rosalba.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:68:b9:0a:e7:c2:63:3c:9e:00:9b:4b:c7:bb:52:5b:43:1e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rosalba.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:68:b9:0a:e7:c2:63:3c:9e:00:9b:4b:c7:bb:52:5b:43:1eSerial Number (int): 296972187757884729193795881306844275884830
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 37:e4:8e:92:b7:1f:d1:33:0c:d6:05:b1:eb:62:54:20:11:d9:87:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:5a:54:5d:3f:8f:73:31:17:b2:28:26:8c:f0:06:b3:4d:e7:15:2e
Fingerprint (sha256): 2c:a9:be:88:7b:88:31:91:2d:16:11:01:e8:04:b4:f8:e9:1d:0f:de:61:0f:9a:92:2a:a3:f3:fd:07:33:cc:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rosalba.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rosalba.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rosalba.net
Other certificates including the domain name rosalba.net
(limited to 100 certificates)
www.rosalba.net
www.rosalba.net
rosalba.net
www.rosalba.net
rosalba.net
www.bitsin.co
rosalba.net
www.rosalba.net
weekendpot.com
rosalba.net
www.winningresponses.net
fewer.net
rosalba.net
rosalba.net
rosalba.net
www.fewer.net
geranio.co
rosalba.net
rosalba.net
rosalba.net
causetravel.info
www.rosalba.net
rosalba.net
www.makeup.organic
www.rosalba.net
soireeluxx.com
www.fortcollinssportsdoctor.com
rosalba.net
www.rosalba.net
rosalba.net
www.rosalba.net
rosalba.net
www.bitsin.co
rosalba.net
www.rosalba.net
weekendpot.com
rosalba.net
www.winningresponses.net
fewer.net
rosalba.net
rosalba.net
rosalba.net
www.fewer.net
geranio.co
rosalba.net
rosalba.net
rosalba.net
causetravel.info
www.rosalba.net
rosalba.net
www.makeup.organic
www.rosalba.net
soireeluxx.com
www.fortcollinssportsdoctor.com
rosalba.net
Certificate
The complete raw certificate details for rosalba.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISA2i5CufCYzyeAJtLx7tSW0MeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxMTIwNDVaFw0x OTA4MjYxMTIwNDVaMBYxFDASBgNVBAMTC3Jvc2FsYmEubmV0MIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAvupL/6S+FpSfZaCYZ7aCMVvnC5gf3FuQ/A8J FpxIeN2DdGvOOx/6/tlfQp9zvoP7lVHhQubcgYdRrgZ5f6RpB5WAXRwUk0cc2lhY O9bIcX67Vms9JA9WNwbOXv9/WBpbaPcUssnlEFfdKViqKf7GRUTMGRLpHiLmZwJX PkPmME2DIs/4eRzNARvT1IcB8PpwbeG9chNnNq0APMNTjueY/8p+a8SVG1V1oUxW b5QXT0V5eXMkvHxVTAIk8pE2rtcQWY2j4IgGM4joYPLYcbzZvKWzQgiQr4jmYKb7 5Xvpeus7DavzyMMiozaFPTpJxGAfDpKFMrOE3scmWN7h1+BHYpDPladHp1QIU1sZ MKgMeVKZQh6hMLKrqlemPriGMjHl2R7yPTdDgbsRTzZUsDCKb6D2aHMk/4n/pIzo /mis/nf7XEvA9+fp2kAya52KUCR7W7csGwNW3kWUMf2ToXcNDd64aEZlc7G7YyKM f16PR0n5cXxIVNWSkVquK/7PjNkADVM9J/JYxzoKAv66iOmb9Jh9jf96qEV8rhLP zaUn3X8flMlS1NSf0+87vAo058GNRzFPyPOv0ObDDz3eDuFIOfNS1UdrxDSRWc1c cif5/YWwQP8VG9bKXmUCrSl3jBOIBx7NnPcgUUg36bxKLsInCu2PxouROVRvrbY0 v6nbNzUCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUN+SOkrcf 0TMM1gWx62JUIBHZh8cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtyb3NhbGJhLm5ldDBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABav5ivtIAAAQDAEgw RgIhAMYj1bZFxI2wzEYG0QzwVhWnvbL947ZmvbDpd7Ipg0MMAiEAzH1bBjTv/DgN 2ewAIqVwpDGIpgos+POsq4V1dYYU+EAAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9 daY4scdoVEvYjQAAAWr+Yr7yAAAEAwBHMEUCIHGlSTcM30UzQHx5oMiKe1GLxNon d4XZV4ODLmAiFY7/AiEAoMpG4aat9TufpO+EGhCLoMX1Sb1SFqPesHoETLY4QbEw DQYJKoZIhvcNAQELBQADggEBAAxgUPe8DPswbfYBo0u8TzRVbdNKGydN1Rtoyv34 tc9Us0fhSQSLII/kXHdRuGGXs8I/NBzqkf6lv04858jflHvazisYLjnQbwt3fGYU aJoROuTZnjAbYdU85HpRzcwuquREddSIAXaJVHPw1ESOmSSx+mWHMWhIP9w7hTqa LALFLLuvZAGkxOGvWrGy/V9JnGLpVv24Pn6Na05S1VC+xjNPB+tkSSlMuFSdwdjO EvuiRI0RYJ8+9045buNGR7suEZJPfgQcrJ/FHpGlsUxuIr5NgMinRcIijteiiO1x +cPBNHb3S5rIAM1Jf3IzccCEOtAlrp/cCwjS5bt80XzOQ7Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvupL/6S+FpSfZaCYZ7aC MVvnC5gf3FuQ/A8JFpxIeN2DdGvOOx/6/tlfQp9zvoP7lVHhQubcgYdRrgZ5f6Rp B5WAXRwUk0cc2lhYO9bIcX67Vms9JA9WNwbOXv9/WBpbaPcUssnlEFfdKViqKf7G RUTMGRLpHiLmZwJXPkPmME2DIs/4eRzNARvT1IcB8PpwbeG9chNnNq0APMNTjueY /8p+a8SVG1V1oUxWb5QXT0V5eXMkvHxVTAIk8pE2rtcQWY2j4IgGM4joYPLYcbzZ vKWzQgiQr4jmYKb75Xvpeus7DavzyMMiozaFPTpJxGAfDpKFMrOE3scmWN7h1+BH YpDPladHp1QIU1sZMKgMeVKZQh6hMLKrqlemPriGMjHl2R7yPTdDgbsRTzZUsDCK b6D2aHMk/4n/pIzo/mis/nf7XEvA9+fp2kAya52KUCR7W7csGwNW3kWUMf2ToXcN Dd64aEZlc7G7YyKMf16PR0n5cXxIVNWSkVquK/7PjNkADVM9J/JYxzoKAv66iOmb 9Jh9jf96qEV8rhLPzaUn3X8flMlS1NSf0+87vAo058GNRzFPyPOv0ObDDz3eDuFI OfNS1UdrxDSRWc1ccif5/YWwQP8VG9bKXmUCrSl3jBOIBx7NnPcgUUg36bxKLsIn Cu2PxouROVRvrbY0v6nbNzUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296972187757884729193795881306844275884830 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 11:20:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 11:20:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosalba.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778866153525615977139653704653544786444714723474044483003733430829400836364455489123941460270106772829029857954140504860939408704800469726092317405739252343054169964892459160671197821801285454931093298353384295591755248819231788568124384917674240204868760473789418559304578641215505192714375076667410421204460413927669643691346532288485400420413707206822345590094776869929889963969334032467811218816221481303414262593308249118479577630372859958443150117231749852307600857341893649172958725763494518059153731016913984413445379041216850038407015898395283672461064152115865035645943944663426563844185104136283059175616890149564941530306454708434919876516430234587315406035540722506775544075624610709900681930773107591027527839654333615125794151020900189557439827347283096333840521285833128146278178325803394328890489089560435529548604857264779951445760272968313552797579839149856268703284472048880662631838963961900979585951065362939506370287358642401250695691080761807344451150546855258185295032235721700482289149234216991352628312069317596500749786731878776068702520949715582097792352109381771124710478185169406247151864808139964297455699371436531731661320644704753803611872156311858873906931847200612378954879049654850012903988999989 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37e48e92b71fd1330cd605b1eb62542011d987c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosalba.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe62bed20000040300483046022100c623d5b645c48db0cc4606d10cf05615a7bdb2fde3b666bdb0e977b22983430c022100cc7d5b0634effc380dd9ec0022a570a43188a60a2cf8f3acab8575758614f84000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe62bef20000040300473045022071a549370cdf4533407c79a0c88a7b518bc4da277785d95783832e6022158eff022100a0ca46e1a6adf53b9fa4ef841a108ba0c5f549bd5216a3deb07a044cb63841b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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