subrayar.com

Issued by R3

About this certificate

This digital certificate with serial number 03:08:b9:50:cf:ca:be:95:14:76:c8:11:74:a7:16:f4:f9:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subrayar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:b9:50:cf:ca:be:95:14:76:c8:11:74:a7:16:f4:f9:28
Serial Number (int): 264305443508138999032504996096925781784872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:35:33:03:54:22:08:3f:a6:f1:9e:0a:be:76:93:d0:01:4a:94:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:9f:0c:32:8a:f3:18:41:d9:27:7c:61:1b:4f:15:6f:74:19:76:1e
Fingerprint (sha256): 3e:e2:35:06:e7:a4:5e:6d:39:20:37:04:09:21:b2:e4:8c:9f:ee:3e:68:05:2e:ec:da:33:d4:4c:85:88:c4:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate subrayar.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subrayar.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subrayar.com
www.subrayar.com

Other certificates including the domain name subrayar.com

(limited to 100 certificates)
subrayar.com
hkoffshore.com
subrayar.com

Certificate

The complete raw certificate details for subrayar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264305443508138999032504996096925781784872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 15:07:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 15:07:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subrayar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884810557466006510608145211785140571027327277225790931178305360066946326354674587164399904578811627352911805654827701010689152746082271065425414652333199721033456414678740785001025963795040428631239595600871787579575509346382847688305057361419865603777770562288418271344169980671974407330001105596360540694064053067757562182980580085877598190103022210757103055083129742032732472980967695256441878798998726571609588217558931432243758304089441416362338627458038132922181131050175777778662396046456258826724442610480098869299250924680221770953559598337352038173987159570719370265774188497176035615721494820312563015296485247374685938327905182502499802844624041619344293492418130690235185005476885788198591578099754429019054158947719520240454251079954368863489837953422338444285488087293576688190973034714509146198196778823660856777328087642621395090201524376956303018070302870630933550740784300230828459985622151751615203341225410510782953390095412095168728158982662934878059494199061352352421544174908525686274186160689843758023954205929733450874543873031197673142489124500958480728174230163791161448179367828277129359629564544408396824361038186654837909367061168650480526725237773295182350560857184388865193634965651270517750330297467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							053533035422083fa6f19e0abe7693d0014a94b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subrayar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subrayar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187ecaab1df0000040300483046022100c330e17795d87bd04ed144ef72d8412fd9bb09bf98ae8f3b8887e93ee4e2dc0602210083f1d4a8267d5763d447b22f4dbfbbff41a2fb8155e0d4055f659c6089eb22900075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187ecaab1f8000004030046304402202d3582b4e7400eb84c49551d0a0130e75f9a091952382de568ce3f3c3f3e5a6c022077e9371d82f9fcc2e873ad970baabbd1f733053f728ee53343c93106345a5958
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00448e18db1108913247e32a9480bb7f0a6c36ac804766e1be69bb3d6c062eac0d2c12115fbfcf88a0f55630388c07f9b29f4b55c4432cae5e5208cc227d1647995894a4c688cf8feb7ef6a3132421f8c65732bedf48204ba3dada95fd37ac3cea9dec12dde7625429f9447880391b28e1b2aa2b69733417fcd1f996d74cba41b3dea6730faec8f2e7d64efeeb8b7a65e8036ad597252fccf2d6fd21e6c04e1b4b58a3a4d285ea2e6bddafae0afded1a3ff2b5f6d9dc53abfe7a7243d2e2bd08e762c4e2d598ecc5f60b547b417e94c0db4a879bbc3add47ae4e6119ed4f3a8e8c8871dba52728f085a933e4de1340aa9abe147d8b28510923cefb7212db4f5876