loripsum.net

Issued by R3

About this certificate

This digital certificate with serial number 04:02:3d:5b:60:71:57:6b:75:67:ce:3d:b5:ee:e0:50:ae:9a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loripsum.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:3d:5b:60:71:57:6b:75:67:ce:3d:b5:ee:e0:50:ae:9a
Serial Number (int): 349211265823731029471004816733868120911514
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:2d:8d:8b:d4:26:d9:85:af:32:18:5f:b8:fd:a8:96:db:9b:c0:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:25:19:97:ff:b7:b3:40:31:a1:23:b8:63:09:dc:f0:c4:87:b5:a5
Fingerprint (sha256): 89:48:cc:0d:73:4d:e7:9f:30:2a:e3:f9:40:d4:69:c5:e9:75:c3:d7:38:d7:4e:06:b9:62:ab:2e:5a:53:96:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loripsum.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loripsum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loripsum.net
test.loripsum.net
www.loripsum.net
www.test.loripsum.net

Other certificates including the domain name loripsum.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for loripsum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349211265823731029471004816733868120911514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 21:16:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 21:16:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loripsum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840126842957710093383247370925823405889341391154513456192520960921915696672590435406342369122439511351695246137403664839063794347434079034459357792301946716782952191711508611208785366303726340327908333012965964247334810626905786320542688008092314735800018066551809949565872781993689641333945630244642401466677769409684691303775637025913515305770792969833308481654568613182616440217731758159741013445636216249841361385828049358177498121518688039648057249512744391709981885417796791505742641712064767864634389015869236884541048672518080077984215439025727531477292502898184604229300110420669981346638792337700501030368484203927521249760881312413617335602691612564612551847627710318645675788052788325072433281527202613856117675749409568019194872691847452253797965830994132854709034906549083624115778734692768340899886665607654332784873477910271624502727131077978874908682694902675707183343009502475288667633059022540299731280468848271172066396754912500074853946512991024047572756635385990526951286059144222428427111395825171311755242380107549181407833543308705653971085477920696747541183666584774470990598588064402821085744346198911557478680543336450288186358752625971494883342140818442961779146060594749857912571586007319695268379361871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							832d8d8bd426d985af32185fb8fda896db9bc067
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.loripsum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188bbfb7a1f0000040300473045022100f28b11dd3a7a5e3d69e43d77de2815e91d26a8a05ceca1fd0d6fe930bf46c7c3022047c8aa709fd0c8e4e4a9760af7e72c0295ba3cf87479abf8cee883176dba71100076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188bbfb7a370000040300473045022100bb4bad9f2961bc7bf0adeee102c27531225a46d4e8d3248d7a679470d0f3782202203de6c5cc48e131c8c49d6ea39050e09129c040b042b1cbb1058a16e55cef26d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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