lustralwater.com
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number fc:5b:ac:13:eb:ec:2f:b6:a4:7f:ba:5f:87:c6:a0:35 was issued on by ZeroSSL.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lustralwater.com
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): fc:5b:ac:13:eb:ec:2f:b6:a4:7f:ba:5f:87:c6:a0:35Serial Number (int): 335441444104726894266121645148904792117
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 68:20:ab:a2:a0:2a:55:04:63:95:44:77:94:de:cf:51:38:1f:c6:14
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): e7:1e:e8:b3:79:15:f4:e4:e6:7a:8e:89:de:28:ec:d9:9b:bb:97:78
Fingerprint (sha256): 1e:b8:3d:49:89:99:74:79:f0:c5:40:47:67:a8:86:02:d8:c2:f3:f6:df:cd:f6:cb:44:39:59:cf:e2:8a:2e:dc
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate lustralwater.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lustralwater.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lustralwater.com
www.lustralwater.com
www.lustralwater.com
Other certificates including the domain name lustralwater.com
(limited to 100 certificates)
lustralwater.com
apps.lustralwater.com
sw-admin-ca.tech-scheduler.com
pand99.be
arnaudjalbert.com
melodyml.com
lustralwater.com
tls.automattic.com
tls.automattic.com
www.sqroll.io
darius.cl
tls.automattic.com
tls.automattic.com
www.flumble.bio
101boardgames.com
starwinafrica.com
ashramshala.melzo.guru
lustralwater.com
apps.lustralwater.com
sw-admin-ca.tech-scheduler.com
pand99.be
arnaudjalbert.com
melodyml.com
lustralwater.com
tls.automattic.com
tls.automattic.com
www.sqroll.io
darius.cl
tls.automattic.com
tls.automattic.com
www.flumble.bio
101boardgames.com
starwinafrica.com
ashramshala.melzo.guru
lustralwater.com
Certificate
The complete raw certificate details for lustralwater.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhTCCBG2gAwIBAgIRAPxbrBPr7C+2pH+6X4fGoDUwDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMzA5MDgwMDAwMDBaFw0y MzEyMDcyMzU5NTlaMBsxGTAXBgNVBAMTEGx1c3RyYWx3YXRlci5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyJ/gl2ifUjEcg0a5o36tkTy4snVj lju5W8b51aiT+mKX3dqP+56Qiu4MYDuiV5Musg12e/qkQxP5+I0+Tw9+t3mEY5mX ZnMJYUOncvVVyR0VmvamtPSd1ZqU7y8Fxw6cAZVbzIK9CVJKZgN+1hT2sO+Rt8Ux h8EAbYCkT4Z82xuMxohm2Oa/rUltsjzeHLMlMn2day8la2QTEEK+HAV9cdXjyL0Q JNvCCFDJjDg8LLm33SshiwqDWvIUHBljTA40IVZGz7DQhnb1ZZUecZVQWZ9ssCEG nvy6yNjocq0iUbGo8UaZRBnAHeXzB9q/9Ay4j1Wwb748Mk8BGOQy3tshAgMBAAGj ggKSMIICjjAfBgNVHSMEGDAWgBTI2XhootkZaNU9ct5fCj7ctYaGpjAdBgNVHQ4E FgQUaCCroqAqVQRjlUR3lN7PUTgfxhQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB /wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAw NAYLKwYBBAGyMQECAk4wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNv bS9DUFMwCAYGZ4EMAQIBMIGIBggrBgEFBQcBAQR8MHowSwYIKwYBBQUHMAKGP2h0 dHA6Ly96ZXJvc3NsLmNydC5zZWN0aWdvLmNvbS9aZXJvU1NMUlNBRG9tYWluU2Vj dXJlU2l0ZUNBLmNydDArBggrBgEFBQcwAYYfaHR0cDovL3plcm9zc2wub2NzcC5z ZWN0aWdvLmNvbTCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AK33vvp8/xDIi509 nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABinSaGs0AAAQDAEcwRQIgfiTQkKSJA92F xdkXCRJbZGJ45J9g4FaUFgiIvn5LIt4CIQDA6MkGzC2a5dwxN6buQyVlHqQ/kR2/ doutCcglAFiF2AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB inSaGyAAAAQDAEcwRQIgMz5o/JMjC/uFm6sBA4qX4hO7aT3fsec4PAZqh2kgUQcC IQCt/c2QcvV1gBK7hvCT6mahu61wdPe1UrfIrjm/6y4WLzAxBgNVHREEKjAoghBs dXN0cmFsd2F0ZXIuY29tghR3d3cubHVzdHJhbHdhdGVyLmNvbTANBgkqhkiG9w0B AQwFAAOCAgEAHUOvSEcMbHvzOfsQl/ZOybXez1GG0NweckupS19dEscQIqmELJHu cUTSNgWfMy1HOM/gYmPhxzMqUbdXrzoLYUkkY/06s37RRRaf55bk9WE5Fsidwtwn FAB9feoIC4pEgJnpkWKJ8BXewapNVQgIZCJk4xX4ImpyhJ42YRtLIYLrmmbnUa2D agcUoaZELs53BxgUQ39YYb/iGfRkT4OxV7T8Mt4KFYuFRNnIPEcgybG0rxikXX3j AsSAA2JliVWFXfTLZg29yGW1+pDr+RH7fGGmaJrPM/W9p8hZRJ1eTYdX+I1BNBQ/ GRkl1IHiYBLxvQJXQcvqCiGTGIuKCvO9nGKtmClGLAmrMv+0afz8zLRubCgLuY8K hpIN51oGdG2Qch7E19B4Um1fj/dDlttpegB07ApbhY0+k6j2F8r0gACad5MD88Fu HF0y6VrbLFZac6dpthmCy285n9snZ7L1mg4R34vHV3H+B+fMG29yM2V7VQGDqbU6 OC8VTrTZIZRlogurBk6ADWkLCv91fLgRWxDXAFmTJfdAFZaonmjux+eh7X0xRvXm VULV9znArPvy4+uVK7w/NgloeSOXg8NODMAbSMqsJT/kc2NhUC0cs7kKc4GEF+K/ E+Ru9YwmV0Dz7imuDlgC3xxEHasJbqepbAwyPE3YOujz8l1RDQq9sTA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8if4Jdon1IxHINGuaN+ rZE8uLJ1Y5Y7uVvG+dWok/pil93aj/uekIruDGA7oleTLrINdnv6pEMT+fiNPk8P frd5hGOZl2ZzCWFDp3L1VckdFZr2prT0ndWalO8vBccOnAGVW8yCvQlSSmYDftYU 9rDvkbfFMYfBAG2ApE+GfNsbjMaIZtjmv61JbbI83hyzJTJ9nWsvJWtkExBCvhwF fXHV48i9ECTbwghQyYw4PCy5t90rIYsKg1ryFBwZY0wONCFWRs+w0IZ29WWVHnGV UFmfbLAhBp78usjY6HKtIlGxqPFGmUQZwB3l8wfav/QMuI9VsG++PDJPARjkMt7b IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335441444104726894266121645148904792117 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lustralwater.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20170822128014555423860002048885901265826046355411229147638486538852672603840621669476858296265582734557690598040490810607402839017220437746074219563809968115703961989299622858880252679939980011398983685713806722352673573078009165682668664724600087316574255974042410615035811250308326641961717808998504263108045332826040202405694606344366008590162292805764768401479343725621895774752192110529992202362584186966993244374486938374971350445808428458432136535560699186385111328143487066265370258235894875475960446495945837332340563461861838641864583719604736108045612009576298525531130478704155502058234605440041580682017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6820aba2a02a55046395447794decf51381fc614 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a749a1acd000004030047304502207e24d090a48903dd85c5d91709125b646278e49f60e05694160888be7e4b22de022100c0e8c906cc2d9ae5dc3137a6ee4325651ea43f911dbf768bad09c825005885d80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a749a1b2000000403004730450220333e68fc93230bfb859bab01038a97e213bb693ddfb1e7383c066a8769205107022100adfdcd9072f5758012bb86f093ea66a1bbad7074f7b552b7c8ae39bfeb2e162f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lustralwater.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lustralwater.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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