paintingservicesdubai.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d6:b0:20:cc:c4:79:0e:ff:20:3d:db:73:84:66:9d:d9:d8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=paintingservicesdubai.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d6:b0:20:cc:c4:79:0e:ff:20:3d:db:73:84:66:9d:d9:d8Serial Number (int): 334391398750296934242833687753573223225816
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bf:a1:45:68:9b:bc:c1:d3:de:b6:3f:f9:dd:6c:dd:96:b1:26:28:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d5:af:61:a2:c4:49:70:81:52:a0:6a:30:60:06:f8:d7:ff:ac:44:ba
Fingerprint (sha256): c1:8f:54:a1:ab:6e:9f:2e:52:da:8c:e1:d2:b6:33:95:17:38:f4:69:7b:1c:48:40:2f:97:ea:dc:16:46:1d:da
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate paintingservicesdubai.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paintingservicesdubai.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paintingservicesdubai.com
Other certificates including the domain name paintingservicesdubai.com
(limited to 100 certificates)
www.paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
www.paintingservicesdubai.com
paintingservicesdubai.com
www.paintingservicesdubai.com
www.paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
digitalgba.com
www.paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
www.paintingservicesdubai.com
paintingservicesdubai.com
www.paintingservicesdubai.com
www.paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
digitalgba.com
www.paintingservicesdubai.com
paintingservicesdubai.com
paintingservicesdubai.com
Certificate
The complete raw certificate details for paintingservicesdubai.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISA9awIMzEeQ7/ID3bc4RmndnYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDgwNTU2MTNaFw0y MDA3MDcwNTU2MTNaMCQxIjAgBgNVBAMTGXBhaW50aW5nc2VydmljZXNkdWJhaS5j b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8fK9nC/uwU6Jvz/u2 Q3954Z0SLODIrE7sYTrcS5k7tz+2AVtmLqhYA5byNLfEClr3lq7S4uLONI2Jg2vD O95ZXtlUlWbQqmwCfuDsdsoDrEIA7wlDzedIGtH3CVPtqDdF8SlyqOJYYHghPF61 tKfDYU5VxsU9Xvb6H+AMUOY9W+bfgmefAisC3KXv0wNAPD0NgB4kdfA2GBC4Lz1j A1VVq0kRbBBcRYdtmuRH+Aan0ECOi3+x+uEB7ZSdHRVqvIlj4K/A5XhH5Gatx6Ey wVcPmve1w5ECMuSUUK06RCQ7H+pt5gYrUw9yZq/ZYfR40zDc7dnDoH7yLcxauORY R8bvWl5b/a8m0HgKT8J4GM3jgoBrRs93XxZnkB/woKS0MceZsxKJrltaxwSvk1Rm ydWkw6s1/LdNxPnKiNN3wgnW1XLOOks38Zi6to4n5CVEuSaXX5dtFOo3tprBvfIN dKv5Av6sQnwiy9OW4G5jWFZ97yPh8UUjxHjAAu/dAF8Cm8cKpXMzGQFTc3mIuPc4 tz7HBPHdF872TfHA7MdTXE2Zpuh7uNHEAilRsILLh0X3ihbYnHI8aXZ8xTuNPPFt yjBLDOwPPp0jJ926lUfgisiy/BtqkvO52o3MAmt9VwnYbccSQQPMPzOIaMb1wTiI LbaggnVcrv2AeMTQcbjroFKXrQIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBS/oUVom7zB0962P/ndbN2WsSYoATAfBgNVHSMEGDAWgBSoSmpjBH3d uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6 Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6 Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGXBhaW50 aW5nc2VydmljZXNkdWJhaS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAXFYkzF3AAAEAwBHMEUCIEprqkU6Jn8OeJIEGlPXxqbz 02vABvonw0CCwK9NSCl+AiEApYVhSrci96e0IXOgWVIy2xF7idSZE5OTCYkeKtuj wTQAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXFYkzGBAAAE AwBIMEYCIQDgO/ulTSHpKWcvgRafwLTqkyE/gNud0xXCqmAL3rZikAIhAKvYd1qY O0s54IzwQ/bAGWAD+AZUtXWjxEzi0oyiLfF/MA0GCSqGSIb3DQEBCwUAA4IBAQCE Tyl4z4kaVYGxp62dIEEfmfL2JSJngkTMRxeX4a3mU9NQ79sFSbacOpPvVXc5/JF9 ypr/bcktmYECHJR5TG6a3ZFPkg3ICAOuA+iaTPGqcHdWAHdvrM4/ppf/yX5tXLXw XJRkr3Aef79KYkHD5WfRAslXsaj1nS8SOfXh5eIksZkVGoX/qO3b4a51QIYZNfgI IrnssCo7kQ5G8HGsKpAsTryMJcSQmiRGzHzS/R1vewjxB3xVPxse7rSN/YCy1A2t T5C4AWv93G8tfnV7UpeBLWyVrvqOZfOpTiND21KwwB7h/FsjIP2zKlg35ay2FVT0 6lCPvWDynhpDJ13TGISt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvHyvZwv7sFOib8/7tkN/ eeGdEizgyKxO7GE63EuZO7c/tgFbZi6oWAOW8jS3xApa95au0uLizjSNiYNrwzve WV7ZVJVm0KpsAn7g7HbKA6xCAO8JQ83nSBrR9wlT7ag3RfEpcqjiWGB4ITxetbSn w2FOVcbFPV72+h/gDFDmPVvm34JnnwIrAtyl79MDQDw9DYAeJHXwNhgQuC89YwNV VatJEWwQXEWHbZrkR/gGp9BAjot/sfrhAe2UnR0VaryJY+CvwOV4R+RmrcehMsFX D5r3tcORAjLklFCtOkQkOx/qbeYGK1MPcmav2WH0eNMw3O3Zw6B+8i3MWrjkWEfG 71peW/2vJtB4Ck/CeBjN44KAa0bPd18WZ5Af8KCktDHHmbMSia5bWscEr5NUZsnV pMOrNfy3TcT5yojTd8IJ1tVyzjpLN/GYuraOJ+QlRLkml1+XbRTqN7aawb3yDXSr +QL+rEJ8IsvTluBuY1hWfe8j4fFFI8R4wALv3QBfApvHCqVzMxkBU3N5iLj3OLc+ xwTx3RfO9k3xwOzHU1xNmaboe7jRxAIpUbCCy4dF94oW2JxyPGl2fMU7jTzxbcow SwzsDz6dIyfdupVH4IrIsvwbapLzudqNzAJrfVcJ2G3HEkEDzD8ziGjG9cE4iC22 oIJ1XK79gHjE0HG466BSl60CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334391398750296934242833687753573223225816 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 05:56:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 05:56:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paintingservicesdubai.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768960081265633973160968593052634065057736537738548675818935664917293026516333103950946810417818806436583728063754735314377385012988259955569155727818009042975065404624465174596824815504599747389003818858067242306944210926617658235054354597471395787788958658495484966359290054120076230954294671796265162019151511230384417264248357904471955060206623981390245962886796664932102510888571244322696301189166947989098600758938018335876928486829731048033247608597394447469815287728489440943843939417260097471189575643035541102791984710220337747661691209056369591546891605780389232245070132139381774748645952574466600711087226707057423468551358174053340371090674288238437865995808055927547526058203541694287922112691990065950617526072566175983983794601688649032785993098718383441833733029919145873658227104900080293832085639037736629889959903081784988942680011685505459294494689114026660230191228903219089698018400966265456764614365606753022258097399229367540661094597346470356975155408205830867700902466916578523664217799591291647049651804784951784881830331648564791778144932165361677855762289481719082920478978527121865080008866367381993025627171936730139360133815215730007753860749160872282283550072516199553702558751817869807254655637421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bfa145689bbcc1d3deb63ff9dd6cdd96b1262801 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintingservicesdubai.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017158933177000004030047304502204a6baa453a267f0e7892041a53d7c6a6f3d36bc006fa27c34082c0af4d48297e022100a585614ab722f7a7b42173a0595232db117b89d49913939309891e2adba3c13400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171589331810000040300483046022100e03bfba54d21e929672f81169fc0b4ea93213f80db9dd315c2aa600bdeb66290022100abd8775a983b4b39e08cf043f6c0196003f80654b575a3c44ce2d28ca22df17f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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