elettra.co

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:bd:01:8b:1d:46:1e:72:7a:3e:8e:2d:24:6b:fc:cc:26 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=elettra.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:bd:01:8b:1d:46:1e:72:7a:3e:8e:2d:24:6b:fc:cc:26
Serial Number (int): 336790492989882600379646661541518372555814
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:6f:a1:d2:24:be:1d:14:97:52:0d:9a:4b:ca:20:fb:21:dc:e1:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:32:9d:18:85:f3:dd:fe:e4:a8:88:2b:ae:ae:c4:38:da:6a:7b:05
Fingerprint (sha256): 92:b5:46:15:9c:7e:af:79:7b:8e:8a:a0:2a:71:ba:f1:6d:0a:62:df:22:b0:2a:73:f3:f8:fd:8c:14:07:28:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate elettra.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elettra.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elettra.co
www.elettra.co

Other certificates including the domain name elettra.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for elettra.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336790492989882600379646661541518372555814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 01:22:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 01:22:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elettra.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855196973402992381255345341380642717446132301048545876823611294753538041751576652548866942333195396271528432000271063912489955059507127193314614238721230392370022132124904109858598783718418312625074873331823423022842382346914931607638456030873700278393962225841406670458031693142219608672350182173220016040171093901333190014244724946298616729378813488459267625421022004691422112695315094547607816606731833168925782827702279347436019194472802574070923234225248737100337395269536117317620994693525105424675640184145797070511765348392434845237305921790686853196218997799010012452950194322318014996518879177915020689732797210756676995406778475624222676954133913445598995511992733076290211900530910776796378149649165693344713525746621878988922740833425015215454360032564627390930845131287983642573977388014037093160310487521654423814721961293487213356426474964376996325637017479293187619801522679670539209457670903640952520464388175645165926421699212356929588509007641668357060276417572135748555241683183350161960734792756969905453307211312021278367121146802856320523866010962638968050306069032638358635327844081096971280259082101604874000118187246751210388697114684517961990310859448606526732142110486275501744071878872590650914796649907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							326fa1d224be1d1497520d9a4bca20fb21dce1db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elettra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elettra.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df7d1c80e0000040300473045022100d8a65b932b49225838bbbc177da71c95e7e0bf7a4862934684d208fdda12cb9a0220396a85c583e38a944d8109498fb6fe90eab4385d25d2d51952bb1ef92fcb7516007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df7d1c84b0000040300483046022100f5f50cc4749b48e7826b1383fca27a213d214d066855368f1f818eaa8d2c80a3022100fbd607587b99a579904f457242871119e4e27b498e3fee8833e18b0659d9215b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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