ghalani.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:86:ea:f0:b8:0b:13:50:5b:22:cf:5b:e5:1c:9c:65:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ghalani.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:86:ea:f0:b8:0b:13:50:5b:22:cf:5b:e5:1c:9c:65:8f
Serial Number (int): 306093184293183468993402586366477153887631
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:44:cb:f6:38:93:90:74:63:ba:57:51:ca:8e:9d:b1:02:2b:9f:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:40:aa:d1:aa:c7:38:fa:ba:de:8b:b9:66:2b:0d:f0:57:4e:a4:9c
Fingerprint (sha256): 8f:35:a0:b3:e4:31:58:a0:23:04:0c:0c:a9:cb:20:73:db:72:9d:9b:4e:a1:dd:dc:09:aa:67:e5:cb:b6:30:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ghalani.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ghalani.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ghalani.com

Other certificates including the domain name ghalani.com

(limited to 100 certificates)
uranianmedia.com
webpago.com.br
myta.ai
www.advicenmd.com
*.ghalani.com
ephemeral-list.app
snrk.me
brisbanedistilling.com.au
*.ghalani.com
app.lovepaws.com.br
www.heywork.co
danielstenger.com
ghalani.com
admin.ghalani.com
go.minute.app
ghalani.com
campo.pixelismo.com.ar
www.admin.planl.nl
midlands-cybersec.com
dacslab.com
www.croom.xyz
profiling.ghalani.com
admin.mallive.co
homgm.app
ghalani.com
admin.powerauth.app
ghalani.com
artvillas.de
www.ghalani.com
www.pyrasea.com
aetherlit.com
givebee.co
www.xsine.co
*.ghalani.com
staging.coexister.fr
api-firebase.capptivation.com
ghalani.com
*.ghalani.com
www.beevolunteer.com
qrcodegratis.com.br
irealestate.numberoneplus.com
ghalani.com
admin.ghalani.com
api-firebase.capptivation.com
epakki.com
www.hellosistemas.com.br
siop.app
www.comictime.app
app.harvestr.io
www.paybackhub.com
seb-steuerberatung.fastdocs.de
ghalani.com
sliwowska.com
blacklemonclub.com
www.animestories.app
dev.watermarks.app
ghalani.com
artvillas.de
emy.rickycorte.com
ghalani.com
profiling.ghalani.com
scm.ghalani.com
todo-work.tk
www.reportbugz.com
cv.jokko.app
mahamicrofinance.knownuggets.com
test.alaxat.com
cv.jokko.app
dollarsandyens.com
www.moba.studio
limdiwala.com

Certificate

The complete raw certificate details for ghalani.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306093184293183468993402586366477153887631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 03:19:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 03:19:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ghalani.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818203984847167617060098553689178724192029446435372791582785726432012349376296657522149815403511904941984213840192565203700398121002199038102686165142896298599431757640740097171881993157594755732549635387292804950052686644789519021208598227911229460915592407551251290069076731513783282950402624422687175498218417898597238497209316756194141583853451097746059838586916792306707800907818071600689123340636982973755720164687868636462897401252593172512553241137732054672548356208996126107197264502667247045780559230109450777488052036332675163813492783783464252799303856394724939054033032633586372368377671891488963441273528601877458973522637032525374075790184729032947840040966350535973171782787948928645308266486874925582709275945888346298178237465150983710515078135997229411161486159741572037853897376264302909307898631069897968734062760576789298115131568944790672806380985386991075792155016209024211229112071968555730273321426392891454303096213808276824912029865768680327123655596889800449473620095858182396257262487429063896682472091807459527739218691083278077098819194162480147073451545761638758487949218136085285160943855308868559064700043634024092547214483438913969697710898271567709181164328597137493352383317153546225094570779053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7844cbf63893907463ba5751ca8e9db1022b9f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghalani.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e54efbb1800000403004830460221009e639821fdc70bd8352133473dc45478187d3b8d25534c48d3291bd119e36562022100af9a15d16209b1a30817820a37112ac954061bb43f8315a538db90498de1f8e5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e54efbb260000040300473045022024ff664572af12a1f7beb4bd9f669a94e1d0637efebcc70ed7cdc051e925daf3022100e3a2e05a093f70200381d670605a28a19b0224a8b26c4b3dff79d2929dab5f9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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