galloo.com

Issued by R10

About this certificate

This digital certificate with serial number 03:9d:31:63:41:4d:78:ea:a3:be:da:c1:44:ba:2b:ef:32:12 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=galloo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9d:31:63:41:4d:78:ea:a3:be:da:c1:44:ba:2b:ef:32:12
Serial Number (int): 314826836935545149143372686759718147797522
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:01:a3:6f:81:75:d3:0a:94:56:1e:b1:f8:50:0c:b3:a0:a1:26:fa
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): df:4a:cd:68:0a:b9:b1:63:b0:87:87:49:d8:d0:5a:b3:b5:0b:79:b5
Fingerprint (sha256): 20:1b:a4:71:68:ff:73:6b:69:43:29:20:f6:d5:d9:7f:52:f4:39:be:1c:80:6c:a1:72:82:ec:45:ca:f2:2c:0a

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate galloo.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galloo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

galloo.com
galloo.dspdev.be
www.galloo.com

Other certificates including the domain name galloo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for galloo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314826836935545149143372686759718147797522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 03:42:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 03:42:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galloo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743335892607267655963056207933900978073511571586745888635749610354906301382015379326624591320904853545860378401001747370124614149682204437747927502000536219722491135652411420616679449467912601881751389977049280593670292957873604274815544758255301163834700227568327372649230214940591314735577972785534751262631835105884830685039260137114585797833916838864236623505812068720044013446848031879918013187560940991013615339695490928306961828901593051253854348557847845802658876389724249076150159685960579958747932800115699246432855630253975808660432786163089968176201135266665059372987823673052474463836026705130089008498687542992153286746706647408799660545010919819219662788455695241274235021376999710823854368255059058573298323280693555577985084341572096167776563032322048205281014705928937330473001656023065146096641087549277018565700489802572196912509443045487937280895162954092742117788276811467991011262949314421811202750097725297589029873279414237017828530979637218622322928496926653534474871866531216944386260757358238119288989210674636975376050441893545979590134964463103076836270479939285100284747258483955149468314537195661040080294762717933472184370802819946925587974230102626565088304106301692804626541417460011111106920037273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1101a36f8175d30a94561eb1f8500cb3a0a126fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.dspdev.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galloo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001901a33ea9b00000403004830460221009449fe18b45eb5ec2d741bbcb168b54da38b0c3a87ce0359b4333cb62cb84e95022100b3b803986725c5962f15175f3ac0f42c4ee101b2c49575edcc17de696202581e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001901a33eaf10000040300483046022100a2b8574940baf0bd5ce2124b450876672fef87869d56014e77d1f94659c73248022100f49e3d299394c2388dae02b26c4a99f7271085de64a90d933334a7f4cdace784
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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