crusolutions.com
Issued by R3
About this certificate
This digital certificate with serial number 04:2a:6c:0a:5b:49:ba:e8:c0:0e:74:75:32:d9:4e:db:3e:8e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=crusolutions.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2a:6c:0a:5b:49:ba:e8:c0:0e:74:75:32:d9:4e:db:3e:8eSerial Number (int): 362884613535774533699928464787411801161358
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2c:cc:a2:f3:b1:f7:1a:6d:59:8f:27:45:d2:60:04:04:3d:f9:2a:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:01:8b:77:4d:5a:52:af:4e:51:c6:04:63:46:83:cf:8b:83:88:97
Fingerprint (sha256): 42:2b:f1:d9:bd:e3:62:1c:6b:13:ed:c3:51:c9:cb:9f:fd:04:06:cc:7f:b0:f1:9f:8b:3f:f0:97:f7:d7:bb:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate crusolutions.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for crusolutions.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
crusolutions.com
www.crusolutions.com
www.crusolutions.com
Other certificates including the domain name crusolutions.com
(limited to 100 certificates)
crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
webmail.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
docs.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
agent.crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
agent.crusolutions.com
crusolutions.com
docs.crusolutions.com
*.crusolutions.com
crusolutions.com
webmail.crusolutions.com
agent.crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
webmail.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
docs.crusolutions.com
crusolutions.com
crusolutions.com
crusolutions.com
*.crusolutions.com
agent.crusolutions.com
crusolutions.com
*.crusolutions.com
crusolutions.com
crusolutions.com
agent.crusolutions.com
crusolutions.com
docs.crusolutions.com
*.crusolutions.com
crusolutions.com
webmail.crusolutions.com
agent.crusolutions.com
Certificate
The complete raw certificate details for crusolutions.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISBCpsCltJuujADnR1MtlO2z6OMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDkxNTQxMThaFw0yNDA2MDcxNTQxMTdaMBsxGTAXBgNVBAMT EGNydXNvbHV0aW9ucy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6RPKUOAcHEOfpv2GPaECp52samScyRoTRZysmPqTVk1/NydlnZlLfcofBtVJe K2iYDCyg6ucN6QrshkJcaEWaClgtAoFcW03DOsASf6UGMcdLG1bB+N74GDi11JhE fe+5HGhxeVol0X/Z00cGqmWOaK/z085jO17Y7DYLof+9Y9hKtgnRvMNDc2QOKMYM I/IzItqhbDAvHVikf8Oo9H2rga0n2AEOExLoefRTL/lShvSzCtXQLg8wkWHRwW9N NWdyfrZhnaaG8peGr+ZqHZzkMhMz/Gsl5DnjSJ4mMJ4UBqVyBc87bLxUGwySocDb Cj65DWDi8OU1WFjRv0lq8I4hAgMBAAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFCzMovOx9xptWY8nRdJgBAQ9+SptMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMDEGA1UdEQQqMCiCEGNydXNvbHV0aW9ucy5jb22CFHd3dy5jcnVzb2x1dGlv bnMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB 8QDvAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOJBcddwAA BAMARzBFAiEArOLtSxGDsF2XP+G2/8rMqjV7qgvtQOPmENRj3JgrTJkCIECzSjke wgm6R7aRwA3G2VTiDrgZwcQSlno88g6qjwpiAHUAouK/1h7eLy8HoNZObTen3GVD sMa1LqLat4r4mm31F9gAAAGOJBcdggAABAMARjBEAiEA5HPtfPv83mFu9+hfxBrm k5AZqe/RW3DtYBa/Yc9A6acCHyS39/eiT/amMr+o+Zz5qNKC8DoeYDe2hNRdradn 92QwDQYJKoZIhvcNAQELBQADggEBAE0GPiHkaJFcNCyxyH/z1LVIz+6qY7vW3yH3 Z1v7Or+yn7uiKjvxVDul/TyGc4lJlvDR50KujQyxcCcjUIbnu62XAmBp4lBloS7G e8suJ+459eWwUUcvS+0YGC+Pm/NM7/VYl9YBcT2wuMeAAYMWwoeLgOLdOAi+mhVU oJJ/BYhmFWtF4rOW08/c9Xapwh4pNwrcAVW6Ng+ygByUxnsoV0BWY5WSrPGYNRVV zynRNXUlbNtwgZ+QigkqxXmKoI4JRPwosAjQg2kdDbVy2Qzy4mrVcDNTQg7RcnaL NIA/1GxIjfta9bmYgKcLXcw8jsok7fp37AI+JmnjIePVvv1pCUc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukTylDgHBxDn6b9hj2hA qedrGpknMkaE0WcrJj6k1ZNfzcnZZ2ZS33KHwbVSXitomAwsoOrnDekK7IZCXGhF mgpYLQKBXFtNwzrAEn+lBjHHSxtWwfje+Bg4tdSYRH3vuRxocXlaJdF/2dNHBqpl jmiv89POYzte2Ow2C6H/vWPYSrYJ0bzDQ3NkDijGDCPyMyLaoWwwLx1YpH/DqPR9 q4GtJ9gBDhMS6Hn0Uy/5Uob0swrV0C4PMJFh0cFvTTVncn62YZ2mhvKXhq/mah2c 5DITM/xrJeQ540ieJjCeFAalcgXPO2y8VBsMkqHA2wo+uQ1g4vDlNVhY0b9JavCO IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 362884613535774533699928464787411801161358 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 15:41:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 15:41:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crusolutions.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23514324039667334603646386604411554316586613626282594269435342270971836481641084958546295535802579151738419372128446995644796943959670895601197506775725405684862823211582657713446219940286571847647558151659994227012989729817043979337301029945559740676214836165405538721819863709064507832334703063312733548928154473785543171307656611328563900628607033102985335974814746864539250874358229840514361162802725885318773315517153275205347393443131233699257137092576984385875982318876283806084193959409181613271888779258901752072895935302921827101199555687100528478466550347803372577650210645539080697069358507384130698776097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ccca2f3b1f71a6d598f2745d26004043df92a6d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusolutions.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e24171d770000040300473045022100ace2ed4b1183b05d973fe1b6ffcaccaa357baa0bed40e3e610d463dc982b4c99022040b34a391ec209ba47b691c00dc6d954e20eb819c1c412967a3cf20eaa8f0a62007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e24171d820000040300463044022100e473ed7cfbfcde616ef7e85fc41ae6939019a9efd15b70ed6016bf61cf40e9a7021f24b7f7f7a24ff6a632bfa8f99cf9a8d282f03a1e6037b684d45dada767f764 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004d063e21e468915c342cb1c87ff3d4b548cfeeaa63bbd6df21f7675bfb3abfb29fbba22a3bf1543ba5fd3c8673894996f0d1e742ae8d0cb17027235086e7bbad97026069e25065a12ec67bcb2e27ee39f5e5b051472f4bed18182f8f9bf34ceff55897d601713db0b8c780018316c2878b80e2dd3808be9a1554a0927f058866156b45e2b396d3cfdcf576a9c21e29370adc0155ba360fb2801c94c67b28574056639592acf198351555cf29d13575256cdb70819f908a092ac5798aa08e0944fc28b008d083691d0db572d90cf2e26ad5703353420ed172768b34803fd46c488dfb5af5b99880a70b5dcc3c8eca24edfa77ec023e2669e321e3d5befd690947