galloo.com
Issued by R10
About this certificate
This digital certificate with serial number 03:9d:31:63:41:4d:78:ea:a3:be:da:c1:44:ba:2b:ef:32:12 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=galloo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:9d:31:63:41:4d:78:ea:a3:be:da:c1:44:ba:2b:ef:32:12Serial Number (int): 314826836935545149143372686759718147797522
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 11:01:a3:6f:81:75:d3:0a:94:56:1e:b1:f8:50:0c:b3:a0:a1:26:fa
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8
Fingerprint (sha1): df:4a:cd:68:0a:b9:b1:63:b0:87:87:49:d8:d0:5a:b3:b5:0b:79:b5
Fingerprint (sha256): 20:1b:a4:71:68:ff:73:6b:69:43:29:20:f6:d5:d9:7f:52:f4:39:be:1c:80:6c:a1:72:82:ec:45:ca:f2:2c:0a
Issuing Certificate URL: http://r10.i.lencr.org/
Revocation information
OCSP Server: http://r10.o.lencr.orgCheck the revocation status for certificate galloo.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for galloo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
galloo.com
galloo.dspdev.be
www.galloo.com
galloo.dspdev.be
www.galloo.com
Other certificates including the domain name galloo.com
(limited to 100 certificates)
*.galloo.com
*.galloo.com
galloo.com
owa.galloo.com
uat-stapels.galloo.com
*.galloo.com
galloo.com
telework.galloo.com
sovaga.be
owa.galloo.com
*.galloo.com
galloo.com
galloo.com
owa.galloo.com
galloo.com
exchange.galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
stapels.galloo.com
*.galloo.com
*.galloo.com
*.galloo.com
galloo.com
owa.galloo.com
uat-stapels.galloo.com
*.galloo.com
galloo.com
telework.galloo.com
sovaga.be
owa.galloo.com
*.galloo.com
galloo.com
galloo.com
owa.galloo.com
galloo.com
exchange.galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
galloo.com
stapels.galloo.com
*.galloo.com
*.galloo.com
Certificate
The complete raw certificate details for galloo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISA50xY0FNeOqjvtrBRLor7zISMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTAwHhcNMjQwNjE1MDM0MjA4WhcNMjQwOTEzMDM0MjA3WjAVMRMwEQYDVQQD EwpnYWxsb28uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtjTA roxAMi5jJtBUkSQsdvAHNrhi5gpwpajZFDUB/MpOoBv2GuMMSL+InREvEOj4DGh6 Ik8/R7jX4Rt2dN3cCxnbKaLQz1ej7cm8bqhTFbeSGaH+SAquBX/lITfWoTT6zEbw 8FI0t9HCeB8an1IsvbtNI5j2b9fY9LmJr1UUv00Km4Pv6d1AZUwyjf3EekmmUcXa jB7A0k3+BI7zxtYkeNCZoio4T2wi/CSiybFkELPQRVAOCB7NKEjYa1EzDPd/gaJ7 KwNMeDfqImpxF5E4aV/JY3D8VvSZ7qF2U0vfWueDzj7dUW3rQS3LFcpNssLvHZQC mRzlbWvfs63kFnjgBNOBiQ7iZ4YZUxv/H1Sq4F5Q4BHuAfGLWCYt/xuJyJi5YJgs MCrFkPCT8diAahMHwHHMdA+ck22A8KGvwWJfEoU2JPWFBNsbS/bGISf0vNwtY1VL ij6d7DNX6+ORN95jz+tKOXqh9QBmIR7hsu5uuv7Z/NXWRzeV9g1xy0art9RvYlur O3z2K17Zm7LV1NxeXbJTbUaS61LOK0Sl6ErePSUK3sCP5LDw5i81wuQ9LfdwXEv/ qymanIMSlccU/0OxnUnXG7ozeabo0Z3ZCIYc+Dz1wZmBAG+5w/0pBjL2XRExRPOh NxXyC9BSkh/meK0kW1j+zliYp/MxEwRcRCRXu5kCAwEAAaOCAjIwggIuMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUEQGjb4F10wqUVh6x+FAMs6ChJvowHwYDVR0jBBgw FoAUu7zDR6XkvKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUF BzABhhZodHRwOi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8v cjEwLmkubGVuY3Iub3JnLzA3BgNVHREEMDAuggpnYWxsb28uY29tghBnYWxsb28u ZHNwZGV2LmJlgg53d3cuZ2FsbG9vLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABkBoz6psAAAQDAEgwRgIhAJRJ/hi0XrXsLXQbvLFotU2jiww6 h84DWbQzPLYsuE6VAiEAs7gDmGclxZYvFRdfOsD0LE7hAbLElXXtzBfeaWICWB4A dwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAZAaM+rxAAAEAwBI MEYCIQCiuFdJQLrwvVziEktFCHZnL++Hhp1WAU530flGWccySAIhAPSePSmTlMI4 ja4CsmxKmfcnEIXeZKkNkzM0p/TNrOeEMA0GCSqGSIb3DQEBCwUAA4IBAQDImjws Yqf+qlYDNPOiFJ66NSxLRAnjO6jr52wyAf0sceEcnkLScgUNdOUxRrX7+mvBzvwd sN1lG7s+NmHH803ZVtnxt3AxyHZ9Qxd5Qt18vO1zYEMbTHly6H8EMd/pFy4zU8Jg WxxkDur/upDf5Q6BeTsUxAr6tEx6KrlxHKN1mHKepK9N3sKq17CtRTvykL0JK+dF YhzXjXQLyX+Bx2QFGVoJnpdlJt6K5iuEXXdRzCGOW2AfT87FPYicKjKxnb+T1DNH XNMHYrbhsog9s4sqxJkz+7E8xFbv4ZwKlduCNpZe/27KPLBa6CDDG/wnq82gtZyl pNu0TPig0cOZtmPF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtjTAroxAMi5jJtBUkSQs dvAHNrhi5gpwpajZFDUB/MpOoBv2GuMMSL+InREvEOj4DGh6Ik8/R7jX4Rt2dN3c CxnbKaLQz1ej7cm8bqhTFbeSGaH+SAquBX/lITfWoTT6zEbw8FI0t9HCeB8an1Is vbtNI5j2b9fY9LmJr1UUv00Km4Pv6d1AZUwyjf3EekmmUcXajB7A0k3+BI7zxtYk eNCZoio4T2wi/CSiybFkELPQRVAOCB7NKEjYa1EzDPd/gaJ7KwNMeDfqImpxF5E4 aV/JY3D8VvSZ7qF2U0vfWueDzj7dUW3rQS3LFcpNssLvHZQCmRzlbWvfs63kFnjg BNOBiQ7iZ4YZUxv/H1Sq4F5Q4BHuAfGLWCYt/xuJyJi5YJgsMCrFkPCT8diAahMH wHHMdA+ck22A8KGvwWJfEoU2JPWFBNsbS/bGISf0vNwtY1VLij6d7DNX6+ORN95j z+tKOXqh9QBmIR7hsu5uuv7Z/NXWRzeV9g1xy0art9RvYlurO3z2K17Zm7LV1Nxe XbJTbUaS61LOK0Sl6ErePSUK3sCP5LDw5i81wuQ9LfdwXEv/qymanIMSlccU/0Ox nUnXG7ozeabo0Z3ZCIYc+Dz1wZmBAG+5w/0pBjL2XRExRPOhNxXyC9BSkh/meK0k W1j+zliYp/MxEwRcRCRXu5kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314826836935545149143372686759718147797522 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 03:42:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 03:42:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galloo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743335892607267655963056207933900978073511571586745888635749610354906301382015379326624591320904853545860378401001747370124614149682204437747927502000536219722491135652411420616679449467912601881751389977049280593670292957873604274815544758255301163834700227568327372649230214940591314735577972785534751262631835105884830685039260137114585797833916838864236623505812068720044013446848031879918013187560940991013615339695490928306961828901593051253854348557847845802658876389724249076150159685960579958747932800115699246432855630253975808660432786163089968176201135266665059372987823673052474463836026705130089008498687542992153286746706647408799660545010919819219662788455695241274235021376999710823854368255059058573298323280693555577985084341572096167776563032322048205281014705928937330473001656023065146096641087549277018565700489802572196912509443045487937280895162954092742117788276811467991011262949314421811202750097725297589029873279414237017828530979637218622322928496926653534474871866531216944386260757358238119288989210674636975376050441893545979590134964463103076836270479939285100284747258483955149468314537195661040080294762717933472184370802819946925587974230102626565088304106301692804626541417460011111106920037273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1101a36f8175d30a94561eb1f8500cb3a0a126fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.dspdev.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galloo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001901a33ea9b00000403004830460221009449fe18b45eb5ec2d741bbcb168b54da38b0c3a87ce0359b4333cb62cb84e95022100b3b803986725c5962f15175f3ac0f42c4ee101b2c49575edcc17de696202581e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001901a33eaf10000040300483046022100a2b8574940baf0bd5ce2124b450876672fef87869d56014e77d1f94659c73248022100f49e3d299394c2388dae02b26c4a99f7271085de64a90d933334a7f4cdace784 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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