www.troax.com

Issued by R3

About this certificate

This digital certificate with serial number 03:14:da:b5:8d:bf:30:8a:cd:34:95:95:00:7b:ea:b3:80:55 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.troax.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:da:b5:8d:bf:30:8a:cd:34:95:95:00:7b:ea:b3:80:55
Serial Number (int): 268433219517479371909632672456189844619349
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:29:7c:c2:26:06:f1:51:2c:58:ba:cd:ba:c7:f2:9e:50:1b:7d:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:fc:ca:ff:79:5d:5f:7d:9d:de:ea:29:13:af:6d:60:60:87:9b:5f
Fingerprint (sha256): 2c:29:77:fb:93:ce:f9:1c:02:5d:0c:2c:64:31:2e:04:c2:62:69:6a:4f:4b:aa:94:aa:75:fd:b0:0f:c1:35:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.troax.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.troax.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

troax.com
www.troax.com

Other certificates including the domain name troax.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.troax.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtqhhqpgWfMDAyIJ4FEhc
EqXESzHq6VrvwWewZOzk1WXVYui79/RgTqaAJVNhGVZgeJt1H/ooXLL+iO3U8hSq
pTjZ+15ux+9e3tTdd5j01WmTq+0HbIZ2vQu8aTwyi8Igxsjze2EBioAzHuWjpL/j
D15xs1zAzjKRBltZjCYpSHe6pmDEYqrL1cTH1Ck9RG9F57S5mqhmB725bBS2oo0m
isT4s+605a3mUPyKH8TGVg5nQntp/QYU8Og9uWGW92OaS2ltjKNnVUN23uxWnCVs
XYuF2NqiX+poU0MUdjotAIetojstAzrCSSgeWlaVp7RC7HG1fNyUAhCPjWGBOuzb
nuw9W6PEuNIz2nDDA/cy34zchVW6zOi8gt0CugBlPhuI1RIg8o1eN1aaTI5ogUmK
ubaHP66He2eYbUzG9Ag4N88X4i93MbYKbPARCLbrDRZXPj8L5NpP9vMkC1u1yS0L
4bSfBJ12v72E/mxHHsklylrcnKTADSt4P9aUeSI5ZOYOF9xLhwEcSbN51KXzg+JE
cJrFYBVvWWT5DhefgSbNkG3wTcgW6lVGR1qqzDMoyGltAR1XNM878Q+q3kHUPquB
JCjAShgYopexpfhBiixegCPUmyA3QdBMhxpc3LzpDAV5dG/qF6vrUKh0FW5ZrZot
puq8DciJZ2o07dTsI0TRgd0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268433219517479371909632672456189844619349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 12:22:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 12:22:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.troax.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745178566573482991467044872287323956634572026270533051581807575058468666686895548644401065652187151267485873095265305432388216179644283271959136087682406719343981878493868197268129872998426637554788786793750472928538219455853430325791164662478463508852466090832926483511297157394198338427146053530419408054781695252095262206221092398817827745374791430908390398161427946761815388648222932647251379305824345853596723023788998056642996726411213803028514265337885707401293159796582488372859283943632782461701337903652971630404143286902509790137006046663661680426643235105750288679838395427014015731335758089377446568669538777027631118746356548921097869731915240215880591886665351021087437810538188308774558570575492491379818156533567749298201265967317732732362460743729734984772526347899468268410006127607649131731775987487323535434510058159512709399796291593988573644537068637654711288395328133725661291013476199814190419104678341413708380125013475802833963234869005861812564104470468567332741101917769426796848769366210737727115701743831512882858457335972791726914554565899077761972090703653282873071830184821910276544843391026017177130546688686787583265086141312593519843292126993150646243576534505071010293258908745101880546527642077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70297cc22606f1512c58bacdbac7f29e501b7da8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e09a0fe3d0000040300473045022100f286d23ce76cbf1301e9243e5327bada67ea3d861052e5e437c2be711de3d38b02202a41967449dfd4c1eda1dc2fc5b031167ed0ca8aa9347b71d56ea77b168c126c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e09a0fe3d0000040300473045022036bd2f7bb3e8816775e3c9b8da0eb0953dbf5a4d5e2b55eec99290306cd7054d02210086fc0a74c8399bb56e3a69c2eb6bdb6bd91e75e521834ef614a4bb15dbc9dc30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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