www.drclocums.com

Issued by R3

About this certificate

This digital certificate with serial number 04:90:1e:ec:61:b6:1a:71:d8:fc:e6:a7:d4:1d:a4:6a:0b:30 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.drclocums.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:90:1e:ec:61:b6:1a:71:d8:fc:e6:a7:d4:1d:a4:6a:0b:30
Serial Number (int): 397490908767409728396106461171631121894192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:0e:f8:56:f1:56:51:62:69:f0:c1:54:38:e5:17:48:0e:bb:c7:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:65:a9:aa:f2:5a:12:aa:10:79:49:45:1a:14:a4:0c:7c:e2:c5:13
Fingerprint (sha256): 5b:61:cd:6d:1d:f3:7e:ef:78:34:b3:da:b0:be:85:69:b0:25:11:2f:02:e0:e0:cf:d4:d8:99:2f:c2:71:2a:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.drclocums.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.drclocums.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drclocums.com
www.drclocums.com

Other certificates including the domain name drclocums.com

(limited to 100 certificates)
drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com
www.drclocums.com
drclocums.com
drclocums.com
www.drclocums.com
drclocums.com
rds.drclocums.com
drclocums.com
drclocums.com
drclocums.com
www.drclocums.com
www.drclocums.com
owa.drclocums.com
drclocums.com
owa.drclocums.com
www.drclocums.com
drclocums.com
drclocums.com
drclocums.com
drclocums.com

Certificate

The complete raw certificate details for www.drclocums.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3nlDc9lemeJXFfZn7GX
lpl+64f4ajEdM/EvOtMZqIdSs4GpM9cTxcsRAxEVprHNVCF3lcOUkcYAHdpLkSYo
5IZ7YtvmKOuYQ8bpdwO2P1qvtUbzmDxZh6gxM4959JYxlNUuRbjqR5P2kq+IC7xi
IIg4ipu8FsSlyh0WcaiSm+UbvNp+5cwxDHO9loYfWw8iFs+nyuqSNf114lY+UNBq
GgFdDWw9S2ouok3xzABEJ39iYvwnosskjdPkzRfKflXptPl4C1Krd34K+ZG2xYai
rvsqMz6GdYX6crrHQZJbk4bh2zFPpselinVVIQpgbbnMOvqlFkiVuMLcGxMhesfP
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397490908767409728396106461171631121894192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 02:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 02:01:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.drclocums.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23666671566197224807782137798898496770728518956195654662665200002735411246228959061004516869337252670619109670458865632600961616922373826261430328743817008988479697689535429665396031269643066034851371999393804720588555212070780111591057104378218962713394330151244963389399609074392052584516804351160562579827539188283504267726629980643624664175396446928922656386063987154110455612242014581680276864492112210299246649312061516783901971863139103620518258561656343593611160473304737258055986098919626085734979498607662104523075053839196921463230906784994667452910105476017433876753838978898935575315397712689235795365651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							390ef856f156516269f0c15438e517480ebbc7b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drclocums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drclocums.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eb15b195200000403004730450220764e07c16776a7edd68cbe0464a1a657dbc455e332525a1ac9722e4b844aeab1022100a3ac654f6c1fc8208115f7ab636989b90cb4b17da5d448214fde3724d5130daf007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eb15b19dc00000403004730450221008516d458c1e43fda525497a638220e9a282a37e857ab2e0dd59e45fca50958af02207fe2c850fbf73b11947163c71dde1ead84b98ed972b61d095c3640eb300a5245
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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