patrimoniu.gov.ro

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:ec:40:d1:06:42:e2:df:9b:90:5f:b8:56:c4:08:e5:60 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=patrimoniu.gov.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:ec:40:d1:06:42:e2:df:9b:90:5f:b8:56:c4:08:e5:60
Serial Number (int): 315415506122312879964183931458777604744544
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:42:39:91:07:05:fc:93:07:26:81:57:2c:42:3e:19:b2:f9:04:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:c1:6e:90:a6:7c:0a:3e:42:49:6c:7f:88:fb:88:b1:56:f1:0c:48
Fingerprint (sha256): 70:c4:b9:e9:92:44:26:c0:be:8a:91:4e:6a:50:a5:9c:36:e3:2b:65:ae:a3:fa:7a:e5:6a:a4:84:6e:3a:1f:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate patrimoniu.gov.ro

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for patrimoniu.gov.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

patrimoniu.gov.ro
patrimoniu.ro
www.patrimoniu.gov.ro
www.patrimoniu.ro

Other certificates including the domain name gov.ro

(limited to 100 certificates)
csu.prevenire.gov.ro
anuleuropean.patrimoniu.gov.ro
geoportal.gov.ro
aspaas.gov.ro
aviz.gov.ro
portal.servicii-sociale.gov.ro
research.gov.ro
anuleuropean.patrimoniu.gov.ro
studyinromania.gov.ro
rpc.research.gov.ro
capesaro.gov.ro
www.anfp.gov.ro
*.salt.gov.ro
portalgis.servicii-sociale.gov.ro
anpc.ro
ncp.uefiscdi.gov.ro
raportare.aspaas.gov.ro
mai.gov.ro
mai.gov.ro
www.brainmap.gov.ro
anuleuropean.patrimoniu.gov.ro
aias.gov.ro
www.davere2.mai.gov.ro
portal.servicii-sociale.gov.ro
brainmap.gov.ro
patrimoniu.gov.ro
aspaas.gov.ro
*.anaf.mfinante.gov.ro
www.studyinromania.gov.ro
research.gov.ro
www.rei.gov.ro
mail.insp.gov.ro
patrimoniu.gov.ro
euraxess.ec.europa.eu
events.research.gov.ro
aviz.gov.ro
exploredata.gov.ro
nextcloud.research.gov.ro
mail.salt.gov.ro
studyinromania.gov.ro
platforma-aici.gov.ro
brainmap.gov.ro
emsc.cnc.gov.ro
ncp.uefiscdi.gov.ro
mail.insp.gov.ro
portalgis.servicii-sociale.gov.ro
www.euraxess.gov.ro
csu.prevenire.gov.ro
www.studyinromania.gov.ro
www.ispmn.gov.ro
druidbotservice.test-chatbot.pnrr.gov.ro
edu.ro
webexconf.research.gov.ro
www.servicii-sociale.gov.ro
patrimoniu.gov.ro
patrimoniu.gov.ro
www.davere2.mai.gov.ro
portalgis.servicii-sociale.gov.ro
scholarships.studyinromania.gov.ro
sgg.gov.ro
ana.gov.ro
portalgis.servicii-sociale.gov.ro
*.imm.gov.ro
capesaro.gov.ro
prevenire.gov.ro
online.ina.gov.ro
logincloud.research.gov.ro
*.prefectura.mai.gov.ro
portalgis.servicii-sociale.gov.ro
uefiscdi.gov.ro
*.gov.ro
research.gov.ro
patrimoniu.gov.ro
portalgis.servicii-sociale.gov.ro
webmail.mmuncii.gov.ro
mail.insp.gov.ro
frontmail.research.gov.ro
*.mysmis2021.gov.ro
frontmail.research.gov.ro
portalgis.servicii-sociale.gov.ro
dst-braila.gov.ro
patrimoniu.gov.ro
www.davere2.mai.gov.ro
anuleuropean.patrimoniu.gov.ro
*.gov.ro
euraxess.ec.europa.eu
aviz.gov.ro
*.forfetar-ua.gov.ro
*.mai.gov.ro
cncsis.gov.ro
mai.gov.ro
dst-braila.gov.ro
patrimoniu.gov.ro
sgg.gov.ro
portalgis.servicii-sociale.gov.ro
www.isc.gov.ro
open-science.gov.ro
www.patrimoniu.gov.ro
patrimoniu.gov.ro
portalgis.servicii-sociale.gov.ro

Certificate

The complete raw certificate details for patrimoniu.gov.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwCFtzx02G3Ux7ZynCfp
EVwLaKrZJBMXUCuP5A4WSayotsW26sg79bUtEE5uVNjPA7QBDhB9t/5hy7cdMysa
Ov+PgO0d+y7FXtlExBsyCqUmHT+PkmYa5X+l8NjQXGaKlwIP+RupJJn9G9k9SMRG
iiSxbFpKvluwaWzDgA473kNOPcpItHiBK0/Lnxn+yNLveArT9D5QQJ607eXIfv9I
ECVFaqZ/R/Qn7MAb9ps+fR39BPD5ojNSFzu5CIepYvxi40ItkTGyHe9DT3Nu9BvS
vxtrRjZIfNY3gwDRoSDvN88vSxVUWGhC2JOdBMC2Iea8+B/sGUWly7DczKrEIIhG
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315415506122312879964183931458777604744544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 19:06:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 19:06:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'patrimoniu.gov.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21082054498479702697725903288596778190703643391614749886273840881186276448804704560003907574630947830707116568170244251589288222886961985419976380991013859378462426332307133593596509537041449947814271095845545119057387991946400078823233814234779488334973359220494986023383355551217836350262578192632111779378315905324182703373147551973850888959344508444726756419303133312332889182492718596579443925106764018983990776508478845553893788970034570055759151080146577252891991889993857621778960437441539896741708828924006789423740429795461480644600803747417327119833844573975058015367841566069079723407083774128441795298873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad4239910705fc93072681572c423e19b2f90450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrimoniu.gov.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrimoniu.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patrimoniu.gov.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patrimoniu.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a2022ccc000004030047304502202a8ef9e1f541e825d9d81bdccccfcc8a3c0ef1382c843469b396207c67594dae022100a2fb60ab6eee30266079a746882d95fde0f49f517c22647dd082e8babcea4201007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a2022cc8000004030047304502210085779909b601141954ebd650fd46d949c66e76c6ca60f893441e51e70ddd1cd302204caa45ff32c0ac8ff1b40d1ee9a8c8de173fa64d1bb009e5d2ee5bfaba056ca3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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