a0127.guj.digital

Issued by R3

About this certificate

This digital certificate with serial number 03:e5:e8:57:b1:47:46:4e:96:20:cf:d4:7a:ef:44:b8:4f:8f was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a0127.guj.digital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e5:e8:57:b1:47:46:4e:96:20:cf:d4:7a:ef:44:b8:4f:8f
Serial Number (int): 339570356040657899426221950074964518915983
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:e8:fc:a2:ba:af:71:4d:d0:6e:2f:c8:2e:10:de:fd:ec:87:18:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:81:c9:35:e2:4a:06:f1:42:ff:ce:f4:b5:42:20:b4:58:5d:b3:a1
Fingerprint (sha256): 25:4f:1a:e1:58:ce:09:07:1c:c2:e3:4a:ce:ec:ff:37:d5:7b:2a:70:a9:5d:d3:9c:33:5c:f7:fe:fa:16:3d:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a0127.guj.digital

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a0127.guj.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a0127.guj.digital

Other certificates including the domain name guj.digital

(limited to 100 certificates)
static.stern.de
static.stern.de
static.stern.de
www.guj.digital
assetcloud-stage.guj.digital
static.stern.de
confluence.guj.digital
www.stage.stern.de
b0173.guj.digital
*.stage.mobile-toolkit.guj.digital
www.guj.digital
www.stage.stern.de
static.stern.de
www.guj.digital
ki.guj.digital
static.stern.de
static.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
www.guj.digital
www.stage.stern.de
a0818.guj.digital
*.onecore-dev.guj.digital
www.guj.digital
*.harmony.guj.digital
*.das-001-prod-eks2.guj.digital
static.stern.de
www.guj.digital
static.stern.de
static.stern.de
a0162.guj.digital
static.stern.de
guj.digital
static.stern.de
*.coremedia.guj.digital
dcvtest.guj.digital
static.stern.de
a0127.guj.digital
static.stern.de
static.stern.de
static.stern.de
ck.neue-umgebung.de
api-warmup.paid.guj.digital
www.stage.stern.de
www.guj.digital
static.stern.de
static.stern.de
guj.digital
www.guj.digital
*.guj.digital
static.stern.de
*.harmony-dev.guj.digital
guj.digital
static.stern.de
static.stern.de
www.stage.stern.de
guj.digital
api.paid-dev.guj.digital
static.stern.de
www.stage.stern.de
static.stern.de
static.stern.de
das.guj.digital
static.stern.de
static.stern.de
*.harmony.guj.digital
www.stage.stern.de
static.stern.de
*.onecore-dev.guj.digital
www.guj.digital
konfi.guj.digital
www.stage.stern.de
www.stage.stern.de
static.stern.de
static.stern.de
static.stern.de
static.stern.de
*.harmony.guj.digital
www.guj.digital
static.stern.de
www.guj.digital
static.stern.de
static.stern.de
s3repo.guj.digital
guj.digital
www.guj.digital
static.stern.de
static.stern.de
diginet.guj.digital
static.stern.de
static.stern.de
static.stern.de
*.harmony-dev.guj.digital
paid-preview.stern.de
api.paid.guj.digital
static.stern.de
*.aws-dvs.guj.digital
www.stage.stern.de
*.harmony-dev.guj.digital

Certificate

The complete raw certificate details for a0127.guj.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AlzHlA/32Uz6/j+q/fZ
GAcJdKVMM3Vv1GgqmA6ZaSy5fqZpS5VSo2yUU5daUXtGFOVY5MU3rLepJSLiWh14
qv8nTPGJWCMUHBSLjJNQEJfSw0LO3ew9mAlsMb2WN1kQaBSQ12/oBpN0WWoAmIUp
wtei7b2QJIXea/3eoOTh7C586azo5aRpaQE2C8eIUhFjDGK2lRKwigWxPBcq/ANo
Sjv6o7oRJCK2+TImumvHwTgSS9kw5TBk5ZMt3w7ZHXfALrmiHpNzKffNSkkHic0F
mZ4GCBVNv2N1X5B+QXRLK+dlILZAJMNgaGwJtVa/8mfPmk48CUJnJphydVwpvjNl
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339570356040657899426221950074964518915983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 07:10:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 07:10:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a0127.guj.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29796899783510897400808547974322281515823273175479537256095446747375052149714313985832506062778439631912535040616503368467078916404156911037884780437775031377974481710215374640566482652654150177328798188144092805568887718681311816021995646742074205133979858560803992041013381499267530778656849531281072172242790617722532714877690223827957470965543339897659177034963717085323311581546805547786529967172785188562930226150533155367714489386897301134847225106038667910942526762579934107277734217647806153294260295821199487175518689115548841881299977022263914127767923868772449358101382469113776881038026396400386485478731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3e8fca2baaf714dd06e2fc82e10defdec871858
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a0127.guj.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef04216cd000004030047304502205902fdd0a96d85eb7083f469fbf96508546df9e8edf8e1fbeaef042b4246f42f02210095dc312468df58f2e5276a904264f26b5e19b1f0e73142ecb9b4bd0ccf3d5f0d0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef042168a0000040300473045022100fa1869149a34f0c0750c0ad80bd387867cc99890236ebfb9693376d8664632b6022061baedc46f3381105aef4716d09c3ef31c559ebd4ab7f3089e0e28ef7719184a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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