roa-news.com.curomatic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:95:b2:bb:b2:98:60:09:c1:2f:64:3e:0d:52:d4:33:5c:46 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=roa-news.com.curomatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:b2:bb:b2:98:60:09:c1:2f:64:3e:0d:52:d4:33:5c:46
Serial Number (int): 399388793563364391186413519202904760867910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b4:4b:60:60:40:41:26:5b:f7:81:9c:be:1b:cd:1d:37:df:be:75:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:05:03:d6:3e:ff:a0:53:d0:e8:5b:ba:ae:dd:30:c7:81:84:3d:39
Fingerprint (sha256): 7e:c6:21:c5:bb:e0:12:ef:17:6d:04:21:f1:9a:bf:9e:21:1e:36:76:68:9a:7c:ef:20:71:f4:c0:93:27:88:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate roa-news.com.curomatic.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roa-news.com.curomatic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantageplumbingheating.com.termitepipe.com.rxsugarstix.com.arbitrageed.com
fetishpornlist.com
gayeroticaudio.com
roa-news.com.curomatic.com

Other certificates including the domain name curomatic.com

(limited to 100 certificates)
curomatic.com
curomatic.com
sni.cloudflaressl.com
sni.cloudflaressl.com
example316.bible
curomatic.com
flanaganinstitute.ie
curomatic.com
curomatic.com
roa-news.com.curomatic.com
curomatic.com
www.curomatic.com
adf1ega1.org
www.curomatic.com
got12.com
ukr.bible
bridgespublishing.house
curomatic.com
hotyogastudio.com.webchannelcb.com

Certificate

The complete raw certificate details for roa-news.com.curomatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszeVX+Hs76dlIV00MhAN
xHEKsTYClhrvo72/fapqomk/Q7R+FL8YhWAqA+jIOo+9lopfqZQ/QEzdrXNK9KQI
OLFAuHHcaQWtIoMoiPyDGopmCYHFiQo+mKnJluRZuSsvopwE+vfS59pSGs1IcHFb
vU2F3gqMB/Ez4zB+zPD/vXbfaYi22B22tML4tVFH9UdmuwxFCtpYAnig2rb5w99o
RPkMMJd0FOypzNGR6B9VcBFs+Q9LovPdF+bbxe2I+8+SETFLE+HIRJTzg17dbJS6
vzhwHiKjtBn6D4u+aWiUvAgbTtUOAaNYuQ9fdw5fUgdE/vm/sHw9RrtkQNYCMor5
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399388793563364391186413519202904760867910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 19:42:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 19:42:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roa-news.com.curomatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22624065831520862657152611006480887000561802838069702172550462709944784358932895773562603074550061975181937843466432156172210502523071955497257830405354475279008448403022534757078638139189408506886091753784275089418823189874178618752359694986208342558222512039981651380658165710313765177259373208350135222389922923836515358185313315486927590530933212007983110107115055833620018686487735278400119017151864291672871339828418962392120973900400632067898632481755608042257157309408556625620279588541220808079932148823146992307628158596722224674806627282738403068480313499499503455380839804683588398141901354932886911514893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b44b60604041265bf7819cbe1bcd1d37dfbe75d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageplumbingheating.com.termitepipe.com.rxsugarstix.com.arbitrageed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishpornlist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayeroticaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roa-news.com.curomatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bee789c74000004030047304502205162c0befe288561b2e0867528bf658723a8c86bb5fc839fc7653694e1e9ba83022100e516202c96966cec497435fa68264c25e6bd1e9d27b6f80f90526ad5d746b53200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bee789c72000004030047304502207918f18eee911cc64938684d86805b192d5e9b70cecd93a5c6f3a9c4e51800e3022100ef338b1d3f0f1114b855b84b8f938b9823b00372db6389e3ccac9cb879b5e7f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f53933fbd38c42fbddc5adc6b288417f429ced3c64e0e04595bcd32b965688fe2b4ad4b106c164cf8c52a44b9a2033217a517f087cf58842da541dfd59436105c450302eb0dc33e418c9802fc210c07a9c68634b00039bc38323f196459da3ade5465a8cfe2f69bdd4e59c3f9fd393045d6b5a3d7f881a4b22b9b6b27f7e0a223b0ebf65dd0757d0acf4e996c4d64b7d7c64a67f30c0d9374808c3669a140fc29baa006addb436c835f8a680b04db3a3c81a5303364abb03ebd02a96b804efc337ecba099a34c9fbb40e0f264a38f0d37cbb3b50dcf6a0c9d63940e4e4fdb0d1d76d4df469ed2c69235083080c3949ed16ce748291f64535fde8e9372f88fbb