lustralwater.com

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number fc:5b:ac:13:eb:ec:2f:b6:a4:7f:ba:5f:87:c6:a0:35 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lustralwater.com

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): fc:5b:ac:13:eb:ec:2f:b6:a4:7f:ba:5f:87:c6:a0:35
Serial Number (int): 335441444104726894266121645148904792117
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 68:20:ab:a2:a0:2a:55:04:63:95:44:77:94:de:cf:51:38:1f:c6:14
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): e7:1e:e8:b3:79:15:f4:e4:e6:7a:8e:89:de:28:ec:d9:9b:bb:97:78
Fingerprint (sha256): 1e:b8:3d:49:89:99:74:79:f0:c5:40:47:67:a8:86:02:d8:c2:f3:f6:df:cd:f6:cb:44:39:59:cf:e2:8a:2e:dc

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate lustralwater.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lustralwater.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lustralwater.com
www.lustralwater.com

Other certificates including the domain name lustralwater.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lustralwater.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8if4Jdon1IxHINGuaN+
rZE8uLJ1Y5Y7uVvG+dWok/pil93aj/uekIruDGA7oleTLrINdnv6pEMT+fiNPk8P
frd5hGOZl2ZzCWFDp3L1VckdFZr2prT0ndWalO8vBccOnAGVW8yCvQlSSmYDftYU
9rDvkbfFMYfBAG2ApE+GfNsbjMaIZtjmv61JbbI83hyzJTJ9nWsvJWtkExBCvhwF
fXHV48i9ECTbwghQyYw4PCy5t90rIYsKg1ryFBwZY0wONCFWRs+w0IZ29WWVHnGV
UFmfbLAhBp78usjY6HKtIlGxqPFGmUQZwB3l8wfav/QMuI9VsG++PDJPARjkMt7b
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335441444104726894266121645148904792117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lustralwater.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20170822128014555423860002048885901265826046355411229147638486538852672603840621669476858296265582734557690598040490810607402839017220437746074219563809968115703961989299622858880252679939980011398983685713806722352673573078009165682668664724600087316574255974042410615035811250308326641961717808998504263108045332826040202405694606344366008590162292805764768401479343725621895774752192110529992202362584186966993244374486938374971350445808428458432136535560699186385111328143487066265370258235894875475960446495945837332340563461861838641864583719604736108045612009576298525531130478704155502058234605440041580682017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6820aba2a02a55046395447794decf51381fc614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a749a1acd000004030047304502207e24d090a48903dd85c5d91709125b646278e49f60e05694160888be7e4b22de022100c0e8c906cc2d9ae5dc3137a6ee4325651ea43f911dbf768bad09c825005885d80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a749a1b2000000403004730450220333e68fc93230bfb859bab01038a97e213bb693ddfb1e7383c066a8769205107022100adfdcd9072f5758012bb86f093ea66a1bbad7074f7b552b7c8ae39bfeb2e162f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lustralwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lustralwater.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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