golazo.com
Issued by R3
About this certificate
This digital certificate with serial number 03:b8:8d:b2:2c:64:11:91:c1:83:80:d0:c9:08:58:1a:89:34 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=golazo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b8:8d:b2:2c:64:11:91:c1:83:80:d0:c9:08:58:1a:89:34Serial Number (int): 324137159585334185819883217706688735512884
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0e:24:9d:2f:aa:70:de:6b:41:eb:6c:a4:a6:27:28:ae:6d:54:ab:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 62:ad:42:b8:72:f0:f9:f0:bd:e5:ae:c4:f0:48:32:16:ec:64:bd:e9
Fingerprint (sha256): a5:1d:e4:f4:f7:f2:a1:c7:2e:3d:47:ab:16:df:14:59:35:c9:ab:21:ca:36:52:28:bb:6a:b4:ac:2c:01:02:3a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate golazo.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for golazo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
golazo.com
www.golazo.com
www.golazo.com
Other certificates including the domain name golazo.com
(limited to 100 certificates)
golazo.com
*.golazo.com
golazo.com
golazo.com
hockeycrew.golazo.com
golazo.com
golazo.com
crew.golazo.com
crew.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
crew.golazo.com
servicedesk.golazo.com
hockeycrew.golazo.com
hockeycrew.golazo.com
www.golazo.com
golazo.com
press.golazo.com
crew.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
hockeycrew.golazo.com
golazo.com
crew.golazo.com
hockeycrew.golazo.com
hockeycrew.golazo.com
golazo.com
golazo.com
crew.golazo.com
crew.golazo.com
crew.golazo.com
golazo.com
*.golazo.com
crew.golazo.com
golazo.com
golazo.com
crew.golazo.com
golazo.com
golazo.com
hockeycrew.golazo.com
golazo.com
crew.golazo.com
*.golazo.com
golazo.com
hockeycrew.golazo.com
crew.golazo.com
crew.golazo.com
*.golazo.com
crew.golazo.com
*.mijnevent.be
*.golazo.com
golazo.com
crew.golazo.com
*.golazo.com
golazo.com
golazo.com
hockeycrew.golazo.com
golazo.com
golazo.com
crew.golazo.com
crew.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
crew.golazo.com
servicedesk.golazo.com
hockeycrew.golazo.com
hockeycrew.golazo.com
www.golazo.com
golazo.com
press.golazo.com
crew.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
hockeycrew.golazo.com
*.golazo.com
*.golazo.com
hockeycrew.golazo.com
golazo.com
crew.golazo.com
hockeycrew.golazo.com
hockeycrew.golazo.com
golazo.com
golazo.com
crew.golazo.com
crew.golazo.com
crew.golazo.com
golazo.com
*.golazo.com
crew.golazo.com
golazo.com
golazo.com
crew.golazo.com
golazo.com
golazo.com
hockeycrew.golazo.com
golazo.com
crew.golazo.com
*.golazo.com
golazo.com
hockeycrew.golazo.com
crew.golazo.com
crew.golazo.com
*.golazo.com
crew.golazo.com
*.mijnevent.be
*.golazo.com
golazo.com
crew.golazo.com
Certificate
The complete raw certificate details for golazo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISA7iNsixkEZHBg4DQyQhYGok0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MjIxMjU2NTNaFw0yMzA5MjAxMjU2NTJaMBUxEzARBgNVBAMT CmdvbGF6by5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2apyX 47gzo4Arc1dpc6tcfGxw9AeElQKBx48mA/wTn3EcluA84BXWsXU4OU2lvQHZkafD zpuDFHsenjVMizC1SQZU4GDbpowmNd6kWDgvB+y2YdoKjVDKP4XIVr923qeEm27+ SEGAqAu3+ZRiP7ATPcr/UhxuFsm0ZYhjl7IAPBR4YTxdg3zPsZCDq6f58luvphln vTvOy+wMtBTFamiMbEt/DeineXz51g9MZ3e5ev+NVvjMxgJDjij0wcNY9GbKJlzL qMMeUvHicE/oH7oWfT00Yh5f+mt0Y1J2SzxFlFSnWF3vqMQn5b6QmClMROFU3Q/O 6O0b7R2JG3hyUi+Jif1XlbZP/1YkFpu4FGgoE0uRUJe8b9aW08dcJk6F8/VwKDUM ddMxZuXyhcNzPzuXpT/S7M2om/pkG0fkEvbtfEUiUmkabS36BjJIwrBrfroB9q6w nVCCpPhU5spAomSnP7p5LjS7HRBjflS/SwVP5xMBDhDO+xUWcrEEt1wzHq+CB/bt S+16IJxtZ0QLuKXzZjbljGvA3ToOpVQHfJ9MDNTLZd96mvWMOlV+O0PJtUfJVz8/ RXdMFWGvP0A2Wgzun9j6WqUX2esyN/5jGNfA8qrmiUq/Aw2FBC+KoQhSJ0x8oNRg 2jldXPY/p0j6ugceYAqbNQQ5qNDPkSNh/ih4QwIDAQABo4ICHDCCAhgwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQOJJ0vqnDea0HrbKSmJyiubVSrRDAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcggpnb2xhem8uY29tgg53d3cuZ29sYXpv LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiONkzDkAAAQD AEgwRgIhAL0R8W1NXjcx0kVZolc7eJ6hhq9d1pYvX7WmXjVFnKhLAiEAy5Mztrrs x+9Re1E7bEArrNsFpuI439JviOCltMrE9MMAdQCt9776fP8QyIudPZwePhhqtGcp Xc+xDCTKhYY069yCigAAAYjjZMwwAAAEAwBGMEQCIDqikYhHkIint4zNT/0LGgho BVuAL9BR8UCxHBOvlewoAiAum1il2S/d3Mo4y5x7PzhZA1RGzfSmAUfTIaYz3F6A qjANBgkqhkiG9w0BAQsFAAOCAQEAGBmPdlW4zj6Fu4852xmUzReb+uPo+ZxHcePY 2uy00iAgv0O0N0fcXls9zN58H6h4qMtzK9xSDkdQdlGlEwjQn67S6y49Ubtuz1PC e0uwOocL3p3fNi6eljNyRGqPUpBF4XmRtezhCLh8nMjQNpEMnmG2TkshY9pyL1mX lbY+01osYXLGjD2gtWbJedcwv6W8rVpzIl0S9ZkIeFgdD/9mkzP8CVJav0YbbY0y v/BBLkaAN2+yXZOdwQxrGMfgTSuSvyQnfftq7ZnPePpbmtOdbK6S1Tn6helcuEpb 6rZdGTcEZEwDO4/OOOzAg1mvMen6zcbKJrnGfGU9QK8ibgQjdQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtmqcl+O4M6OAK3NXaXOr XHxscPQHhJUCgcePJgP8E59xHJbgPOAV1rF1ODlNpb0B2ZGnw86bgxR7Hp41TIsw tUkGVOBg26aMJjXepFg4LwfstmHaCo1Qyj+FyFa/dt6nhJtu/khBgKgLt/mUYj+w Ez3K/1IcbhbJtGWIY5eyADwUeGE8XYN8z7GQg6un+fJbr6YZZ707zsvsDLQUxWpo jGxLfw3op3l8+dYPTGd3uXr/jVb4zMYCQ44o9MHDWPRmyiZcy6jDHlLx4nBP6B+6 Fn09NGIeX/prdGNSdks8RZRUp1hd76jEJ+W+kJgpTEThVN0PzujtG+0diRt4clIv iYn9V5W2T/9WJBabuBRoKBNLkVCXvG/WltPHXCZOhfP1cCg1DHXTMWbl8oXDcz87 l6U/0uzNqJv6ZBtH5BL27XxFIlJpGm0t+gYySMKwa366AfausJ1QgqT4VObKQKJk pz+6eS40ux0QY35Uv0sFT+cTAQ4QzvsVFnKxBLdcMx6vggf27UvteiCcbWdEC7il 82Y25YxrwN06DqVUB3yfTAzUy2Xfepr1jDpVfjtDybVHyVc/P0V3TBVhrz9ANloM 7p/Y+lqlF9nrMjf+YxjXwPKq5olKvwMNhQQviqEIUidMfKDUYNo5XVz2P6dI+roH HmAKmzUEOajQz5EjYf4oeEMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324137159585334185819883217706688735512884 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 12:56:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 12:56:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'golazo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744194196002719137713209807513768749361765766451049597416498821074722323216838208053434501004114480270171813004227562201222695668959492486292540227096527663493185385533615042046214790415955570287980215881783008869367705352599803155776500602883699835067298149620164171969116734934112328288297412749103458609649352833348597856132935841512149970524121012453095470844289716362327694579686672021411274401411189035917148395757936250587782831919621926148028363515855204867126220325963394692650781369164777055833305136008358655854956225436702953806328652129778216929720191818751243034054113405610754942110836509690148941067619721157617712311936423537492836432700226183637782217834815365906993758861919212999653279933518116770366343186893277255885906372963736171223026388840605394458665909229840670375100140743456266527292545621134670124536623785606821001229867975329437917569738877992223632685193656422003105626208367544102092925329942262647845393638960388620823284837487717532785602452192701599074154463438265989139931778158381613599573839422991937651346355776357495174972256252667262732264871395800679504212386394520767315395102010170604714286845963039224011444848728864428667719794299587096938441835701832281911079203870252515958129719363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e249d2faa70de6b41eb6ca4a62728ae6d54ab44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golazo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golazo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188e364cc390000040300483046022100bd11f16d4d5e3731d24559a2573b789ea186af5dd6962f5fb5a65e35459ca84b022100cb9333b6baecc7ef517b513b6c402bacdb05a6e238dfd26f88e0a5b4cac4f4c3007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188e364cc30000004030046304402203aa29188479088a7b78ccd4ffd0b1a0868055b802fd051f140b11c13af95ec2802202e9b58a5d92fdddcca38cb9c7b3f3859035446cdf4a60147d321a633dc5e80aa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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