newsmancom.adrian.dazoot.ro

Issued by R3

About this certificate

This digital certificate with serial number 04:67:40:95:80:54:cc:2a:ef:77:24:f0:d3:16:9e:0b:1d:f4 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=newsmancom.adrian.dazoot.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:67:40:95:80:54:cc:2a:ef:77:24:f0:d3:16:9e:0b:1d:f4
Serial Number (int): 383584074366726586394749087913055332539892
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b4:af:2e:e4:3a:c3:ad:cd:91:01:3f:26:8b:38:4a:70:a7:24:24:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:78:c9:03:46:6b:c7:c4:bc:71:20:01:83:aa:72:87:f4:fe:7f:22
Fingerprint (sha256): 61:9c:7c:67:e2:4e:c8:66:8d:e0:e6:e6:59:c6:15:cc:5f:bb:9a:ef:c9:96:9f:14:ce:8f:02:74:bc:8c:b2:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsmancom.adrian.dazoot.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsmancom.adrian.dazoot.ro

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newsmancom.adrian.dazoot.ro

Other certificates including the domain name dazoot.ro

(limited to 100 certificates)
a.zoot.pw
moto.newsmanapp.com
www.blog.api.adrian.dazoot.ro
blog.api.newsman.adrian.dazoot.ro
appcom.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
blog.blog.old.adrian.dazoot.ro
op.adrian.dazoot.ro
adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.newsmanro.adrian.dazoot.ro
a.zoot.pw
blog.blog.oldtimer.adrian.dazoot.ro
moto.dazoot.ro
blog.blog.kb.newsmanappcom.adrian.dazoot.ro
www2.blog.blog.newsmanfr.adrian.dazoot.ro
dazoot.ro
dazoot.ro
yyencapi.dev.adrian.dazoot.ro
webmail.newsmanapp.com
webmail.newsmanapp.com
www.blog.blog.kb.newsman.adrian.dazoot.ro
leroymerlin.ro
moto.newsmanapp.com
blog.store.adrian.dazoot.ro
moto.newsmanapp.com
beta.demo.adrian.dazoot.ro
blog.blog.blog.shop.adrian.dazoot.ro
a.zoot.pw
old.adrian.dazoot.ro
a.zoot.pw
blog.blog.blog.rodecorix.adrian.dazoot.ro
ssl.dazoot.ro
ssl.newsmanapp.eu
blog.adrian.dazoot.rodecorix.adrian.dazoot.ro
www.blog.blog.blog.newsmanapp.adrian.dazoot.ro
moto.newsmanapp.com
newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
www.kb.newsmanro.adrian.dazoot.ro
dazoot.ro
blog.blog.store.adrian.dazoot.ro
dazoot.ro
ssl.dazoot.ro
www.blog.store.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanro.adrian.dazoot.ro
man6.newsmanapp.com
a.zoot.pw
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
ro.newsman.adrian.dazoot.ro
dmonster.dazoot.ro
shop.demo.adrian.dazoot.ro
ssl.newsmanapp.eu
blog.blog.newsmanappcom.adrian.dazoot.ro
blog.newsmanro.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro
decorix.adrian.dazoot.ro
www.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
dazoot.ro
oot.rodecorix.adrian.dazoot.ro
www2.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsman.adrian.dazoot.ro
www.kb.newsman.adrian.dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.demo.adrian.dazoot.ro
moto.newsmanapp.com
ssl.newsmanapp.eu
newsmanapp.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanappcom.adrian.dazoot.ro
blog.newsmanfr.adrian.dazoot.ro
blog.blog.decorix.adrian.dazoot.rodecorix.adrian.dazoot.ro
moto.newsmanapp.com
blog.magento.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
blog.kb.newsmanro.adrian.dazoot.ro
www.op.adrian.dazoot.ro
www.newspad.adrian.dazoot.ro
kb.newsmanappcom.adrian.dazoot.ro
newsmancom.adrian.dazoot.ro
blog.blog.blog.blog.newsmanfr.adrian.dazoot.ro
blog.blog.blog.blog.kb.newsmanfr.adrian.dazoot.ro
moto.dazoot.ro
moto.newsmanapp.com
smanfr.adrian.dazoot.ro
ssl.newsmanapp.eu
www.magento.adrian.dazoot.ro
a.zoot.pw
www.op.adrian.dazoot.ro
sni.cloudflaressl.com
moto.dazoot.ro
a.zoot.pw
rt.dazoot.ro
dazoot.ro
blog.blog.shop.adrian.dazoot.ro
blog.newsmanappcom.adrian.dazoot.ro
smanfr.adrian.dazoot.ro
blog.blog.blog.blog.blog.newsmanappcom.adrian.dazoot.ro

Certificate

The complete raw certificate details for newsmancom.adrian.dazoot.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383584074366726586394749087913055332539892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 20:01:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 20:01:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsmancom.adrian.dazoot.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735243138429562069004529604614080999806303504615908560968538730897556738446496160964694011932514815446921626588061454688879961966194844077166116950256501374153973501025898068925746460329490941279837911665735387589873217606353714439382897952041560840334502127121292559968307933158937498948255590728029755619313377935357161360851197251345184275291328446690936031153774988970431077549384243342673816675481536059920102112508444522546398720608677744184880265639486282178865509203000191833430967888043744195975186609574972921762936883465115719707336012866078812857224423784460905200114529080102846493952867684096927401645164685887906717405881962878875856967592512294496441430183449058171691000197421059593786006773393204090019827657887327333222591287195845707237103584214025042062190818947962058034975613175532130082544224620002979112964566609548999819763828202982902294352239365349592151859858099435998231387806478733405994425873416539019622624246714941234377672376200715230191214491105016490441301663624693986757572309825843066230783753294744321380988479310689558104335642034121705831098762772266539627339665862394889658587158922297328524150414072713632997136871001395649178775654371185840247406138860384796252232499376716910769163100879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4af2ee43ac3adcd91013f268b384a70a724245c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmancom.adrian.dazoot.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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