxL7gb4Nr F1O5J94uZ0LeyvA3pMfoTbYcps1a/rXsPfUhHp91tZbkiZuQvQx7i+EdJSJBkV8u oYT6V5M1C3b4nyUj0jgu9/qcKjFQ9YKjlNRiWtq/vFV9BQXPHEGQ0l9NrPy7nZ7S eTnGh7gnaLWZHuFZiayngPHO3+5R9bvk1/Dusan+oHjSjrzpA2zB4DraeEwjVQby dhj0dpGHIZHcIK5n4ssSlQllrZVXt4q3JlsE6wjvj1JDf06ybVpSGC6ESMAtp3cx PpycZVNscot+v5B2E+PnWkKU5QChDJjuKpcjq693eOQ+WxjcF1d8CtewRbXrNin4 xSULRqZ80XMCNMCoLcCji6DkyfktzZP5eBVYExh2A1bb5WeOjUkk37LW6BJmk+RY CPh+SNib1+aijICn3J7rjcZBa0wD2LTNilrpLdCjmDSe3BR7EThW4dfz3wyvZP6Q 0DwV6DqR0T9p3q2dJ0L/U68CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290626541050503571703358968671717879654928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 08:47:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 08:47:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galloo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617039725064281542414377548842377917745935635447461675271384864634803025622074721812588653336327864932199655511968672954828461666316030166328475846674946448401599882157189238624691799551896636473272965197767331167722977309201463181061948775292511006774546417313737098425574501578377355653691858560855515016521887350221437958495320260969834635616070510418877660487025338291405478723119671513703142466045120951073983588068820608020652296710094611595303861197498369121533331129462141143261729324114775444129562205394157722579988288331396261261267577866723448598539343986252641788453419582100717584086268149035374894274247324085524027392276981935731448736733021193416744416561569111889624703145792659404040274861364590939050815894746402778034092889228076630501202891209228205790430153941359630789062300111320711054856422018062145814474607061800810327445713180304897154567675489955823108304742656631079227414901449780086993851487794214284450114594140202520741038908690539665824986622965446332455778540938390769855247566936215179655597283857261906078162829860026123113480938328128866948719309784263163347461740146045167775369129507829447918623861797315323375036354268793963545332776620325494436129580332591804005757799424680646778650842031 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 994a227d1bed2ad1aee316c111e5d138efbcf2e4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.dspdev.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galloo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee64df18e0000040300483046022100cab51d2c759a04578fbe73ac83ef84845a17775608d6b206b6581c2735b842ce022100b738d1d2f8e932059f3e5465611d3a65750c23678d6adc5e8ee7b33e124db0bf00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee64df1da0000040300483046022100bd7a54f7675bff0d87202e9e474d33555022ddcf2ffd41b689539f6ed47a958b022100a68c502928d4dff771c62c9ac061dbcaa1c03e12e20e2f22c1082cec532ea8e5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0022f9b798b970c2fba6fbbac91399dd3e9bf05d9d4c111733fda01ae8fca5d5f369e215d396452c95ebbbdaf4d85e7bb5e069dab062c4a63aa36ec929801c09db3dc565c863e006a631e410ddbe19ce22069b7d874d2fa7f00d8516e4540d3e9d279a44cbee09e505460523064071c380c135bcb48110217d7aa1d12faae80c8ac6a96ab0ee72f91e8bae548673662d28ad35bf598bc8733939013f7bffc617d1d01e07485695d5abbc3e21556dd36c682546f8fb99633b1c18087ae4823a7d0d99674bcb2c2d771e16f484217c1d4a98bccda40274dd64da5ff734195a5dc08b5d9108a65cdd40a9521c023e0577c943df5e6fbed7522fc615c94a3a201120e9