*.ambicaflex.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:32:88:74:a1:0d:65:33:b2:45:74:f9:86:2b:7d:56:9a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.ambicaflex.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2f:32:88:74:a1:0d:65:33:b2:45:74:f9:86:2b:7d:56:9a
Serial Number (int): 364509584890006494738631877124733110408858
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:66:4f:97:96:38:e9:8d:bb:df:14:f1:cd:5c:bf:ab:bf:ed:ac:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:4b:e7:f4:77:d7:fa:7e:70:bc:ed:f9:ee:90:74:61:19:92:0c:a4
Fingerprint (sha256): 13:41:27:db:f5:aa:e9:c4:8a:54:75:b5:2b:e5:95:b8:7b:92:83:d9:e4:dd:22:ad:38:8e:64:b8:6f:cc:a7:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.ambicaflex.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ambicaflex.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ambicaflex.com
ambicaflex.amt-india.com
ambicaflex.com
www.ambicaflex.amt-india.com

Other certificates including the domain name ambicaflex.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.ambicaflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FPnNv/+MyaUzMayJVYM
EmYsvT6wSCwQcD6aVq3kZ6hR4QMdXFNx1XbWwdAPERYfiID4RX+j+WCOrBWuYtQY
A/L8lHARswx04dMnNHskXNSLJ2HMe4v3H+hI2xFG0ABLXRELyVTTF2piBn3dn4LZ
msFDob0sEPP4N9CuxIcS6XyeHidgEA//trA059fgCEFdT78G5aHXp/t+Mb5GS5ME
hvFaOBToYigE3JknuBAw4acH5K833FooBZ+WD+Gjup3KHV4B+EbGWwBm+5atnAu6
7uLsTx9aN3eHIopI5O31EbSLalTTl+zZ6wkrx2NskW0izmhsiv4FrMrIU8QG+SGR
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364509584890006494738631877124733110408858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 07:03:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 07:03:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ambicaflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27308848074235179444123972119928017948883542699019588673768142192592222331095001130686992105065446881266512810745968453592187715067549570226882486182349971138396015657780384217223702507681191175982498048234958465462857523200057447772349649894694846264910883379447151428633573523397401362412411859107515008760129617482625673854497947885328931990326235681555312791473325295538033114343530691465265057418029992759372156044434727706835801260963104806542921870950524725952859317895971746793621558260670887790634393149298041235968630050849118971208783288676996860349088208193168692459251780275907692224055797659261586215411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf664f979638e98dbbdf14f1cd5cbfabbfedac99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambicaflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambicaflex.amt-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambicaflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambicaflex.amt-india.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ead48c8a90000040300473045022002c44d83dd683b0fda8a1595788b6208563688f3206b20f35199264f34f2c0bf022100b57ed685165a8c20adf8ab073851ca3e3e0d4d9142204f19f305d524a420b8770076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ead48cba4000004030047304502203f3da762474aed224f1fb741d2af93646cc1a981f391537e40fbcf7a8bed9d64022100f4107552d88f58f108345cf030e3438884ce91d4aac9420657b17070ad426720
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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