globo.org

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:59:12:5a:b5:28:47:cc:79:32:1e:21:d5:da:82:fe:be was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=globo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:59:12:5a:b5:28:47:cc:79:32:1e:21:d5:da:82:fe:be
Serial Number (int): 403693283760970956750604696391960496373438
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:ba:ce:fa:20:84:df:8e:1c:66:c2:8b:41:c9:5c:72:5e:3b:9e:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:99:74:aa:2b:a3:ac:c1:bc:19:09:03:94:78:ef:90:3d:11:f5:f0
Fingerprint (sha256): 4f:a2:bf:50:4f:34:e0:3a:9d:00:64:94:81:db:f9:71:b5:bd:55:87:99:5b:de:01:a3:7c:dd:f1:9b:21:de:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate globo.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4gps.net
50statestrailchallenge.com.medical-spa.com
austincountyhomes.com
bengaluru.net.in
customphotocalendar.com
dfwprivateschoolguide.com
escapebitcoin.com
estate4vip.com
flowervalley.com
globo.org
iproyan.com
modearizona.com
mydietfoods.com.elasticexecutive.com
rubberstamped.com.stevensvillerecycling.com
satietyisthenewcalorie.com
slot-machines.co.za.launchfunders.com

Other certificates including the domain name globo.org

(limited to 100 certificates)
librti.ca
globo.org
arbitrage.ag
livelyconnection.club
underkilt.clothing
globo.org
internet.yoga
canadaslandtrust.ca
valueventures.properties.xbone.co.za
americanfamilyvaluespac.org
arbitrage.gd
globo.org
www.lorainflea.com.globo.org
globo.org

Certificate

The complete raw certificate details for globo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MEjoyaVFPnKr5hmMwB7
zOyHgeX5YmOgZE1ci5d0UWMBde5GqQtnasJqaAlu2KAx861YF5fqPhqAnpOxCSsy
GK8ZAQJ2xem07hW2XoSBfHi9RPW8+bZxKHpQT5kCk4kjxzzGVoC2flKyACIvzQJm
bgF/pB9keN/YrVMXDZ0QL9GA2xmVoEjZIrt0tXW+PIyrVOIFFcpm13Avt6Plx75U
3dUpI/skKxH9fWIo3HoD21S4oP8psmtzYVp9TQuTLUZlD6cl/LjwAbF/4OdpMudc
BDNi8uO84LB64hYGuix36hy4xIuTjIfQl3LjDWzvaZblrK1cisPeSVsX7VNmbYQ7
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403693283760970956750604696391960496373438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 05:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 05:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27867667585774040491112734979417201702015277700950270326371080080207923642959148943653348674316067419242831066155598128429799119401565334672281831105808596950594850618314616191658903940909110003146434514654646909881145857073167611200514717807666172707497354432350656800444330232971264119175563182506937297833614359127818864382641412474897044782351461548687169367998944232425724786442432255145729637526078894056694256535447272148040601076345139217346681230304341018182482318522819577214170941801446948306575751443758404991122615088310517507114842880806230299741548966253059094608011377716387678957309251704445387160563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47bacefa2084df8e1c66c28b41c95c725e3b9e37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4gps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statestrailchallenge.com.medical-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincountyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaluru.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customphotocalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwprivateschoolguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estate4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowervalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iproyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modearizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydietfoods.com.elasticexecutive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubberstamped.com.stevensvillerecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satietyisthenewcalorie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-machines.co.za.launchfunders.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1ed598e1000004030046304402202a4cbd4cdca52c13524dbf094c151f3d984e51aa6eeee0a8334d86d606effa7f022062a5966851c4c423cbbd8c26f631d2349c135804428836876df020c0553a40a2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1ed598ec0000040300473045022052d4e6e4f253ced0b3d35e36aea1af5257818a34259ee5349a8ff024fb00cb88022100824f4c9c421c356990ef012d6ede4b88c445ac3a7a91c977290c2cd1f411ff5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bf151e13fe439abb7bdab810c5c6fd1436538ec243857ffc2515b8082baece02fb557f13e071cb6530bb255ba49007e68a585f5cf0875ea4afe0c3a0d11af073cd734597b82dab9c2d547313b4297da21c4552afbf1c6242e5399cc4eaf6c8558b566745f5337baba854fdc683359774d50151d901ee28023d0d4061c713dc2d21523eb41c4940f2f9bdf825c5e734154428ff9b6abd83e744a18e79e6e0db38c6d9482c4716dba4f0500dcfe148af9451d6dff7ef22fe957ce3dd67c5435a12edcf04cbbb4f9ebcc4f7da756a781cb788a39f7b30465af5b4a81780a1be29d20ffb5c1721b1eed5ec83193d1eb9682efa99e7fae3363ec21273a69860ad983