www.alfaparf.ipexpert.ro

Issued by R3

About this certificate

This digital certificate with serial number 04:81:9d:bf:fe:fe:a7:cd:0b:80:82:a1:e6:a2:54:ad:f0:7a was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.alfaparf.ipexpert.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:9d:bf:fe:fe:a7:cd:0b:80:82:a1:e6:a2:54:ad:f0:7a
Serial Number (int): 392555254755788184804291112070193466962042
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d5:be:20:c7:9c:11:78:c0:e7:4b:44:80:e1:f2:e2:a4:22:bd:d6:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:3d:02:a0:12:cf:3a:18:57:96:d0:b0:df:be:f4:0c:42:d2:dc:ee
Fingerprint (sha256): 53:d3:3b:fb:a4:e5:3d:4c:a9:c2:dd:e0:98:31:62:0e:77:4d:7b:22:33:6e:7a:7e:9d:f0:94:c0:bd:94:4c:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.alfaparf.ipexpert.ro

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.alfaparf.ipexpert.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ipexpert.ro
*.noischimbamromania.ro
*.videoconf.ro
noischimbamromania.ro
videoconf.ro
www.alfaparf.ipexpert.ro
www.alfaparf2.ipexpert.ro
www.bestletter.ipexpert.ro
www.dinamotv.ipexpert.ro
www.eucom.ipexpert.ro
www.kidding.ipexpert.ro
www.noischimbamromania.ipexpert.ro
www.nstp.ipexpert.ro
www.support.ipexpert.ro
www.videoconf.ipexpert.ro

Other certificates including the domain name ipexpert.ro

(limited to 100 certificates)
*.ipexpert.ro
ipexpert.ro
nstp.ro
romalarm.ro
cloud.ipexpert.ro
www.nstp.ipexpert.ro
transmardelivery.ro
cloud.ipexpert.ro
*.hcdinamo.ro
ipexpert.ro
ipexpert.ro
*.bestcourier.ro
winerepublic.ro
cloud.ipexpert.ro
ipexpert.ro
*.ipexpert.ro
www.universulelectricelor.ro
*.cstabucuresti.ro
federatie-popice.ro
ipexpert.ro
ipexpert.ro
olaplex.ro
www.universulelectricelor.ipexpert.ro
*.romalarm.ro
chelsea-bucuresti.com
cloud.ipexpert.ro
www.alfaparf.ipexpert.ro
cpcalendars.framarshop.ro
cloud.ipexpert.ro
www.nstp.ipexpert.ro
csstriumf.ro
ipexpert.ro
www.hidroservecotratgrup.ipexpert.ro
*.romalarm.ro
dacotrans.ro
ipexpert.ro
bestcourier.ro
olaplex.ro
winerepublic.ro
ipexpert.ro
cloud.ipexpert.ro
dinamotv.ro
ipexpert.ro
www.risball.ipexpert.ro
ipexpert.ro
www.netvolt.ipexpert.ro
sindicatgroupama.ipexpert.ro
ipexpert.ro
ipexpert.ro
nstp.ro
romalarm.ro
ipexpert.ro
eucom.ipexpert.ro
framarshop.ro
olaplex.ro
www.cstabucuresti.ipexpert.ro
chelsea-bucuresti.com
*.risball.com
federatie-popice.ro
rspiese.ro
mydentity.ro
eliteperformancesport.ro
ipexpert.ro
*.creativeschool.ro
kemon.ro
ipexpert.ro
framarshop.ro

Certificate

The complete raw certificate details for www.alfaparf.ipexpert.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupA/C8tNK4Vbudw9Kou6
Ru/uEhHWqnTaf6o21VusOH9ocDH1uvKId5MpXEI7rkk/1G7te3roZDsfv2CvEdsL
ejQfF07KlcGns4prfa64Ay6BnySh9W3F5O1B/xIrEbSlExtNPiVgpGzj7bdg7Nsj
gHwWT/ROU82hmzdlDEvUspsfcSNfHHalwUEhedzbC5Zei2seSdXhf/xqN6tA114x
tMY296Z8gNA4QLpIOE5j4UNoW2hrbwTst0GU4jm3WkZTK6+3Y+H36qKgnqUvt4YR
2BiOuZom7Y789IrMP5A4E4m/RMdbVm8UoaOVd4F84mKbp1Z6lLevL5/om5+JW7Ww
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392555254755788184804291112070193466962042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 16:46:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 16:46:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.alfaparf.ipexpert.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23551455212325086341177271613955793453983993879873445005701723372788436834454182657950187715195479463684111861901116749195303832381347047825583460060038635940240743252667753478446912159400574909891414440676673058897489665469638243328784498356089604080083561841279358960499852901840798522426847934863843401067211433467870072263143647766966577108898487690392902500317739991824984115699755421500512642729586479607676840719821658880457137499182609319306852484886562975450551298705434476991789720440216717175996406108531874211020094961868353585118267788361849551625688129141451479882769573287337138823043646601792742338577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5be20c79c1178c0e74b4480e1f2e2a422bdd6fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noischimbamromania.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoconf.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noischimbamromania.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoconf.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaparf.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaparf2.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestletter.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinamotv.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eucom.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidding.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noischimbamromania.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nstp.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoconf.ipexpert.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e38ec04b20000040300473045022063982cca472645527ec385d172b7d45d579d5bce22b18217b035ea5c51ca1ec702210099eba3fa256cee00020cde66e7309e35bd8fff7ea470a2141248fd01d240a12600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e38ec04e30000040300473045022044a16c29b700cd1cea161d12989e302ae02ba2d90efcb7dd80eaf1f62e1eb09a022100c638287d55c5ba73b4d308595b2315d718fb8dcf8c549fd71ebafeb7e777a9d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011ae2acba0fef7acd1306e979ab33ff4b23d06471e34913bea01d7494e073e9f2ae29b9415f9ebc010f495477f0d5be8b4475d9fc2a6e48655423f7a121a3d185703b19dab45670f16e26d13b6510fbbfc739826b941374cc04d857a6db9f4e928da8d59e5cd09ea96f5c4cd4bcc6bd16823c83a58d184ba99804a0ee62859b1072bbf83c5d1e69cb423894e03f06554515caf565e6884ff62ceb390a6282e7949455def996ff50637c1436394ce09e06c004e1bb70c9e9d5523aac93a318b686264e1602d28ea8942844450c88f1f6b39dc159c0aec015510b3d3ab9709eb44f0c2405bddbbf5d0c0c33438a4f4adc18d6f0a093459c01174c191c1fa0f58ed