banners.cosmopolis.ro

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:8f:f7:0d:a0:31:c1:10:45:4a:56:b6:eb:b4:a5:7c:be was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banners.cosmopolis.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:8f:f7:0d:a0:31:c1:10:45:4a:56:b6:eb:b4:a5:7c:be
Serial Number (int): 337411187995734547379208214202105786105022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:b2:19:1d:36:af:2f:eb:18:2b:46:ce:74:60:20:26:4d:32:55:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:65:59:c3:45:7a:a7:6c:bc:a4:49:aa:8d:e9:1e:33:cf:b9:99:42
Fingerprint (sha256): a1:57:c9:0b:6f:4d:78:02:72:4c:54:6d:80:80:f0:6b:52:4c:38:dd:33:04:b3:90:0f:33:2f:1e:8e:43:0a:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate banners.cosmopolis.ro

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banners.cosmopolis.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banners.cosmopolis.ro
blog.cosmopolis.ro
oferte.cosmopolis.ro

Other certificates including the domain name cosmopolis.ro

(limited to 100 certificates)
cosmopolis-site-prod.digitalatelier.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
oferte.cosmopolis.ro
cosmopolis.ro
oferte.cosmopolis.ro
blog.cosmopolis.ro
oferte.cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
blog.cosmopolis.ro
oferte.cosmopolis.ro
cosmopolis.ro
oferte.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
cosmopolis.ro
cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
oferte.cosmopolis.ro
blog.cosmopolis.ro
www.cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
blog.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
cosmopolis.ro
banners.cosmopolis.ro
blog.cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
banners.cosmopolis.ro
oferte.cosmopolis.ro
cosmopolis.ro
oferte.cosmopolis.ro
cosmopolis.ro
blog.cosmopolis.ro
banners.cosmopolis.ro
sni.cloudflaressl.com
blog.cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro
oferte.cosmopolis.ro

Certificate

The complete raw certificate details for banners.cosmopolis.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tRWJ73/WSwBiywMjpkI
fQpvuNa7f15UGW8sF66opKoRkkwVNJVRC4uutnOxCHgiHC8Dsvo4+Qfjhe48P4Gm
NEkEOHxsYtWBkOX43kqfuABqDjPGHmst3OCDmSEcaPVHHq1W8AcWx9TXSN48CI19
aLFzMB3hovp0+oj4q8LGobTrZSHq3bLV+jLCRfAI78Hn0NvpEF4NGw5aWnquAIBC
eY7h34k8Zw6VEPkOy0mHVExe6JUst6a9x7LpbnOHwyxmTnPwYkERt9mSbEexZWAC
+t3ljXirc6LN+9IjRnMZg20Mm56yB+RcTD7T8lO0VVIYSGvb11jUoFtwzAYbtv7U
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337411187995734547379208214202105786105022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 17:20:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 17:20:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banners.cosmopolis.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29139517194484486235634633511719883871349709606382515516832742089125365975239924115949681263734830091900932051002259574855476599374498661089474714857888236307214104255076062384674066405059325282278380292602146443035035961408006635032156613180676101182856768095235879316647125194177400431558571501564872209256513288001619218410263716472518809207483166261951296984021288265861654299555808638100556993109468066366063330373296574245077942100230532898672380975759802747451314798087160744881790297477883172838214249412746642358389028852991505777845205103050549492298530824918925398436149698076357703517924436486828769334467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							feb2191d36af2feb182b46ce746020264d32551d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banners.cosmopolis.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.cosmopolis.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oferte.cosmopolis.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a1a0f1f600000403004630440220622422c9a6c06206f0ec74381f29114acd5b50997fa3f087c48c23151550945e022074996aa2c0443f30480dd7bb8a5b68ab827d67f0308d76d432bed5ec0a0b6a9f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a1a0f2460000040300473045022100f6d26274e1b7e209c01ce02d596ab10780ee7308707cd8ca2f39e284c1920daa022035791a09917cb01b26753251004721d6624f45a4b5912d5ae21eeeda9f821703
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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