*.suntex.com.pk
Issued by R3
About this certificate
This digital certificate with serial number 03:eb:61:27:ea:0a:2a:d3:ed:d5:ae:1d:d5:5f:54:1b:6d:49 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.suntex.com.pk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:eb:61:27:ea:0a:2a:d3:ed:d5:ae:1d:d5:5f:54:1b:6d:49Serial Number (int): 341432356383759282008250430334050477239625
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:7d:98:21:14:8f:2a:ed:0b:0d:41:e7:10:83:9d:14:8a:45:41:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): dc:42:12:c5:1b:a5:7f:08:1c:66:a7:aa:20:ea:66:a0:4d:af:02:d7
Fingerprint (sha256): 2f:75:37:a9:e6:d5:f4:9a:89:0b:64:ff:c9:0f:4f:c7:e1:a1:ed:31:fc:74:9b:37:e8:79:a8:67:2d:bc:92:f0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.suntex.com.pk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.suntex.com.pk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.suntex.com.pk
suntex.com.pk
suntex.com.pk
Other certificates including the domain name suntex.com.pk
(limited to 100 certificates)
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
*.suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
*.suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
suntex.com.pk
Certificate
The complete raw certificate details for *.suntex.com.pk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgISA+thJ+oKKtPt1a4d1V9UG21JMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTIxNzE5MDFaFw0yNDA1MTIxNzE5MDBaMBoxGDAWBgNVBAMM Dyouc3VudGV4LmNvbS5wazCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKkAI3U6RmuqOXE6FdsAyKvSgMSfDlGpnnYy0mN00ty7DMmBvIpk3qBWuF2Ai6XF Yj8Js0IRk7E6XLdQQV9whcPtXfxQKK9alWcigwnphAXjggGGnE6vVEKe6JJaOpyc yE73DdjjHOj//l0rSPCG7W+VdCygpm1Gsf9CczLIUrKP8Vz9+blGlM2GqP41/1ns HqQgCJ4SwlITC0uwJuuGWTjGoEsEp2Dbc9eyzkpFl8IcKVv9JS8RyZLLWJsEPxER jRmadVNGJiIB2VvokjJFy/eLQUsFgygQcOcUR6PgxCYqzlcOnK0CA4x2A491XMkA LbhdYvZ11S38bVxOmPnbGZ0CAwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUWn2YIRSPKu0LDUHnEIOdFIpFQSQwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wKQYDVR0RBCIwIIIPKi5zdW50ZXguY29tLnBrgg1zdW50ZXguY29tLnBrMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdv+I Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNnos9vQAABAMARzBFAiEA 4yXufvZzSdTH8GqZ0tAM5zQgPy+ikG1JfvDthf8Ix9YCIBAcp0wzB8iqWpmHeBQz 5Tqo4gI+OWPGpoJdyRafZtSuAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y b+H61BcAAAGNnos++QAABAMARjBEAiBqueZdu3PM0jiqCpFr0gVbTlR5ztUU7H5X i7xTNEzzGQIgULmWcR8zr71oWc6uLqWKDbKXRyDETAhypXngXCrrvCEwDQYJKoZI hvcNAQELBQADggEBALnuVhBKORgY9ef5IgJ7+oVjVmCPvN7rW9GSGrjSchXrToVt qLNiRP/e5ehMnTWDp8pkGL/CAUsdGHRv2/p5z72BysxD7g7G82spyqjiOWw6N1zE lzfoJJwZrwSF6MsK4a+UYItKbdrUOiVSRxnIK2Pt97p9uyS5NG3PX5kGUP/1cQN4 I3XG+EpR86+skq0QlETGjfnpCHxJenaFCial9svhk/2GR27szhYyNx4+cNu3xn56 iuR8zjyAd8e+0fU5s6sufhxoh499wtY8KO9kF9fqYgsUxmkT0X/LWt3Clhh11Q7o jyn4Jd/ppIPi9XN1dcOsZOjzvdNLrjrgtX/rkLE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQAjdTpGa6o5cToV2wDI q9KAxJ8OUamedjLSY3TS3LsMyYG8imTeoFa4XYCLpcViPwmzQhGTsTpct1BBX3CF w+1d/FAor1qVZyKDCemEBeOCAYacTq9UQp7oklo6nJzITvcN2OMc6P/+XStI8Ibt b5V0LKCmbUax/0JzMshSso/xXP35uUaUzYao/jX/WewepCAInhLCUhMLS7Am64ZZ OMagSwSnYNtz17LOSkWXwhwpW/0lLxHJkstYmwQ/ERGNGZp1U0YmIgHZW+iSMkXL 94tBSwWDKBBw5xRHo+DEJirOVw6crQIDjHYDj3VcyQAtuF1i9nXVLfxtXE6Y+dsZ nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341432356383759282008250430334050477239625 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 17:19:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 17:19:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.suntex.com.pk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21334341839858635755555714775576478848319585043247325378949339591644088203619636586656079481953101576197226667138079463269851929590660852408008358647813170926344800268626286126860997605144231507882699708290230762354915428663994978370730146678366153201935299599516522530113447903620997901958442906122463821792194177432669259396124209100972898282130147410797589348075030661927838868672426350529661323934387444417236841387051842903164416081618255527863579501188483919201805609467493086729787158699141960504457769509322593523232557328165201645151718480277303689796105216121750491911389734856648465831081015892223641459101 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a7d9821148f2aed0b0d41e710839d148a454124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suntex.com.pk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntex.com.pk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9e8b3dbd0000040300473045022100e325ee7ef67349d4c7f06a99d2d00ce734203f2fa2906d497ef0ed85ff08c7d60220101ca74c3307c8aa5a9987781433e53aa8e2023e3963c6a6825dc9169f66d4ae0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9e8b3ef9000004030046304402206ab9e65dbb73ccd238aa0a916bd2055b4e5479ced514ec7e578bbc53344cf319022050b996711f33afbd6859ceae2ea58a0db2974720c44c0872a579e05c2aebbc21 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b9ee56104a391818f5e7f922027bfa856356608fbcdeeb5bd1921ab8d27215eb4e856da8b36244ffdee5e84c9d3583a7ca6418bfc2014b1d18746fdbfa79cfbd81cacc43ee0ec6f36b29caa8e2396c3a375cc49737e8249c19af0485e8cb0ae1af94608b4a6ddad43a25524719c82b63edf7ba7dbb24b9346dcf5f990650fff57103782375c6f84a51f3afac92ad109444c68df9e9087c497a76850a26a5f6cbe193fd86476eecce1632371e3e70dbb7c67e7a8ae47cce3c8077c7bed1f539b3ab2e7e1c68878f7dc2d63c28ef6417d7ea620b14c66913d17fcb5addc2961875d50ee88f29f825dfe9a483e2f5737575c3ac64e8f3bdd34bae3ae0b57feb90b1