yyencapi.dev.adrian.dazoot.ro

Issued by R3

About this certificate

This digital certificate with serial number 03:d6:a3:25:05:59:6a:20:3e:4a:a0:d3:e5:e1:1a:3c:81:fc was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yyencapi.dev.adrian.dazoot.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d6:a3:25:05:59:6a:20:3e:4a:a0:d3:e5:e1:1a:3c:81:fc
Serial Number (int): 334374140703154477069797978946559981421052
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:b0:05:6c:b7:e3:db:60:15:9c:8d:77:cd:13:7e:bd:11:16:7a:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:9c:d2:18:27:67:fe:ea:76:72:5e:6b:ba:86:2b:82:74:52:f6:27
Fingerprint (sha256): 14:d7:b6:69:fb:70:d1:2f:eb:3f:95:ec:77:68:97:f7:20:bd:60:53:b5:03:a0:ea:bd:b6:30:6e:3d:1e:f6:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yyencapi.dev.adrian.dazoot.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yyencapi.dev.adrian.dazoot.ro

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yyencapi.dev.adrian.dazoot.ro

Other certificates including the domain name dazoot.ro

(limited to 100 certificates)
a.zoot.pw
moto.newsmanapp.com
www.blog.api.adrian.dazoot.ro
appcom.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
blog.blog.old.adrian.dazoot.ro
op.adrian.dazoot.ro
adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
a.zoot.pw
blog.blog.oldtimer.adrian.dazoot.ro
moto.dazoot.ro
blog.blog.kb.newsmanappcom.adrian.dazoot.ro
www2.blog.blog.newsmanfr.adrian.dazoot.ro
dazoot.ro
dazoot.ro
yyencapi.dev.adrian.dazoot.ro
webmail.newsmanapp.com
webmail.newsmanapp.com
www.blog.blog.kb.newsman.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
blog.store.adrian.dazoot.ro
moto.newsmanapp.com
beta.demo.adrian.dazoot.ro
blog.blog.blog.shop.adrian.dazoot.ro
a.zoot.pw
a.zoot.pw
blog.blog.blog.rodecorix.adrian.dazoot.ro
ssl.dazoot.ro
ssl.newsmanapp.eu
blog.adrian.dazoot.rodecorix.adrian.dazoot.ro
www.blog.blog.blog.newsmanapp.adrian.dazoot.ro
moto.newsmanapp.com
newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
www.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
blog.blog.store.adrian.dazoot.ro
dazoot.ro
ssl.dazoot.ro
www.blog.store.adrian.dazoot.ro
man6.newsmanapp.com
a.zoot.pw
ro.newsman.adrian.dazoot.ro
dmonster.dazoot.ro
shop.demo.adrian.dazoot.ro
ssl.newsmanapp.eu
blog.blog.newsmanappcom.adrian.dazoot.ro
blog.newsmanro.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro
decorix.adrian.dazoot.ro
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
dazoot.ro
www2.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsman.adrian.dazoot.ro
www.kb.newsman.adrian.dazoot.ro
blog.blog.shop.adrian.dazoot.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
newsmanapp.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanappcom.adrian.dazoot.ro
blog.newsmanfr.adrian.dazoot.ro
blog.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.magento.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
blog.kb.newsmanro.adrian.dazoot.ro
www.op.adrian.dazoot.ro
www.newspad.adrian.dazoot.ro
kb.newsmanappcom.adrian.dazoot.ro
newsmancom.adrian.dazoot.ro
blog.blog.blog.blog.newsmanfr.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
smanfr.adrian.dazoot.ro
ssl.newsmanapp.eu
www.magento.adrian.dazoot.ro
a.zoot.pw
sni.cloudflaressl.com
moto.dazoot.ro
a.zoot.pw
rt.dazoot.ro
dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.newsmanappcom.adrian.dazoot.ro
blog.blog.blog.adrian.dazoot.ro
wwwwww.www.admin.blog.blog.staging.adrian.dazoot.ro
a.zoot.pw
www.staging.adrian.dazoot.ro
a.zoot.pw
www.blog.blog.blog.blog.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
m.adrian.dazoot.rodecorix.adrian.dazoot.ro
blog.kb.newsmanfr.adrian.dazoot.ro
dazoot.ro
lucian.dazoot.ro

Certificate

The complete raw certificate details for yyencapi.dev.adrian.dazoot.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISA9ajJQVZaiA+SqDT5eEaPIH8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDMwMDQ2NTFaFw0yNDA3MDIwMDQ2NTBaMCgxJjAkBgNVBAMT
HXl5ZW5jYXBpLmRldi5hZHJpYW4uZGF6b290LnJvMIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEAvlf/k64d/0rvv+101sxaujD5sdPdzOaUtZR2e0/B4O5O
st49FS+37fTjo6FkiAsEUy+C0w6A9BIWrTbcxBW0v2j/skqOVCg84Eb27WhQSeke
7sci+mA9wcW8T3z9Xs1hATB9gQiIF3BUCNOz1FVXx0c8AlzMhSYVZU6liwfsW/u4
O0NFL6yX9+p60DOuKnzqAfDcgQM53K5h2A/vfm2HXh1ljxWNdZC7kueVaC6H7wAn
cEH9EyxwXf7o0KLPXj6Xb2gXdKLZs03xrNJ501GMgrNPXsM2GORO0VlEszVonZ0E
Otu0L0YQfXYnlvQiSKpYceVecM3C7dnL7razgshFpv3EyvNABvFrnnM8Z4DiCNKr
0XFDmwC2rKNzVbRSL0kDyn1GWdoCBFmgqE3/vQ0nigsBAdO+FSOqH+e2nsRqXCZS
SBZyFD/gehpiAuEipSHQecB7kZjFvLaiAz35e5i66Ah59Fv+YuyR9V0pvPKkXk1y
1gUIz0/i/zEpqpqH/ujxi4OXJwFOYwvfDhu3fKFRfroVCfPeK8Ste1nT5F6d17g8
Apls0oEiSGEHwMiVw8YnSSqRmR5kPC78dKoPmUOphs+ph6cNXWcLPV8k7a52vqd/
IPlcenunkE0r0EdB9MRWsGXUQ1OcZsdwlAaYSE1sIA9WFt7R+c8csgAsCOe06ZsC
AwEAAaOCASwwggEoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYrAFbLfj22AVnI13
zRN+vREWei0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYB
BQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYI
KwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKAYDVR0RBCEwH4IdeXll
bmNhcGkuZGV2LmFkcmlhbi5kYXpvb3Qucm8wEwYDVR0gBAwwCjAIBgZngQwBAgEw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJa6eKHJjXMw
z7BYDci1zm7r1kd9LQOuiExVpUl6RWQ5dcUHi3etrj4zG5Y0x2Ri/SOxszoXF/fE
gAA49ovLR5NbP9jMe47bBWUrYlaGtJ2yZenVc4VvoyjmlANwowXDtbx5wzzHAdAt
VxtdKCizudYMP1WOZsdXUKISn7EmPn/JwKSnekIlQ2qq59jxpAj6tU/G+pJOx8BO
AZyImKFvXFi1JxGA1KFon4wsWm/rWQJkqt7QFKCBLrQuYwcub94GslZb4wXjfWZs
MDHrhOU+ZIrhbXfRo6phhguj0oT7AuTmWsJu3ESJdN+Evu/ZuIf8MPZsrao6m+VM
rp6yDNFMpiw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334374140703154477069797978946559981421052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 00:46:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 00:46:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yyencapi.dev.adrian.dazoot.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776534724232528889938975926969884700948204901228672475880837533613148843488616656726476105432500844606941268280598816229495187717375534426374498260249107864335138363070389761209035410454629729739342939881522959563056035226807332410560689472553816496904810083805236893236156854291947097560661246481684777842462526657344794200664995336603019608303913618155808752705024365588161319958523978650497497237265997117614223318062587889473606663810758976608755164411848606210881639724111055571233266220245243563946858694245461893425907263732986001237547376405587866810953934026092577285051776998177753868003973922557390247412746285561242552786525085520915138883890488039727540976023820978235872953218492379504064756549537955066851038144070813886855557205034872293985370920774555848416010968671735335038930213515384962275222962236091631317112631462987371361446699146364759168415010728074824387342451057632774477196781270376999287751634201586034183991298288858010291789102115396305238636441814530822031975526400715289308554664647044786810582243935231784550046363520742323125209623182333691285329366563457162191364850702313644607931163260914850030767520216853600131485213430744841821381092993725580395257281671174884510538653330617049081112226203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b0056cb7e3db60159c8d77cd137ebd11167a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyencapi.dev.adrian.dazoot.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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