onecloudmanagement.cloud

Issued by R3

About this certificate

This digital certificate with serial number 03:c7:1a:00:2d:58:2c:53:e3:b4:e4:5c:2c:14:17:03:29:4e was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=onecloudmanagement.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:1a:00:2d:58:2c:53:e3:b4:e4:5c:2c:14:17:03:29:4e
Serial Number (int): 329087609660132131203948402973471200717134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:18:0b:ee:6d:5c:84:28:fd:9b:c3:5a:5a:41:3d:bb:ee:d6:32:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:4a:32:7b:bf:df:f9:73:50:2a:ba:1b:87:6c:f4:41:6b:25:6c:47
Fingerprint (sha256): 44:3f:f7:87:0b:6c:e6:ab:46:9f:2d:98:59:67:e1:e8:fe:f3:cf:8a:74:5e:f7:33:ef:9b:05:53:f5:0a:7d:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate onecloudmanagement.cloud

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onecloudmanagement.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aplacetorecycle.org
arbitrageprotocol.com
buyingstartups.com
ihempbiomass.com
onecloudmanagement.cloud
prentisscounty.com
reilesacres.com
reinforcements.com
royaltaxservice.com
rxsugarpodcast.com
suggar.com
teen-miso.org
thehoacpafirm.com

Other certificates including the domain name onecloudmanagement.cloud

(limited to 100 certificates)
onecloudmanagement.cloud
ladyboy.ca
onecloudmanagement.cloud
diskjockeys.ca
onecloudmanagement.cloud
www.vrporncash.com
namepard.avail.world
onecloudmanagement.cloud
onecloudmanagement.cloud
actionalert.ca
onecloudmanagement.cloud
onecloudmanagement.cloud
onecloudmanagement.cloud
onecloudmanagement.cloud
onecloudmanagement.cloud
sann.co.za
www.myacordova.com.onecloudmanagement.cloud
tvone.co.za
denmarklive.com.onecloudmanagement.cloud
onecloudmanagement.cloud
murphyaggregates.co.uk.onecloudmanagement.cloud
onecloudmanagement.cloud

Certificate

The complete raw certificate details for onecloudmanagement.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXEpMOSQTOBQt1Or9tS9
3tk3TXeACjjnToChmRmk79O2owS8zA7WrYbIWSlMWxIAX9iv7uw3Xyj50HBy9Skr
OO5U0a/H+I+Hf/aOeVcX7/8J/ACTW4dQd/SjOluxnKFVUtMlKSo6AN6N6YmE17Vm
RwkNetkhIg9RKJquZVbsoygRqonOjaSBUiXY0vdEaHmj6VyUAtNRaGrxhofk85lK
vn0TL7HrECEsr+JFrpByn/RfwrBO5yat3jMcC2dq1FVnVR2HpbusXJikc9RqpNDA
CE0A35dO4rBnvi+htqp/TD2xUK7BiAEEIESQnF2eftaFsSRiagm2TId5izHx2FAV
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329087609660132131203948402973471200717134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 19:07:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 19:07:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onecloudmanagement.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21895028479808580816863804682551166969159311322105306260466866054317315895120535546150591706505171378470270194350528091055670459204844660263683213409991853108741521035761978154767970080899490447455714268686586907722806294838842413885017178151587816431600948019500423557675716663502874474103429590088022765783105449505565668930940384068335472654361607967153984324161872334167379099349388848370312351826259088273280113757988797075223330808877333194471434938527642762569118609994432231060762014506111058838818272594309349541523408135200282812941374783260941785643579648033728766458164177281400656206407986690431546037631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9180bee6d5c8428fd9bc35a5a413dbbeed63202
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplacetorecycle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageprotocol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyingstartups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihempbiomass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecloudmanagement.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prentisscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reilesacres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reinforcements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltaxservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teen-miso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehoacpafirm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2f2038e9000004030046304402207afd6b923c24aef975f7804364748c21dee85cdd3754e114f5429491a47908a30220583022408cf06313b38c943c1472b70f8ac5eed4bfa976cd0588450de6fca55400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f203b2700000403004730450220740aafd28b10255401c4f3662bacdccfc4f43037ea6b301e261d468ee664bd16022100d40d93f2bf7e2b45a19ac24b33e1e6326966b3ed010d373c62e4ba784cf27783
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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