rootsco.work

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:3f:9e:c6:49:3b:34:02:5e:cb:d6:48:78:cd:c4:a6:af was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rootsco.work

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:3f:9e:c6:49:3b:34:02:5e:cb:d6:48:78:cd:c4:a6:af
Serial Number (int): 312804060968699626003087046714255363843759
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:10:5e:cc:ce:d8:13:e4:79:ec:84:e9:1d:b1:7d:00:b1:84:28:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:08:2d:6b:fa:35:10:be:8e:aa:e2:fb:27:96:c5:f2:39:ac:79:a0
Fingerprint (sha256): 3c:7e:b5:8c:88:aa:ee:f5:55:fd:db:62:6d:d0:85:5d:0c:c2:b1:1a:d8:a3:54:47:c8:54:4a:a3:81:21:21:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rootsco.work

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rootsco.work

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.rootsco.work
mail.rootsco.work
rootsco.work
webdisk.rootsco.work
webmail.rootsco.work
www.rootsco.work

Other certificates including the domain name rootsco.work

(limited to 100 certificates)
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni.cloudflaressl.com
rootsco.work
ukti.me
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
anomaly.joinroots.in
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
sni67822.cloudflaressl.com
ukti.me
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
rootsco.work
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
sni67822.cloudflaressl.com
rootsco.work
sni67822.cloudflaressl.com

Certificate

The complete raw certificate details for rootsco.work in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsJ2CsVW4ngCjh90NRCC
Swe5poSWmrqUgG6eajZbeZ7x2xL3m6w6pTzQSdWvi9cRv/JL6RNoM1/T7O5kfmlz
BrxOKYws/p+VFaX3y+5gfsXrOgNJb83JC04G2jam8Xklsdwlg9FY3bVhABwrL5P5
2brzkFmi8QYKbrgnB8kSoVgPeFANqSqE6us4oQA21jhE1Mk+OZ+GXuHRc2nFyTI2
ifPfKLJlHmvdPP55ggD+btY+4MwLw3IbGEDfl1dqaqEwjW7+k+lVeOUn6MhL3Bw+
CwUf+LEl4pJjTL/UUalsg3GAbEKE3D9S8qCkh98O1CLuWbb/ILYMyERzCKwXgCum
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312804060968699626003087046714255363843759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 11:29:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 11:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rootsco.work'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22061357407373129021831114691107915873196585919670225069280308408524543636913134871017538804299900431947375163216578340271616101972456505822062128654322437246167506768323998554844829989271446305701711339993884256186702589439728268806292010040737196590616542766566682065713332742237124665396522477816749439853112910161424345340318608568237767549924281415669143669468773407687941778646776943749625296474436494782468464753506075272971352245290799755004664370391118426801597675761595303498540261546499791342725124332535918123653170901643755691783082313766423018089869025179424533375904601751801682450820117384434434156281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8105eccced813e479ec84e91db17d00b18428d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.rootsco.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rootsco.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootsco.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.rootsco.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rootsco.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rootsco.work'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4c7b674e0000040300463044022039036e08f83be30570129bca2b2b600f4efc8e56bda688c7a062cc8062aceced02204186fe30426d34c993d54d2178d1e06832a3607081b5e022a0d9149592edc705007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4c7b673b0000040300473045022100daf242529ea2d6718810e4f923b4d723a61eae984735670da491aaac86b050230220352f4ff3d70a11035319a16f960c60a2808672b6961026f794260307abec4587
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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