blog.blog.blog.rodecorix.adrian.dazoot.ro

Issued by R3

About this certificate

This digital certificate with serial number 04:6c:53:40:60:d5:85:97:19:7d:55:44:13:db:66:92:fb:61 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blog.blog.blog.rodecorix.adrian.dazoot.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6c:53:40:60:d5:85:97:19:7d:55:44:13:db:66:92:fb:61
Serial Number (int): 385310299549179699627534111998616219614049
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:d7:3e:0d:37:02:8a:db:e3:eb:e8:ef:a6:1d:e1:8b:99:1b:68:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:3a:f0:e8:99:db:82:ed:20:df:93:99:ae:2f:8c:ec:2e:5b:a8:55
Fingerprint (sha256): 26:cc:84:4c:e0:b1:e2:f2:ed:91:c6:92:8e:e4:7d:d0:8d:38:d1:e1:dd:69:d7:0f:fa:8c:b4:15:ca:84:e4:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blog.blog.blog.rodecorix.adrian.dazoot.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.blog.blog.rodecorix.adrian.dazoot.ro

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.blog.blog.rodecorix.adrian.dazoot.ro

Other certificates including the domain name dazoot.ro

(limited to 100 certificates)
a.zoot.pw
moto.newsmanapp.com
www.blog.api.adrian.dazoot.ro
blog.api.newsman.adrian.dazoot.ro
appcom.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
blog.blog.old.adrian.dazoot.ro
op.adrian.dazoot.ro
adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.newsmanro.adrian.dazoot.ro
a.zoot.pw
blog.blog.oldtimer.adrian.dazoot.ro
moto.dazoot.ro
blog.blog.kb.newsmanappcom.adrian.dazoot.ro
www2.blog.blog.newsmanfr.adrian.dazoot.ro
dazoot.ro
dazoot.ro
yyencapi.dev.adrian.dazoot.ro
webmail.newsmanapp.com
webmail.newsmanapp.com
www.blog.blog.kb.newsman.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
blog.store.adrian.dazoot.ro
moto.newsmanapp.com
beta.demo.adrian.dazoot.ro
blog.blog.blog.shop.adrian.dazoot.ro
a.zoot.pw
old.adrian.dazoot.ro
a.zoot.pw
blog.blog.blog.rodecorix.adrian.dazoot.ro
ssl.dazoot.ro
ssl.newsmanapp.eu
blog.adrian.dazoot.rodecorix.adrian.dazoot.ro
www.blog.blog.blog.newsmanapp.adrian.dazoot.ro
moto.newsmanapp.com
newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
www.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
blog.blog.store.adrian.dazoot.ro
dazoot.ro
ssl.dazoot.ro
www.blog.store.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanro.adrian.dazoot.ro
man6.newsmanapp.com
a.zoot.pw
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
ro.newsman.adrian.dazoot.ro
dmonster.dazoot.ro
shop.demo.adrian.dazoot.ro
ssl.newsmanapp.eu
blog.blog.newsmanappcom.adrian.dazoot.ro
blog.newsmanro.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro
decorix.adrian.dazoot.ro
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
dazoot.ro
oot.rodecorix.adrian.dazoot.ro
www2.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsman.adrian.dazoot.ro
www.kb.newsman.adrian.dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.demo.adrian.dazoot.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
newsmanapp.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanappcom.adrian.dazoot.ro
blog.newsmanfr.adrian.dazoot.ro
blog.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.magento.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
blog.kb.newsmanro.adrian.dazoot.ro
www.op.adrian.dazoot.ro
www.newspad.adrian.dazoot.ro
kb.newsmanappcom.adrian.dazoot.ro
newsmancom.adrian.dazoot.ro
blog.blog.blog.blog.newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
smanfr.adrian.dazoot.ro
ssl.newsmanapp.eu
www.magento.adrian.dazoot.ro
a.zoot.pw
www.op.adrian.dazoot.ro
sni.cloudflaressl.com
moto.dazoot.ro
a.zoot.pw
rt.dazoot.ro
dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.newsmanappcom.adrian.dazoot.ro
smanfr.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro

Certificate

The complete raw certificate details for blog.blog.blog.rodecorix.adrian.dazoot.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385310299549179699627534111998616219614049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 20:08:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 20:08:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.blog.blog.rodecorix.adrian.dazoot.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654254405026671908659372251117046180905979479201392208882591963668085740505018775003307434971428079918326744775507181118986740633728862531170752490397195971870322559595066092275200241575752703958503443931616564460646381183574838769171192910576708055034206364489670388751642927976064653165480423429899983667352418911198747650392811425913659043776965827809405432629696283275269080852177739377652214453587592167182818294711351416647629791138100945928698898400492213448146432724572652840332373281218083245646666933332749217951518100178686925687374412743621067336851326540948068368710060651735412019347049101861167318873080745858396663594157576167385756291975734041753643902601154914293759750784131608534980300971323806441327826760994193164773401601209676871400140240022820269442798380511687248067441484464539108073929834582642225881077442210507674040903027340697301320292527827497143959698087396798898417561518975685754177868542840567757928855535715134119401127476232410731166088279898992729660031330417217968405788088207561345715650193843344151169181314601364725278909082936201102035960153157786083100040425317930255982108967874910993853558188971742551086423182497883683950911581249099920207793677357840987711135706090531157896362514561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32d73e0d37028adbe3ebe8efa61de18b991b68e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.blog.blog.rodecorix.adrian.dazoot.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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