loca-web.net

Issued by R3

About this certificate

This digital certificate with serial number 04:94:16:86:66:55:52:88:1c:4f:fc:5b:cb:d6:3a:13:df:a0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=loca-web.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:16:86:66:55:52:88:1c:4f:fc:5b:cb:d6:3a:13:df:a0
Serial Number (int): 398840874890591906699782555229355202830240
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:c3:20:e3:6a:a9:d1:6b:e4:2c:c9:fb:25:73:60:c8:81:f3:41:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:06:39:f1:c2:51:18:43:66:17:d7:69:72:05:25:d5:43:0b:10:c1
Fingerprint (sha256): 66:88:6f:66:59:00:e5:fd:c1:fd:ba:43:16:ff:80:2d:07:94:d5:70:97:aa:ff:d2:e1:e2:2d:62:77:34:c7:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loca-web.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loca-web.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.loca-web.com
*.loca-web.net
loca-web.com
loca-web.net

Other certificates including the domain name loca-web.net

(limited to 100 certificates)
lw1.ovh
statistiques.loca-web.net
lw1.ovh
espace-client.loca-web.net
lw1.ovh
www.loca-web.net
www.lafermedelatourserviat.com
lw1.ovh
showyour.live
statistiques.loca-web.net
lw1.ovh
statistiques.loca-web.net
www.loca-web.net
lw2.ovh
www.acara63.fr
www.setup-transports.com
glaces-artisanales-auvergne.com
lw3.ovh
www.acara.shop
www.loca-web.net
mariage.salon
mariage.salon
lw3.ovh
statistiques.loca-web.net
lw1.ovh
www.xn--sjours-scolaires-bqb.fr
svpparebrise.com
lw3.ovh
loca-web.net
lw1.ovh
lw3.ovh
loca-web.net
lw1.ovh
www.lecentral.club
lw3.ovh
www.pse.sarl
www.aupetitbouchon.fr
lw3.ovh
lw3.ovh
auvergne-cuisines.com
lw2.ovh
*.loca-web.net
statistiques.loca-web.net
www.loca-web.net
huteaulocation.fr
statistiques.loca-web.net
www.loca-web.net
lw3.ovh
lw3.ovh
lw3.ovh
statistiques.loca-web.net
lw3.ovh
shop.plan-pierre.fr
www.setup-transports.com
statistiques.loca-web.net
lw2.ovh
lw2.ovh
lw3.ovh
mariage.salon
loca-web.net
lw3.ovh
lw2.ovh
lw3.ovh
www.loca-web.net
showyour.business
www.ape-jozerand-montcel.fr
lw3.ovh
loca-web.net
lw2.ovh
lw1.ovh
www.showyourliveevent.com
loca-web.net
www.ape-jozerand-montcel.fr
lw2.ovh
www.livraison-montage-meuble.com
lw3.ovh
lw1.ovh
lw3.ovh
www.proteine-vichy.fr
www.fc-auto-performance.com
www.sauvat-vins.com

Certificate

The complete raw certificate details for loca-web.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdK2irxNxq1IqzTioC0i
t8WWnk+bKjlgc9g8JXvVG7aFpLsIqGJK6rwAClgTnhi+dFCSwzBrHIQDoOKPTrlw
cHGVp0aZCK14UX9RpD9Ce5k0ZI13vnksPerr5by+Tl+qSaBOhNwMClk3/ieol+fL
L46IMYUJ5KFWG80kjUsJm8yzHopkJDP9Rd2tKVErv5OqVLgYn7q5DrBGpvAzggQn
ThdlbtCUuZL3Fof3uyILrLXB1fQb8ikm9hRAbiIZnwlNKSsw3KCSm3SP5VSqkgmL
DPEXFrZhKHhfwZ+J7tzM9pswg2v9bkppA74rMrN+3NcmIwuFe5GPl8jnl79Cif8M
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398840874890591906699782555229355202830240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 00:02:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 00:02:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loca-web.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25982758997832276840819057479605388020158560040527116615591134364472816403424202872885775625557353646446389255064492374186483505346884619823959917360355469041829804526437733558056393872474608668489799725647795362159472764449228181402912289915560297570789931730757193471992873274171569407299248340966578428076110144262414372274256308124532132765007047101192259794479710953739081057973169606714337133445606165015670455893239368541105862088195866271111323154327928120286806667556701051457856360058752983820436299630939625027079879541640790199535264434534888845023538468015398074117814125009735253519159548451049120402679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2c320e36aa9d16be42cc9fb257360c881f34129
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loca-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loca-web.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be51994920000040300463044022020cbaa45cd75b0514657aa2c615396b2cf44e85fd64ced24418e290c9b20f65c02205795549b93cbf9648c63d1845ec6e911394f010177ff1a759012d48d74d33a2300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be519952f0000040300473045022100b01b016c50742f584781d06ec741e88070ecd955da87ff6bf50ec0a67b324936022046ec0081c59194eaf689a24df3584c8ddf9d46687aaf2feaa9781bc786c4ca93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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