elumium.com

Issued by R3

About this certificate

This digital certificate with serial number 04:25:48:d6:95:61:7d:f8:cb:07:50:42:ea:76:f6:d7:02:2b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=elumium.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:48:d6:95:61:7d:f8:cb:07:50:42:ea:76:f6:d7:02:2b
Serial Number (int): 361136409900143099237190811269722950533675
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:ab:4e:53:0f:c5:49:f7:ea:81:3a:28:d2:04:d6:46:01:aa:78:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:9c:67:82:23:ba:35:af:75:86:04:01:14:38:db:6c:73:03:b6:b2
Fingerprint (sha256): 56:69:ba:0e:ce:e4:88:10:45:14:7d:2a:e2:ab:0f:58:04:97:b3:c5:6c:84:1a:92:be:5d:c3:96:25:e0:c4:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate elumium.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elumium.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elumium.com
www.elumium.com

Other certificates including the domain name elumium.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for elumium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361136409900143099237190811269722950533675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 19:11:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 19:11:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elumium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701108410139696635594905202592859386434036002173520500577239851545566482584962551272956882889635900866927964979908902652701413673811167506595061770412603739274595831687718531153624344518172223325007003280359916870132586371759165315956852554318173649989812282370287518080083262426373931911102876959353880232050933617445293526026260768363724198524617425181620119067201853243995567069985024380552230043560237930844653684238220498403763285455933629650849740479258432599701725972586110746124346400298594234964909406926337373928215056407488880414520393453070035528587737053080032590079496354656945984002356463879781777439478432772278903299814647092467656142561643745676748240861888266382453230407631468768094492304380221436885365632512154885038988644040401558747822732933974118475540765866496011749710595262222460846544989827763487860216692421337814130900796885515455973336444266640644918275122539428125635957985616330860298512489314402950436467570646484940557604407926085930391232214544127446472582811043969911723569334723726071566919469454514665165281256216322759123548238970612275399454611115904000014059572758913434367649432389679242983058272489519968735203981459047483052021981772146929198237850752105396354599600656576787016797089113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61ab4e530fc549f7ea813a28d204d64601aa7859
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elumium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elumium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b5e29ec6500000403004730450220651847881952379be74b962835f0280edf6b7fc045299e19c00abd37e22cee40022100f690b9d343759eee0026288bed63fb75ffdcfccec44e2ee87f6428da7a12c6960076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5e29ec5b0000040300473045022100faf58b8ca4614e28d9466c1280233de04203715205845f6daa1e7b969b94cffa02203cd3be5859bc069f82e03b32cc9e8525f9a5f9afa1b0e3215511dc25b21b2854
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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