valeria.org
Issued by R3
About this certificate
This digital certificate with serial number 04:bd:22:78:19:70:ec:9e:0a:22:cd:87:fc:39:22:c0:6c:59 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=valeria.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:bd:22:78:19:70:ec:9e:0a:22:cd:87:fc:39:22:c0:6c:59Serial Number (int): 412808328418585091313419919081555269545049
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d0:52:19:67:71:6f:1a:a3:df:a8:7d:26:9b:46:a5:75:55:50:82:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 42:0a:f7:54:af:ac:b5:dc:70:72:c4:37:4a:ef:33:dd:7a:dd:e9:8e
Fingerprint (sha256): ce:16:e9:43:13:02:80:ff:be:f7:c0:ef:0f:3c:45:e8:1b:15:af:3a:3d:7d:1c:cc:09:a2:03:ed:85:bd:a2:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate valeria.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for valeria.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
valeria.org
Other certificates including the domain name valeria.org
(limited to 100 certificates)
www.valeria.org
valeria.org
creditroof.com
retire.fund
valeria.org
www.valeria.org
valeria.org
valeria.org
www.braincentre.com
www.valeria.org
valeria.org
valeria.org
valeria.org
internet.exposed
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
www.valeria.org
valeria.org
www.valeria.org
valeria.org
creditroof.com
retire.fund
valeria.org
www.valeria.org
valeria.org
valeria.org
www.braincentre.com
www.valeria.org
valeria.org
valeria.org
valeria.org
internet.exposed
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
valeria.org
www.valeria.org
valeria.org
www.valeria.org
Certificate
The complete raw certificate details for valeria.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISBL0ieBlw7J4KIs2H/DkiwGxZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjYyMDI5MTBaFw0yNDAzMjUyMDI5MDlaMBYxFDASBgNVBAMT C3ZhbGVyaWEub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA21CP fRm2CdID6+zFU+jV4ggSahYrIqL1n62GoWcIT7RoVOFKen+5Ij6/QcPifCt2a4lO 7L17SCgtZL2KpnJMpTB1rYYAWxk41UIbFhHSFwTnaKX7CJfuZRGDVQdiM8kiqfoJ eOeKenyvnjp5LJLN0cO/XawEIpGyniHOjtB8IVT3o5wmkd52OM/xk6D37p35kyA8 eZQyr6wUgXd+7IympEalYzIlqG7JoBEiLGru7sBUxaW3C4ZeDxQdbD6yt7HyA3Xd i4ZaNKBo8fk9ZYg8AA/wxG3vxVpMN4pAl/YNGbjFque+UpEm3kPvvTRahJNZ5TuC WYuYvxSIIdKoocxRRvEkDk8r+N185TUieDs3VSYivCJr2+bfDxdPJA3a9IdTt6Ii OqFGPzjhi0VuFQaOv2H8gu1ptZRZ9mpu3HSd31O2woWqucQxJD+6wtwRbDLkpRl0 Pss6vQ9q9xozAuSFgelxKgl2gAzy7Cimo5CLW03jgSJUdTpmz/Fe72m5008Z7WoU sqwLYUBve1iDw7wxwFAGL/wfFDik5LhdKNu3qaltaG/xy9zq4lO27vNpux9vEoNR ricWMrxWeGtCeCXpWXPjpr4W30yXSrG3XWmndzjMhK31kxiU2teEf8H9H69zwZHg lgLDGT902vvl3vtnuKUDDOzMVHSK3cIcCBojNhcCAwEAAaOCAg0wggIJMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQU0FIZZ3FvGqPfqH0mm0aldVVQgukwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILdmFsZXJpYS5vcmcwEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYyoCBIoAAAEAwBHMEUCIQDhszJ+naVR ZcGUw3RA4Qfu1Fddpc7qhJZSVvKJaYhEXAIgWyfLms85qCklzmCUHC9mvmkSS5Gk IcUDuSnQ96yQ91oAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AYyoCBI+AAAEAwBHMEUCIQD5FjwUIUrl4c+tmhdaAnJL0/gVwB4blH3zcdtwOoLq 9gIgeu6/9EtVVMZgcaIt4K20J/MT7+H4HgXPsyW9svg3zKMwDQYJKoZIhvcNAQEL BQADggEBAEaer8894w3bPOpBen1mePnzkka68FYQqu9Q61HtRyFAg3sdBNRwCRLn NI71Xx6XBBKVhDBmyqZ5RNZCnqoMmukxcQQdxzDMkHcmB6hh5H194z2BqESwnjCj 62TVYCbxkTnVrziQeLhav1lFJ5obNKnqtmAIYFNluyxAQRygeG9TTYWFBaeirJpr zB5FHRKrnn8kCYdlQw1/VqonO2FyjFix/6UxQeYoFUPd4qW7XnZKQ5gs9NdVQ/S/ kD6H7azC9jrMyN8oTxQ+OXXdnI+x8OdWKjo9HbL7LuItJwHD5AfbQxIwdVwi1XKj IXbqBmKBH8plGU+DGAa3u4LndfOwFBg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA21CPfRm2CdID6+zFU+jV 4ggSahYrIqL1n62GoWcIT7RoVOFKen+5Ij6/QcPifCt2a4lO7L17SCgtZL2KpnJM pTB1rYYAWxk41UIbFhHSFwTnaKX7CJfuZRGDVQdiM8kiqfoJeOeKenyvnjp5LJLN 0cO/XawEIpGyniHOjtB8IVT3o5wmkd52OM/xk6D37p35kyA8eZQyr6wUgXd+7Iym pEalYzIlqG7JoBEiLGru7sBUxaW3C4ZeDxQdbD6yt7HyA3Xdi4ZaNKBo8fk9ZYg8 AA/wxG3vxVpMN4pAl/YNGbjFque+UpEm3kPvvTRahJNZ5TuCWYuYvxSIIdKoocxR RvEkDk8r+N185TUieDs3VSYivCJr2+bfDxdPJA3a9IdTt6IiOqFGPzjhi0VuFQaO v2H8gu1ptZRZ9mpu3HSd31O2woWqucQxJD+6wtwRbDLkpRl0Pss6vQ9q9xozAuSF gelxKgl2gAzy7Cimo5CLW03jgSJUdTpmz/Fe72m5008Z7WoUsqwLYUBve1iDw7wx wFAGL/wfFDik5LhdKNu3qaltaG/xy9zq4lO27vNpux9vEoNRricWMrxWeGtCeCXp WXPjpr4W30yXSrG3XWmndzjMhK31kxiU2teEf8H9H69zwZHglgLDGT902vvl3vtn uKUDDOzMVHSK3cIcCBojNhcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412808328418585091313419919081555269545049 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 20:29:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 20:29:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'valeria.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894725871899047737133939365150611688089405785160722578411446214495220980926217318191480228296974453441756279661916834375212884376477280700983378040646208984368016112645406181766789534922411717020817577958419157887412722893331437575694491053718399623946650194672229477278754045054703590943487717702874636879399928791030914073524825120487747629629618493085203893728851701095168639930416568946529141820493370586952819702434198989146795395138595801100279877786545132781760668628083281664383547841823066119073990500916172724129787140410806956646445289475314270217650133853293925732349078422769529690896576694601189896084417018478965338916516468837650563538001122015878003001954387548402025603638554057520659611272114535854456392663712966460212544122931323170635862569985745538769112157705030047263728641404778798696425409856581457835324890010449350726985191070140710593508619139522022623290005218432689057834954496288699293634323767600092089665764466042457406476290552578399745446099577800601571829440779587969177815108111415788622156581546468780646120992288945235234289663585306693472921470164468702704413787805156208449464466646411418686716973485712805069128558627493899292512070184056323744730572342002263906013452924027737933309228567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d0521967716f1aa3dfa87d269b46a575555082e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeria.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca80812280000040300473045022100e1b3327e9da55165c194c37440e107eed4575da5ceea84965256f2896988445c02205b27cb9acf39a82925ce60941c2f66be69124b91a421c503b929d0f7ac90f75a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca808123e0000040300473045022100f9163c14214ae5e1cfad9a175a02724bd3f815c01e1b947df371db703a82eaf602207aeebff44b5554c66071a22de0adb427f313efe1f81e05cfb325bdb2f837cca3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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