shop.demo.adrian.dazoot.ro

Issued by R3

About this certificate

This digital certificate with serial number 03:35:1f:48:bc:64:bc:64:e8:2b:e5:43:8f:33:3b:5f:99:55 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shop.demo.adrian.dazoot.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:35:1f:48:bc:64:bc:64:e8:2b:e5:43:8f:33:3b:5f:99:55
Serial Number (int): 279413406976407752311847426939596990028117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:b0:09:74:25:e5:0b:ce:f7:00:d4:73:b8:77:af:2b:79:f2:98:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:5e:da:b8:f4:7e:c4:74:fc:2c:1d:49:a8:df:b7:ea:67:bc:a2:57
Fingerprint (sha256): 3a:d4:de:e4:30:37:a8:60:f9:ef:c8:d8:df:76:18:bc:1c:47:43:ff:94:73:fb:20:63:84:9e:9d:08:a4:ad:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.demo.adrian.dazoot.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.demo.adrian.dazoot.ro

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.demo.adrian.dazoot.ro

Other certificates including the domain name dazoot.ro

(limited to 100 certificates)
a.zoot.pw
moto.newsmanapp.com
www.blog.api.adrian.dazoot.ro
appcom.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
blog.blog.old.adrian.dazoot.ro
op.adrian.dazoot.ro
adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
a.zoot.pw
blog.blog.oldtimer.adrian.dazoot.ro
moto.dazoot.ro
blog.blog.kb.newsmanappcom.adrian.dazoot.ro
www2.blog.blog.newsmanfr.adrian.dazoot.ro
dazoot.ro
dazoot.ro
yyencapi.dev.adrian.dazoot.ro
webmail.newsmanapp.com
webmail.newsmanapp.com
www.blog.blog.kb.newsman.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
blog.store.adrian.dazoot.ro
moto.newsmanapp.com
beta.demo.adrian.dazoot.ro
blog.blog.blog.shop.adrian.dazoot.ro
a.zoot.pw
a.zoot.pw
blog.blog.blog.rodecorix.adrian.dazoot.ro
ssl.dazoot.ro
ssl.newsmanapp.eu
blog.adrian.dazoot.rodecorix.adrian.dazoot.ro
www.blog.blog.blog.newsmanapp.adrian.dazoot.ro
moto.newsmanapp.com
newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
www.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
blog.blog.store.adrian.dazoot.ro
dazoot.ro
ssl.dazoot.ro
www.blog.store.adrian.dazoot.ro
man6.newsmanapp.com
a.zoot.pw
ro.newsman.adrian.dazoot.ro
dmonster.dazoot.ro
shop.demo.adrian.dazoot.ro
ssl.newsmanapp.eu
blog.blog.newsmanappcom.adrian.dazoot.ro
blog.newsmanro.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro
decorix.adrian.dazoot.ro
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
dazoot.ro
www2.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsman.adrian.dazoot.ro
www.kb.newsman.adrian.dazoot.ro
blog.blog.shop.adrian.dazoot.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
newsmanapp.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanappcom.adrian.dazoot.ro
blog.newsmanfr.adrian.dazoot.ro
blog.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.magento.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
blog.kb.newsmanro.adrian.dazoot.ro
www.op.adrian.dazoot.ro
www.newspad.adrian.dazoot.ro
kb.newsmanappcom.adrian.dazoot.ro
newsmancom.adrian.dazoot.ro
blog.blog.blog.blog.newsmanfr.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
smanfr.adrian.dazoot.ro
ssl.newsmanapp.eu
www.magento.adrian.dazoot.ro
a.zoot.pw
sni.cloudflaressl.com
moto.dazoot.ro
a.zoot.pw
rt.dazoot.ro
dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.newsmanappcom.adrian.dazoot.ro
blog.blog.blog.adrian.dazoot.ro
wwwwww.www.admin.blog.blog.staging.adrian.dazoot.ro
a.zoot.pw
www.staging.adrian.dazoot.ro
a.zoot.pw
www.blog.blog.blog.blog.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
m.adrian.dazoot.rodecorix.adrian.dazoot.ro
blog.kb.newsmanfr.adrian.dazoot.ro
dazoot.ro
lucian.dazoot.ro

Certificate

The complete raw certificate details for shop.demo.adrian.dazoot.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5KtA+pQVGBz0J3TKllJl
8Ag1kF4OF9mHJo4XsDgReUs2od5/vZ8ikw/SRmAVKkepEjORXTq417obOx1zCoE2
t24SvRLSb9t8E264DtCTfHT0jJX5lObfWj7ojxfFqinaF+SDiZLFHQEm6/Hldbap
naWjwIHMQ5mOgKV20EzOkyDH0TKJaXyH9WwnqWEE7KIP/ZRVVtbbA6foF/NFppv5
meU9gXHc4iCEE8FTwiKNNADbZU20IJ8grCZPoAC/6woicvKiFjWx6ok87ibBN9Py
P4Uo0xbQkAzQwYgH9McdnXIkh+CSf7xXJ/eByOT2TIc2dU2UAC4Vb6yG/ZdhjUB+
0Sage1qRqdW0H7Re/uBye8XtmTw8uQ7rJGUEtCHJxP+RyUBETptJOSqJQEYMwepO
E480eqHxvoHbzhDgmfpr2uHTqGYv3VjvooKlzSTeElPfk6rQeQ+I05Z3akZQ+CF6
aCN31HfjyKpImLtdb1Pkq9/N7f6OnVAbixQOOq7b6wQzslJkopPR0Z7c1eb+BH6m
6MyAx8/SGXCNIXbE4RO0Ub2MGmbwudd7hN04oB8tF+vI0hI1tXZNnXXfcsddU7uh
FLMi5zBvGV5MYnHCCgYRfGPxqZIyRZPl7xGJ7W8lYFt8nXceNpnJkLAvt7USzz5w
Rb+JwwrRsKAIWFoHqWI1L0ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279413406976407752311847426939596990028117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 20:02:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 20:02:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.demo.adrian.dazoot.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932887967216651776488577664757204499877860697315559207971126604333406992457556572410280854934993569406676987385383033385900116007310592944776550937059365809171563663727778443480766473512360565309015741673706667986538860065242664500523942704318369139998688795227123633507053086528154314622051643998072656392786957283758644620057612102783984502442917935653539322008715609851025753383177832637918524821055071764087683607990613704857311601905933207106988280926945841374698560596874159439398784063071405202854500504002952497943523312309492356373758058330444640748624722153286100143179067574547212369049237899681517092631319937177850056130093694979331048163785690066999447889541354925156069131170193977585769840108683344022059339467004994349141534836218677889533595721142465163941879991978104247172140800721310218148312670381753465281011189342594471024646181245724015498891836777903087175111407837095001326032860677946872652457880793889466141370492426833840857782865647989992879407552542294764288132563008447588101340020507285070764510791857675702156056381431682095977053656326517938969804249323638188485781066397867382847933068109377254393020923281775007090074638345129075094310496238567840147008218305005377581607682302414415490102669121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb0097425e50bcef700d473b877af2b79f2983e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.demo.adrian.dazoot.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0082d30cbecf4d2b0215977eab4c6c17e5eed54e366f051494e679e7df800a33b0455b010b8f94f8a08b560b3bcb97ebf001eea1a9cb73f816b973407a4c44eca66fec8cbd93d213e67cf9e33f88a9d3d2d07b145aaee5e5d00730668a53f3e047f0b8437e756be142c73a84ec770f8323c6242fc4a9e5d94a0b9769bf633b112444eee1267daf6d2e140fc08d4369f351a6d22c85eb985e661ce8d936e2475129b434461c96de896534769e5da6d30f23e00e60c03b4c4af0765910b01609f21359d6a624dede4f72b47981b08ac0845896a564e3b7171237fa43dc2338a6a58b9631208426464449fb505fdfa17cee2a317bd569b25f035e1333954672a62e5c