dotafro.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:df:78:66:ea:37:aa:46:87:01:b9:2b:36:72:0a:af:9c:ad was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dotafro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:78:66:ea:37:aa:46:87:01:b9:2b:36:72:0a:af:9c:ad
Serial Number (int): 424492153274678118302798386631961603972269
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:42:88:28:cc:bc:e9:6a:8e:12:a1:13:04:d7:b8:1d:c9:fd:d3:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:cc:de:99:3e:1a:0f:6a:82:e8:c3:f4:08:5a:7e:bd:95:23:59:fe
Fingerprint (sha256): 4e:b7:8d:be:25:e4:8f:19:d4:55:0b:3d:01:73:9a:29:74:c3:74:c7:13:f7:de:47:b9:a3:18:5b:48:d1:f7:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dotafro.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dotafro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dotafro.com
www.dotafro.com

Other certificates including the domain name dotafro.com

(limited to 100 certificates)
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
guy2gay.com
sni209295.cloudflaressl.com
ssl379348.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
ssl379350.cloudflaressl.com
sni209295.cloudflaressl.com
kareaga.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
eelitesdm.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
beta.dotafro.com
sni209295.cloudflaressl.com
ssl379349.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com

Certificate

The complete raw certificate details for dotafro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424492153274678118302798386631961603972269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-05 23:04:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 23:04:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dotafro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925970157547988427291639395817182895566824729734490902279655925719838159002031918537449274094749026430106619937125623944738453901553402298345583415298922390402124405288908517642936540222210644905105904754014227049208747919223028901044457913474847567269446595638326671626594274741325467854599364355899631074722456993806853949738636335750127875646339618077180232890434311604918960609442686601338039017669943562767099972545723112020566506557421103405485772349123269978868831817590290395329215432664001209150138083036203836757945369664152041501973523115390685464463772224013096731063207838521988196055691260078632058867972782204201014231000193100320973585619248326905917473864913951057347606090039598668319436475596899625550766436315817895222971081181700569041985114210122028414433981153554837771763782058773429645190743891154152554489136517135797608054977501923374901786754029009604760156431958235890195811485322324759017997543246576887350492554090830618668353862365103832411859521269561747028560667094805927515876605052713680267003057909564983421692093927703010878538747530391961432134073740301488355163320105173036879168323203994806539577860802362302766919115706789680286379519230389196192566397412668493362345384541120213484884812437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6428828ccbce96a8e12a11304d7b81dc9fdd3d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotafro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotafro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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