o.factorial.io
Issued by R3
About this certificate
This digital certificate with serial number 04:b0:94:1c:b6:17:c6:4e:39:5a:06:47:3c:28:d3:83:81:30 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=o.factorial.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b0:94:1c:b6:17:c6:4e:39:5a:06:47:3c:28:d3:83:81:30Serial Number (int): 408535715126096530881839093291312197370160
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c6:04:60:93:82:87:b9:61:96:6a:9c:61:e5:cc:c7:ac:f8:db:51:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e3:e0:cf:67:5b:3b:ee:5b:26:85:ca:98:be:54:77:7f:e6:3b:d4:65
Fingerprint (sha256): 3e:13:de:3a:c3:73:41:3c:40:e2:66:ba:cc:f0:03:03:ca:d2:51:50:bd:b2:6e:45:85:f0:a3:64:d6:a3:f6:91
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate o.factorial.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for o.factorial.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
o.factorial.io
Other certificates including the domain name factorial.io
(limited to 100 certificates)
*.factorial.io
factorial.io
studioskyfox.com
www.factorial.io
factorial.io
www.semanticom.eu
segcontroll.com
redirects.factorial.io
www.echolisten.de
factorial.io
unity.maxsold.dev
www.echolisten.de
testing.oetinger.factorial.io
*.clients.factorial.io
o.factorial.io
www.bikepassclub.it
ageseg.ceosconnect.com.br
dev.chromium.org
factorial.io
*.factorial.io
*.factorial.io
joergammer-static.decasteljau.factorial.io
*.clients.factorial.io
redirects.factorial.io
www.stmh.io
realjpg.com
factorial.io
app.donogreen.com.br
acmeclin.nerit.app
hsilvaimoveis.com.br
www.semanticom.eu
www.stmh.io
www.a-zeroproduce.net
www.semanticom.eu
*.factorial.io
amt.playground.xyz
factorial.io
o.factorial.io
joergammer-static.catmull.factorial.io
*.factorial.io
*.factorial.io
www.echolisten.de
*.factorial.io
mail.factorial.io
factorial.io
*.factorial.io
factorial.io
studioskyfox.com
www.factorial.io
factorial.io
www.semanticom.eu
segcontroll.com
redirects.factorial.io
www.echolisten.de
factorial.io
unity.maxsold.dev
www.echolisten.de
testing.oetinger.factorial.io
*.clients.factorial.io
o.factorial.io
www.bikepassclub.it
ageseg.ceosconnect.com.br
dev.chromium.org
factorial.io
*.factorial.io
*.factorial.io
joergammer-static.decasteljau.factorial.io
*.clients.factorial.io
redirects.factorial.io
www.stmh.io
realjpg.com
factorial.io
app.donogreen.com.br
acmeclin.nerit.app
hsilvaimoveis.com.br
www.semanticom.eu
www.stmh.io
www.a-zeroproduce.net
www.semanticom.eu
*.factorial.io
amt.playground.xyz
factorial.io
o.factorial.io
joergammer-static.catmull.factorial.io
*.factorial.io
*.factorial.io
www.echolisten.de
*.factorial.io
mail.factorial.io
factorial.io
*.factorial.io
Certificate
The complete raw certificate details for o.factorial.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIID9jCCAt6gAwIBAgISBLCUHLYXxk45WgZHPCjTg4EwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDQxMzEyNTdaFw0yNDAzMDMxMzEyNTZaMBkxFzAVBgNVBAMT Dm8uZmFjdG9yaWFsLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA qwVbny8LJ7KLia0HPonHzvuZ7MNhrT+3mMNKQfKcFO8Iq3MlQscaLdVsGlabend8 FTBQkxiFvcbRFr10NgCaldYOx9TqUE1U924ITleyYmMv0FG9qUj7eBLgFp3s5Upq eu5SGSfdquxWgvRb16m6sQjhXM4u/l3Otow0xFXgybvpdCOErDv0aaR5dPTp5gAH CWmlqVbHDv5izWFL5sH0Mmxzq4FyL7GVrJuVhalLvibzHVFfmB+3imPhxCEaIOQx XvKydjfJrrSwnbxSCTfJrcWEaQANTB9wpwePSUwr3aw+vDzh0FVb9yS6/y4uPQdb TtniTxbP6XkEWDScx0SVeQIDAQABo4IBHTCCARkwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTGBGCTgoe5YZZqnGHlzMes+NtRvDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg5vLmZhY3RvcmlhbC5pbzATBgNVHSAEDDAKMAgGBmeBDAEC ATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlWi3zHJ F3OHjRI1eX9dckCB46Cj2Y1r7ijwhfZ6d7FH+W9vEVJCOUF1pYEb1zNVuP2rTlD/ czG4ixPIyF/xJOooeraC3NiRFQoQRpVL37ghuSvWr1qIWnZEe8xJv/Xwst94nTGh 3ZX1gZFhPpNk3/+2udYefqZyTqszs6yqr2vVuvopbi6Pbb5/RuVyZh1sQ7OY46CE Z96eDxSYu/5Gx5NYVvgbHGSAmtNNBASdDmQ9kidzul0idfLSO2GYOsdMAxF84Ag1 JYCfgsGQMQYZTVv+G96LcECrWhrnsbAy+Ox4Cm64vlRe0/U2Xv1fxYgAcseiB0SL l+oBy+YnLDM9Jw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwVbny8LJ7KLia0HPonH zvuZ7MNhrT+3mMNKQfKcFO8Iq3MlQscaLdVsGlabend8FTBQkxiFvcbRFr10NgCa ldYOx9TqUE1U924ITleyYmMv0FG9qUj7eBLgFp3s5Upqeu5SGSfdquxWgvRb16m6 sQjhXM4u/l3Otow0xFXgybvpdCOErDv0aaR5dPTp5gAHCWmlqVbHDv5izWFL5sH0 Mmxzq4FyL7GVrJuVhalLvibzHVFfmB+3imPhxCEaIOQxXvKydjfJrrSwnbxSCTfJ rcWEaQANTB9wpwePSUwr3aw+vDzh0FVb9yS6/y4uPQdbTtniTxbP6XkEWDScx0SV eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408535715126096530881839093291312197370160 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 13:12:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 13:12:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'o.factorial.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21589392227024211645641149666739447365614424028868258959021482944018894132108499473575669460633202209121290144169352607036562754853206847615752792395509550856671985528639821043688974609146942309819318339501896598129341101382688315341830347375773341766244267606599874829442076084142401063927357670635636797284213835848262929260136376675615907054091280471617372069538744091396235379819397531969450455373450436577240557287889559267246037584291160954213973307192633386295969829686748737380936902266833700719674926652619761522483769362234113325954044265834847793726057080797512350091464535619446945158850285174701628364153 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c60460938287b961966a9c61e5ccc7acf8db51bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.factorial.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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