glazzi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7d:0b:54:08:01:f2:d5:20:ab:1b:53:02:84:9a:5e:f1:7f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=glazzi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:0b:54:08:01:f2:d5:20:ab:1b:53:02:84:9a:5e:f1:7f
Serial Number (int): 303887211483701456892492323636404534833535
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:ca:9b:81:82:81:cf:32:bc:a5:c4:9b:62:9c:a3:70:91:e8:ea:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:92:e2:36:0c:98:9e:ee:c0:2a:49:c5:80:f1:51:ff:c3:82:b2:86
Fingerprint (sha256): 2a:29:e0:00:68:a6:bf:e8:1c:61:86:5b:a1:86:81:82:41:68:ab:78:50:68:ea:57:0a:f4:9e:f3:f1:4d:6a:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate glazzi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glazzi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glazzi.com
www.glazzi.com

Other certificates including the domain name glazzi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for glazzi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303887211483701456892492323636404534833535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 13:02:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 13:02:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glazzi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635362487395026898759053090684677253017853030939403346849136294505909153438184776842606004303900425827878249152687466881516424164795664222600707994811876224686693688569449790814138970970618094386690639190125762015677727061173924110389960230526592154358336051029597525488342635589803077430019840371658240618397118215744541400749058764712823455613878447787409815433103826914066365515669237338653856879349543019056870029933388854768591277845744962126545111895298172243237470402302730936828031882014351909928567499567232308240164996226105160527045715560106544767881025417325822440394137804975238325721390729111293325320089437143372521348969491744772629229563421504293560014680900118994599204042282443573074031728670804800203678353403557843607682891520696633426921353077567379840462538180855727835916680988020421373669944096778447388172515856616542573262972537990690477555195018572129962788388319268680284518204594812616102154945140405830598819682129038386752683480999137076695162431161711076675124559532450338510311985602800359968905047688975587048738153864206809570356156472485552850407788876228922328178244061130556428238306784270185129522573121596717332040718582307921978068693058631866610892139342030059131427442173102619038223868703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25ca9b818281cf32bca5c49b629ca37091e8ea16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glazzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glazzi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e8faae5af00000403004730450220215375c32bf20bc894dc52ab35a3b9b80912348a214ba6f2cb5b68447e150290022100d7b4b7915f3c455866a8fa455ce182c6a50566d3f9d11af55459ace2aed10faa00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e8faae5f40000040300473045022100df21050cc889d2360545d8c7b2bd3f9a027d4c61b5fae3e6c783a06f7f21f5a9022020fb42034af4fe8a35d3acb851bbf2af60b741f7a559759f328dd477b2716948
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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