dominikapaleta.com

Issued by R3

About this certificate

This digital certificate with serial number 04:65:07:ad:fc:b1:74:54:d2:26:69:63:8a:69:04:7a:53:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dominikapaleta.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:07:ad:fc:b1:74:54:d2:26:69:63:8a:69:04:7a:53:70
Serial Number (int): 382827870774609400021145885774620294534000
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:e8:b2:ed:87:5d:c2:cc:6d:33:96:5f:01:10:bd:00:fa:b1:82:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:e4:26:13:32:49:3f:37:20:37:a6:98:8d:58:1f:87:63:16:6e:da
Fingerprint (sha256): b1:dd:3b:f3:a1:a2:e2:c7:98:b1:0b:53:01:a7:70:13:e2:5c:85:ff:c5:a6:d9:21:92:9f:a5:43:86:9d:42:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dominikapaleta.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dominikapaleta.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dominikapaleta.com

Other certificates including the domain name dominikapaleta.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dominikapaleta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382827870774609400021145885774620294534000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 05:04:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 05:04:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dominikapaleta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731227087537317304779424196125194312242419098744907504950746255937496910247467774925178170685959464452526704175108971689244623136838764796790059810540803576634807147072472834625959404195259104037818580391670004783167038496221907974799918594807380793787536981464722493635870989927887681249392152974661854554162488160360839259176812251563759367403410276372795982452032414333512555314712487367314699657659742367956424275155610120800923484456607158101748753070385021661693241890724962659608943201178053753219161530248629519049080679085092683327721099354366614390107279990255491643638824293612216111545072206234012937782311946067008985931623125608372239473696173363871708516910292907675199008527676040135563149148033798404326392745307744389390186833572179722457627749540192019091427352221251343035153800460092536142881028447351375096977365995400821912983638798687543550272285720770821886689520886574490911742928149974621843293870906548725230598430295981618711682990452422439271004221197124534765883134503561243603025811331584536622690301804274067604873832594096892363292495682462842184037583957838971707185730992982152051583034967011119445616391079918928988747122936432832094692701611064346977537469429865676713990701009001751636521733527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8e8b2ed875dc2cc6d33965f0110bd00fab1827f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominikapaleta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d25788e0d00000403004830460221008ec0ec236d70774128eded6db2470e66fce683c808b8af448f051b415cc9279d022100a9f0ad3e3c2ee4efe1a26fdee3b6b9f1d3205e8862755d362b9e86450bb91cd9007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d257890070000040300463044022038b55edb31f6701e86e69747336188f565e877f502c913f2a68f73d29fef02d502205364e42c4248c67c7e7a7e76aff6bf140ae4c2be96907e3fcf0e9c82ea35f9a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b069dfbb796770a79b8748f24602f06da0828bffbad029d60cef8222a87312bc9b34fc401292fb7992a39dcd86add3f060adcab6829a40a7f4d401ce64e04f362e73c64f9acf5b70fdd3ae60095f8d49c455cab835bef629a832a0a973cee3f0ac1ad81a0c17965fee0bc7e465f4b51ff41d6dca3a16db54f24a677fce39daa3590c02935a5eb836787e50d36d70eeb0d94deebc29f16e517d7b6e17f66968d0701a4fa3e4db31137793c35ddc5e6ecf41bd775138d5b95fba147c9eb908d3a44d0dbab32f4dc958a6cd2278ea12c78414fdd37f88ab8d90dc08f2b59b65771ce47efa74a172f5c98fe9c4366eb85c61d814899b22b05425b39488954ee1f687