harta.curti-brancovenesti.patrimoniu.ro

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bf:ab:a5:71:b5:fc:ca:00:3e:b7:40:d8:84:23:04:97:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=harta.curti-brancovenesti.patrimoniu.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:ab:a5:71:b5:fc:ca:00:3e:b7:40:d8:84:23:04:97:b9
Serial Number (int): 413671232831531929023193453616422900242361
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:b6:45:9a:a2:6f:cb:97:de:b1:c9:d3:df:6d:a4:fc:62:ac:e9:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:6b:8d:27:15:96:c1:65:55:d9:e5:35:55:0c:68:d8:54:db:96:7b
Fingerprint (sha256): 41:22:da:d3:89:0b:fe:6c:64:df:0b:65:29:ee:39:a7:21:69:47:45:e5:14:00:35:69:83:6a:65:76:39:57:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate harta.curti-brancovenesti.patrimoniu.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harta.curti-brancovenesti.patrimoniu.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

harta.curti-brancovenesti.patrimoniu.ro

Other certificates including the domain name patrimoniu.ro

(limited to 100 certificates)
muzeulportilordefier.patrimoniu.ro
curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
tmi.patrimoniu.ro
harta.curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
muzeulportilordefier.patrimoniu.ro
tmi.patrimoniu.ro
muzeulportilordefier.patrimoniu.ro
andarte.com.mx
patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.ro
www.mart48.com
patrimoniu.gov.ro
curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
repertoriulmesterilor.patrimoniu.ro
www.wombatica.app
harta.curti-brancovenesti.patrimoniu.ro
muzeulportilordefier.patrimoniu.ro
harta.curti-brancovenesti.patrimoniu.ro
locknotes.app
zilelearheologiei.patrimoniu.ro
patrimoniu.gov.ro
matl.tech-college.jp
curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
artnouveau.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
mail.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
auth.gluegroups.com
patrimoniu.gov.ro
muzeulportilordefier.patrimoniu.ro
patrimoniu.ro
curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
admin.altosalentorealestate.com
muzeulportilordefier.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
patrimoniu.ro
patrimoniu.ro
curti-brancovenesti.patrimoniu.ro
ssl2739.cloudflare.com
muzeulportilordefier.patrimoniu.ro
patrimoniu.ro
ssl2739.cloudflare.com
ssl2739.cloudflare.com
www.mart48.com
patrimoniu.gov.ro
ssl2739.cloudflare.com
mail.patrimoniu.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
ssl2739.cloudflare.com
muzeulportilordefier.patrimoniu.ro
muzeulportilordefier.patrimoniu.ro
ssl2739.cloudflare.com
ssl2739.cloudflare.com
patrimoniu.gov.ro
curti-brancovenesti.patrimoniu.ro
patrimoniu.gov.ro
artnouveau.patrimoniu.ro
patrimoniu.gov.ro
www.agapetherapy.co.uk
ssl2739.cloudflare.com

Certificate

The complete raw certificate details for harta.curti-brancovenesti.patrimoniu.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF/6Rj25e40Bkx4uUBS4
luCQBbaY1/cAWcQHmJZr49dzYboqixu8Pjc7ajS1TPCRpV1M2e22tWuyUpiTBhz9
i8K3TRQX+OtP04fQemeitPhsp152lipNLxkX0m5Pc06s9+URScJuAVfC7TLemIMs
LZMcKLX5B2KOkoCXtIbLT0ZIqvlH1HLTHvhQdQX/ieCHq2lix4rgn5p+E6pMoA1q
NCWljURii6Zib4vf1Ozf1OGs4Fla9X+XsLqk4Rzj9y/ehoXZvSdcPLP9FRMpCRTH
22m1gfiADBpoatYcc/eK/ZfFn8bnPUgE+w8TgPl9si45hWv9GN3lfImEX05ifPyM
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413671232831531929023193453616422900242361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 10:04:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 10:04:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harta.curti-brancovenesti.patrimoniu.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23275176449176525414110561431180258032868193058065896465829759171252648755992461684980357619104451300869996132355114029637103901976702973392385825838179807116983943520040749778009529321571695181186786099822123631077793129373168080870714752485282283576936318328114812145745903374888117104168952983448566250378519372724758326435061717132694454361722635328798134207466512491449987224608100002462845303689224008349665400975838082413519670391970768434574286064475925961764665489326937844976568248727729727641109895762548057095646546173481321913825991776129699247466557991096794665143971319245994874711472715501689187896467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5b6459aa26fcb97deb1c9d3df6da4fc62ace975
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harta.curti-brancovenesti.patrimoniu.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc7c689f2000004030045304302203638d6dea62022d1c7344c9ebf7d518f2af421690521a49781a2ce7cae883632021f191a1b9ddbf699f655462cba96bfd91f0a151ec2646394020f87de47468b360076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fc7c68aa70000040300473045022036a35b40355d23a14c0b36dadb8f6af38fe3d1dc74263075decb8c8aaf45c55e022100a4f9fd0828220da3c877924fbc50f904f2a773557d372206f0d2bbb1e904c289
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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