www.culturadata.culturadata.ro

Issued by R3

About this certificate

This digital certificate with serial number 03:c0:b8:b9:a9:59:71:2f:ea:9b:34:f2:89:32:42:6a:33:06 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.culturadata.culturadata.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:b8:b9:a9:59:71:2f:ea:9b:34:f2:89:32:42:6a:33:06
Serial Number (int): 326916614205057737602987180934263214846726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:c3:de:a7:97:a4:2b:cb:6f:e2:52:1f:0a:9c:b6:0f:06:8a:ee:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:71:ee:c7:53:51:09:c5:29:33:8f:cc:d0:65:a7:23:0e:5c:1e:9f
Fingerprint (sha256): 51:47:38:79:f8:56:ed:10:4f:f9:9a:4d:43:45:c3:12:6f:5f:e6:45:5f:ca:90:d1:db:3b:19:69:25:d0:a0:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.culturadata.culturadata.ro

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.culturadata.culturadata.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.culturadata.eu
*.culturadata.ro
*.patrimoniu100.ro
culturadata.eu
culturadata.ro
patrimoniu100.ro
www.culturadata.culturadata.ro
www.patrimoniu100.culturadata.ro

Other certificates including the domain name culturadata.ro

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.culturadata.culturadata.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcp0zwymOV8af5eSduFO
6eN9dT4rBlrF3pJAxR4QguTyTvWkhwSfdLDLT7c6j3cY8wQBgA0QeP34nR5peVMc
B+2Dp/rQTfbh5/PEON1Vy41JmHUiTtiuAgIhLzNWEXXKqOgL5Gw2CBPI78/E6V0d
f2xLUq9erpDqzKO0urw4h6ucfL0n1ViNXj6TUew2M2p+PB7jZDncf608aDooDPVm
GWsglctAjDT8pwowu+r0P5RhzcG87fMjONYstC2a7W3gQYAHEkIWDsn6fGWQeR0t
nD9Ql+yD6IWzV2hGjbUYftZsjBrzM3ALuXZlORLYoThU9LbBWAvZFLmfU8cBFglQ
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326916614205057737602987180934263214846726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 02:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 02:03:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.culturadata.culturadata.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24463827773147357178374320370830993191066921482736813364106739620349552285748463782503056509986785988013619078802911956576951583460001507182662950229565529547762647678230910480213786323657374276279553994141362195913000363930125278330878083651323237840656342018642859894380629270283775721213763559056574192210207750158096274300467773022129054274293003209418334353853457271574793584313029622979445114763072471537519087350472328539024453468644324007768066589344262034309582309703608219957520556749927141769347019110435201431881044192511015979821979864570105301968757588008010227973384638475358122418954600690629380493457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2c3dea797a42bcb6fe2521f0a9cb60f068aeeb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.culturadata.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.culturadata.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrimoniu100.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturadata.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturadata.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrimoniu100.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturadata.culturadata.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patrimoniu100.culturadata.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac5247832000004030046304402200b69fd7cfa1683ff8fe6e7d9262fb9daded83d7585460464b4ab229a9565df8402203b864892a881a3e4a910ca6f1b27e0eb94015b9a35adcf94a24623b4253a8e920077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac52478480000040300483046022100e775fa716d5f61b0641243e2188d2df5b0455f16788e37e0d3cba0d8a7953e43022100b59f0561ee70b42e2f28fb0a80894df485a45d796c69fad031953711cb77b071
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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