dios.tube

Issued by R3

About this certificate

This digital certificate with serial number 03:5a:c3:8b:72:62:ad:f1:ad:4d:e4:5b:5d:99:19:89:a3:85 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dios.tube

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:c3:8b:72:62:ad:f1:ad:4d:e4:5b:5d:99:19:89:a3:85
Serial Number (int): 292222194326619484406748230207575924777861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:c9:ac:7a:9e:16:ef:46:1a:77:66:fa:70:b5:0b:f7:6c:78:27:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:d4:0b:05:8f:e3:c4:83:2c:e6:7a:a3:1a:6a:f5:20:47:a7:12:c8
Fingerprint (sha256): 86:45:b6:fc:0e:3e:72:52:6c:f8:9a:76:a5:7d:78:d1:dc:a1:ac:22:48:99:da:c6:f5:8f:c0:3d:db:45:85:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dios.tube

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dios.tube

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2828000.com
bestelementorwebsites.com
cardiological.com
childfoundation.us
cow-orker.com
dios.tube
gokartads.com
greenmango.in
herany.com
hot-rods.com
marinefitness.com
scottishpartybabes.com
smartfitters.com
usra.net
voiceofpot.com
worshipsanantonio.com

Other certificates including the domain name dios.tube

(limited to 100 certificates)
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
thrill.vc
0-0.media
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
zan.co.za
dios.tube
maplevalley.land
dios.tube
dios.tube
dios.tube
dios.tube
dios.tube
shuswapsoundjourney.ca
allenblock.be

Certificate

The complete raw certificate details for dios.tube in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApznQQFWPI/h5sgjMDxwj
KAfXktoNtd2mGRM6iW0dRp8vNTJI4sMOLwEzyivdlg5th5rj1nboFZhhIiOgjiph
Cs4LVBHJk8FbkbU/C9OgGFDn3GQxJEff4ghbRXDg7G6qrkbkXwU+r482dJrYDlYh
KAEf38lv4K8G3wjdV8Y/jmoiza/9+1mbVh+Bzx0bU4inyNFTv17Zjqo7hPv79Hbb
hg2YLY2QU3CbYzKMftgXZ4M39JqSwxtteTBzqakthaQRf6ESlgAgqVSvZ+zYkCvk
uSBd+63idd5BefO4ee6jBJjt5TvQay4czdMSrUpfjSRSRQIv2rl6PxHD4o52NYZR
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292222194326619484406748230207575924777861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 14:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 14:56:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dios.tube'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21110305819680326078389256102781709107439419933190540972091442123545442271535421759740966905629674743855900128179314006441056120432164577637435142663947199207883792591313209306494934011697769681642254524511422448038435521122541571497166135380960299547581430565897015328274291698089955965962534217680644272450176247600323100585931385454621560809954802210008023272096757863356586785516894748005855773435871324530069808025100026533449101861602263743291015479216254438300783466704225420842598199217968529503829403075333214526348380422977446114367921488572122469765744832799604337304416139556236170936258498992245718798659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efc9ac7a9e16ef461a7766fa70b50bf76c782710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (275 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2828000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestelementorwebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiological.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childfoundation.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cow-orker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dios.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokartads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmango.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hot-rods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottishpartybabes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceofpot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worshipsanantonio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df5947e42000004030046304402201f51e316b0f2e1b7f5aefb6eaed6ea1f32b78cb5e3b1c8d28ade5e8b13c711fd022044589c375f68288c51515dcf6de9cb9b27a1c74adb97b35295146fddb64f6fd8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df5947e450000040300473045022062ea19b893fa3ced8301b103bdf59086e2fd11aabb29cfee6f5b99d4512e86b6022100eedde5f53a496f75f90188356ff753f765d9fa475d309d43e2cdb69918c314c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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