realizza.net

Issued by R3

About this certificate

This digital certificate with serial number 04:84:98:58:1b:43:78:30:64:9f:e2:99:04:0e:68:d4:db:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=realizza.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:98:58:1b:43:78:30:64:9f:e2:99:04:0e:68:d4:db:07
Serial Number (int): 393568916291058264933028459204822508559111
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:ec:e4:bc:45:b6:1b:1c:2c:72:c4:50:2c:0f:76:7e:ef:0e:8d:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:ac:b4:61:66:b9:45:e7:64:2f:94:69:f2:f7:cd:86:2e:85:e7:5e
Fingerprint (sha256): 50:2c:5e:b9:92:2d:c8:73:2d:bb:45:55:0d:9d:de:3c:6a:1a:ee:3d:da:7f:3c:bd:b1:e5:19:42:bb:15:96:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate realizza.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for realizza.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

realizza.net

Other certificates including the domain name realizza.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for realizza.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISBISYWBtDeDBkn+KZBA5o1NsHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDYwNDE5NTNaFw0yNDAyMDQwNDE5NTJaMBcxFTATBgNVBAMT
DHJlYWxpenphLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKkz
AOQR67l5DHZ5Tut8BNyU2EY9pvE8K28v+uXGIXl4Oi0Gnom0UBhMmlyxoR4bAxYg
PSKaJem2rd5XnNyg0HCfEnsNzrgCQPfUN7dyG10ND/DTGElkrfS7YRzovuWb5704
ubPo4vlln84UCAVuEu4Ryaxmdkq5lMvwOnHrIadB+KhC0wA7gdk5OwG04eELfSRy
yyJrlRmBUVdP1PZRZMAMgmYCPaEZppBj4fFRpp+nzFlzDX8Vn1CVCspeeX1eq1HJ
2jRNbDBNK7ppXo1RW1+B6Oe5/7hnM75ttKMcy+3cBtWOtDL+mXMPwuVh+3fDzWDW
b72WC2xnLDfcELtTh9u6brgr2M2lh8xFhB3Ga5+CwhpoOFKeLTB8V/jEpQ3XYSFU
JEBvcAQdR72iWNO3wk3kU3nKSs8gegAclPHfFcAgBrcEwQDgQeOamApttvBP+LoF
JyElqoFoTArghqrUKpTSEXkqX5fmTO+KJx1XwJ7raHbNgc1i2YGeybMh++sgWm++
QQFHll71oGCTdFGioUtXfsfAAVjjjLF9CUHq+bKzlHX96y3BO4LNMbnSInPt/YFu
+z5qStAQiV5jrf1ph7u+gyLqnu4HLFUiy52B1SdgS3zptPxVh21OFTkPvu2T8MxN
x7woFdzt/0cLyuYob4a1qfGD1S5lTj0nbUcRTab/AgMBAAGjggIOMIICCjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFNLs5LxFthscLHLEUCwPdn7vDo3CMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDHJlYWxpenphLm5ldDATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi6MSsw4AAAQDAEcwRQIhANaWXyhR
xVqHRhScL3rOlWnkFwNAwwEMcdFiBpCLy15JAiAmyxZkFonoxbYOSfAC9PdCMmxS
wPzLMbrFkYX4FsYETAB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABi6MSsxAAAAQDAEcwRQIhAOJ0A9cS2g2ZnFRSfq3juQKfs9QAQST1bqwQp3OX
6ggnAiA+jIy3caQvAA+H3CmkdRuA45JCTSZAex4/gnA+PnKwIzANBgkqhkiG9w0B
AQsFAAOCAQEAt+QG8t+V2bxolVhnRBYueJJKJB4z36q0oNKTX7HnWeMAphAscBfI
mcJ+jGYNYPWJr8j7+OsyDuD633hl/RFZbkttWmv5wFNd2sa+7mi7yJ4Kha4ATdik
BWBXIwnvTbNgTqZ2pWFKyYrC47aDxVfzrqQBzVi4RpTJD57AV5hhZD1L6Pa9gJFv
8BSVsvw0mSUpwGI7ato1Idc16y/QBUIoXVdxCV46L0FUMNfeLcJEumgm13spOKG6
l7ibEJSWeG88ypUqNmiGHLUfxVO8XnWL5oAoVelmlkDlZDJ3664g+3tDndu0JvDy
q+kg10fEyHCcummYATyza8rRByNHXDpP1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393568916291058264933028459204822508559111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 04:19:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 04:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'realizza.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690272644545887394879531898733511240385685761195389706411420465335114178475302147375909869680609316729149372904505688688323180926285049507938672748030481926130511973540196295002006079497436765175614106992025684695272180223473458888571270064707125060824920758971046373016240953989036680907441989470695639974686319403910720241614311768400547446203955422007240275845471823593672519948433157021839819965017206333973460455428732377790525773024007360633367848505352023184020093773370974586066269646208071412408278338398668524273270549699425042374807274948650773414127975226983155468854384875741220165723919014214390608916286435863881249580641002511142565913191694512936306820468935882188218987661657507261559907052742048498635666658705757344965238060189572743234326962913906652678386973879308609349918508612706631036021841183989191977962781226137940819367877051903697109139188155042568187299219556859376644596568161293255301684903986076698573341028867141581547963789079561140625778494100714158291756457005539623014798825106182427300847165964977353370911975871433298133892345391858492675172702091162561431808717182020790683717642736977413517661532429805250177774485522482204623638530640606781926566580252408888393462590284972438163737650943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2ece4bc45b61b1c2c72c4502c0f767eef0e8dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realizza.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba312b30e0000040300473045022100d6965f2851c55a8746149c2f7ace9569e4170340c3010c71d16206908bcb5e49022026cb16641689e8c5b60e49f002f4f742326c52c0fccb31bac59185f816c6044c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba312b3100000040300473045022100e27403d712da0d999c54527eade3b9029fb3d4004124f56eac10a77397ea082702203e8c8cb771a42f000f87dc29a4751b80e392424d26407b1e3f82703e3e72b023
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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