dotafro.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:2d:5e:25:29:42:d6:95:51:cd:a7:65:4e:3a:98:9d:b0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dotafro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:2d:5e:25:29:42:d6:95:51:cd:a7:65:4e:3a:98:9d:b0
Serial Number (int): 267522244489290851194402055600333359979952
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:6d:a3:10:bd:33:d7:89:c3:55:18:78:5f:2a:03:c1:1e:b6:3b:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:f7:7f:a2:21:28:63:dd:d3:4e:33:c4:9c:4c:17:2b:c0:e0:2e:bf
Fingerprint (sha256): 80:4b:75:7a:66:bf:1b:96:49:45:9b:68:7d:04:e1:14:61:31:bd:b8:89:d0:6b:96:af:ac:81:16:26:fe:71:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dotafro.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dotafro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dotafro.com
dotafro.com

Other certificates including the domain name dotafro.com

(limited to 100 certificates)
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
guy2gay.com
sni209295.cloudflaressl.com
ssl379348.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
ssl379350.cloudflaressl.com
sni209295.cloudflaressl.com
kareaga.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
eelitesdm.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
beta.dotafro.com
sni209295.cloudflaressl.com
ssl379349.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
dotafro.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com
sni209295.cloudflaressl.com

Certificate

The complete raw certificate details for dotafro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3R9I2677JbPlx9DELEK
TmDlGBWY5w2B+/JuEecKHIwEERp+QE6i1L8sg/kniT5xJ86aQjUZS27spchtM4Iz
h2ICZ3RLLbvyc4K8X37tMMcZU+OYAlQ9ry9XpVqmgsNO63oRhDRF3kBbJGBXHUFH
clC6SL/mFL65oZ3U7dRx6Kcw4loWGl+vdRVpqK1sBydS89WtWGDvwU9AAbwhaINO
OCA9mTsn8dNP6C8y47rAuugcUUcKtfO8IUCQ8ORJtprLIgxQkI7B262ZFK4ypu6k
OjzjPi+LuAsN2dIazR5t0E9uXfR0YQtWJ+fAE6K4qD2xjWziEK+TIGTDoI0a7sWX
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267522244489290851194402055600333359979952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 10:16:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 10:16:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dotafro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21644192928200493849083856418695308937394680382865833739294487341090555447383684128247650203400780040774172821887762079853757874379413381107316608693815767382892648107026608001179468641052968788192057826585304242527890642497277850321364810281154093255352005183284195272018077720615362485090359674093878575076188020799772674340542012806719735607847976917090594440469384508783273964533898639053569474497895121777377456716967361512461756857231175388004081145652140813387223683876539098679485229443056142985858584687981567046818518004171981211829657335524714943917976625554118985156751136557663656403190887992737279612849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b6da310bd33d789c35518785f2a03c11eb63be8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotafro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotafro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c858ba67a000004030047304502204bf18f28bd76ef205f0b993db35774b201cc372916635bf7bbf4747663cc5458022100a46dba5742fc038d1329652b419aeda280799ce7485f0684ae04e9152e2c9ce2007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c858ba6ff0000040300473045022100c3c2127c915a1727c21f1ff95c074470e3e23073ffd72b20445bd7d47cecc2de0220092f9d6cd62257e8c52c2acc7432a64cce6365cafc82c1f37d20de16ed057103
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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