goama.com

Issued by R3

About this certificate

This digital certificate with serial number 03:39:06:89:aa:cd:dd:38:c6:89:51:7b:81:13:63:01:4f:54 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goama.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:06:89:aa:cd:dd:38:c6:89:51:7b:81:13:63:01:4f:54
Serial Number (int): 280741642886738431884692798583446182121300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:ef:f5:b7:e4:e0:58:1c:3e:63:51:6c:86:6a:b3:a4:b0:ad:f3:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:57:99:59:fc:f2:e9:d3:7c:8e:47:7f:80:7d:25:89:68:50:fb:a5
Fingerprint (sha256): 54:f3:8d:b8:53:79:bc:d7:20:1c:81:1c:31:7f:ca:39:d2:f9:e2:ac:9b:80:ba:75:1b:97:c1:db:13:c6:32:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goama.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goama.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goama.com
www.goama.com

Other certificates including the domain name goama.com

(limited to 100 certificates)
www.gachurch.info
goama.com
dev.partner-portal.goama.com
aimbridge.jp
goama.com
www.goama.com
www.postmeta.com
seniorbankbr.com
sni.cloudflaressl.com
api.qa.go-games.gg
www.altswallet.com
www.goama.com
www.bhaijicricketbettingtips.com
rafaelverde.eu
www.goama.com
partner-portal.goama.com
louiderm.com
virtual.deltakosmos.com
s.wavpe.com
goama.com
www.ecolier.eu
flonex.me
flonex.me
everonenergy.com.au
warlock.games
goama.com
www.goama.com
www.goama.com
stage.nurture.goama.com
gloss.selimcan.org
stg.pentagon.re2fe.com
id.goama.com
soulqubit.com
goama.com
dev.userwat.ch
id.goama.com
goama.com
www.lcebrand.com
www.safarihomesafrica.com
goama.com
blog.qad.com.cn
dev.partner-portal.goama.com
dashboard.getactively.app
www.wassimulator.com
partner-portal.goama.com
jokerclub.joker.games
tusoft.us
goama.com
myssa.io
www.goama.com
www.goama.com
id.goama.com
www.minervainvesting.com
images.jigbox.co
portal.kv-sistem.me
youkproduction.com
mifarmacia360.com
everonenergy.com.au
www.goama.com
www.pensioenbijomya.nl
naturalrosekendall.uk
www.mapleflowmusic.com
sni.cloudflaressl.com
invoicestaging.wexsel.com
nexter.madeserres.com
beta.instaboard.app
www.mattgalloway.com
goama.com
www.joyd.co.uk
uat.undobtn.com
www.goama.com
dl-wor.rlx-staging.com
goama.com
clipvo.com

Certificate

The complete raw certificate details for goama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280741642886738431884692798583446182121300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 02:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 02:04:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936299468144641455237561772519958449254046680968647207265580925578004240863508046256217690628993313238349196568463496672885109014446471658521221706307877811482669206648048855014128976226163161789885635838127116462567395062608222631384628051418121521278579416400050429777554619625521902337733579961849245108552144442601122508270648677147267786552752746126369274650892728431317691054784845091366521244534171074289462732820855265955420256907157880080136197145683656764910046623165759831515143952325957239751464420720003719243757325926171744462473437714174300015358386886137047899418654575499217669055572567649355387966247415261017375411910661385717696245581649979366123880736359494693463873180846894337596059564436776917192283370592588711128357517092495799934148381408525088545024084711313658879962299031288220716928580309731749941388175200870294423241960328366759538449205732472254335254605479092536197137743578820736252674490951879186306802942904270877617262401218619442226628877681189600152258671834937696661356359701159729769842261691889454507110906323106245372407885845803048841602779059039230241369008254909960229877945314914338738489266699431293759857051323162386139218348325617249669855623045901755836625277724743672066012647981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5deff5b7e4e0581c3e63516c866ab3a4b0adf3a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001886a9d53c600000403004730450221008abcee88197beda4cf3238e924a860a9db289fb4833a563ccd61d403a44ef0fc02200743e4f46fa2ab9976101d84f12fa7c37cb655f659720e8d6567bd5cf367942f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001886a9d53de0000040300473045022044088a968e3c82e91a6285a096db298aa00fc82f8b44a8fead2cfbad3476df74022100ebb5598fd33ca7a803c19f195ce622e63a5d6f1348b07753860a935bfe5ded28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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