galloo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:68:8e:87:44:8e:a1:e5:a1:5c:0a:ff:a5:e3:2b:74:58 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=galloo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:68:8e:87:44:8e:a1:e5:a1:5c:0a:ff:a5:e3:2b:74:58
Serial Number (int): 286997015075623622032725595241529660372056
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:b8:57:3a:ed:b0:2a:80:a6:ed:b7:67:56:c9:34:ac:fb:14:0e:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:39:5f:06:df:a3:9f:e5:a9:7b:1e:f4:d7:fe:93:70:d9:fc:d0:65
Fingerprint (sha256): 47:2e:bf:2e:00:9c:39:6a:b7:61:29:5a:46:57:37:aa:c8:02:dd:9f:8f:9c:09:0b:53:7e:f9:09:45:c0:1d:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate galloo.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galloo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

galloo.com
galloo.dspdev.be
www.galloo.com

Other certificates including the domain name galloo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for galloo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgISA0tojodEjqHloVwK/6XjK3RYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMjIwODM5MzZaFw0yMzA1MjMwODM5MzVaMBUxEzARBgNVBAMT
CmdhbGxvby5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDISMWx
F8H7R6O4e2dUuW3gEGOAu8WBzlxcstLFQKoDhDDQRd0nho9CAlY9CypywtI5UT1i
KjzGZSQ1CP7R+MjZjyik+hgWAC/ufY4VZZSD/Tf5RTienvGE0OcRTGMUfJrN3IXW
tUKu1Az1kF1bYGkQa2iBEDguDHvSHvk/ZRcvzD29LX/IX7WR6ntys9ZTbPoQBFO3
N/BoSzRuDFtKFfbRkzrsTQNMIOeyzcyz4CN31iJ+QcA4f9d2tQU2SZ3FVz0ilC44
n4x9Z3KgzSnQlvCX3CU/q3abWOyvfxgy3zzMysle7ZPhm9ysaGR2lrIqkN/NitIu
InxFDad2YG9kR7bfCpeC3d6v78WCMQUydnBDF2q2CWaOojEwSmtCv3rRKJxfh7Uc
NEdbiQO/fKDISPbJtYVPVPfkglsay/zB2BqHP87jJ1uKhscrD+i3AxibnsmKRsrx
u4sjOhPtC+wD/pFYsUWpXAOZB/50/pUShsDZyCyKvafuZ9uwURnU6kpPQexV7xYM
yYVZ6lAYQ62opZwhvtUTMgD+ogJQcInvhJMsv6OmBeUxzwXitujgPhXT7GBakP8v
9JB+C18FjagMC5lzS0IlGivCLm58sdPZx3numvsIiJDt5ezFgYVZL0QcuGbANaKY
wlHPOrAAADqYUwacH5OGpZCIca0logdoMHtQSQIDAQABo4ICZzCCAmMwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTNuFc67bAqgKbtt2dWyTSs+xQOMDAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzA3BgNVHREEMDAuggpnYWxsb28uY29tghBnYWxsb28uZHNw
ZGV2LmJlgg53d3cuZ2FsbG9vLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ALc++yTfnE26dfI5xbpY9Gxd
/ELPep81xJ4dCYEl7bSZAAABhnh+HV0AAAQDAEgwRgIhAIsrGaFaKFJJwJI8BTLH
GSX+9C6sbs38TjU6jXaDxcHtAiEA4sa2YOzL3hiMjRXgNYwePkJLXMcHZJMnSkNJ
JwXP6toAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYZ4fh1y
AAAEAwBGMEQCIAwmwRkqi6XjDl0/GQwSzdaPRnjbM50OqdO3LzfyiwlpAiBDIM1T
escEZI0nbhih7cfo8aLdLEXQX1Eesz2roKB/kzANBgkqhkiG9w0BAQsFAAOCAQEA
lEgxg3waG3T+QOa+W7zXcx1CoQbdXuUDe7Vx3S2QcgVTaCw9/AECbsEqTsIYTd6y
IOlXnykHqO78E11cqfbVR1dJ0oO/mP4jr+PI/Knp8Jv/R53tDYd8GDcUGKB+55uB
zDOGJFp5c0s18uEarjyyAWDf8voWupCgDay8G9t2HeUKTggpmfrGKOcJWuk+B8nd
uGrIdk15S2R1zcMOhuCTjWFDWMu4pP3U6zp6oXq6DRMW+KCYRQCKx+0erboKp5pg
c0QB9x07fOQ4+df56uf1lUqYWbrCP9GXL56zy2RCTaDw/4JYn1n+LmvrJsA9r94u
s2B9a45k7v1YlnzHrwY+DQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286997015075623622032725595241529660372056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 08:39:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 08:39:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galloo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817088519895429858586928074574066796549742162679176370725230817664478180404397170257472010792608379360371195676007373819376400775770462042576877825487086652910648109922612323919886606887362206968272893934558608336485077504515687732662239036505569438791427280094320017323160971871782478961933473309642297776384790458720421105277242834521763161686632363169159277409541487345140517255357439991311218347309529860660724628319222253845090580348540064609814818853839160075819900616892721223140434824055880998275996644154146540354117550052538755320845988025233926960637434463392808855947775498504892835128002611416390616340446293832720046624579601919258822973762144545668805066440015086710361190551961182719529199970461588811645558202737336915967187678656928964072862999072345266719438672112516615742469242392044087159480694347814178734588887269670632124186436207341799410234811121995968924827568125221467169153238063622773948102822748973263647968790127028923358631367629108297427589834755939109066711436790913695433183367780141013940487560098566542258022577319635023362292219974581872024018927883466763659000137636043624535455625249487794261139431071046492200882945218072334447413940259413787447224954506329896108324042828736284751568785481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdb8573aedb02a80a6edb76756c934acfb140e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galloo.dspdev.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galloo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186787e1d5d00000403004830460221008b2b19a15a285249c0923c0532c71925fef42eac6ecdfc4e353a8d7683c5c1ed022100e2c6b660eccbde188c8d15e0358c1e3e424b5cc7076493274a43492705cfeada0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186787e1d72000004030046304402200c26c1192a8ba5e30e5d3f190c12cdd68f4678db339d0ea9d3b72f37f28b096902204320cd537ac704648d276e18a1edc7e8f1a2dd2c45d05f511eb33daba0a07f93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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