icu-management.ae
Issued by R3
About this certificate
This digital certificate with serial number 03:23:20:f3:cf:3f:3f:cc:8f:6f:f6:04:5a:84:27:55:5a:f5 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=icu-management.ae
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:23:20:f3:cf:3f:3f:cc:8f:6f:f6:04:5a:84:27:55:5a:f5Serial Number (int): 273290541864985234480280564689500336642805
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c5:37:36:ba:9e:e8:cd:3d:44:8d:46:ee:7d:27:24:20:0c:50:e9:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0c:f7:98:5d:4f:a8:12:a3:09:5a:a8:fd:e6:cb:1d:46:43:6a:42:e6
Fingerprint (sha256): dc:91:d4:a6:c1:85:52:52:79:16:55:ab:36:7b:92:59:ee:33:fe:2b:b3:df:25:85:e8:ad:94:d2:79:69:81:8d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate icu-management.ae
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for icu-management.ae
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aplacetorecycle.us
enerpactoolgr0up.com
hardnigga.com
healthwellnessplans.com.southwestchillers.com
homesweethome.net.healthyhomeatmosphere.com
icu-management.ae
join.mngophoustonco.org
murphyaggregates.co.uk
outofpatience.com.wwwjpnn.com
saaj.co.za.golfequipment.in
enerpactoolgr0up.com
hardnigga.com
healthwellnessplans.com.southwestchillers.com
homesweethome.net.healthyhomeatmosphere.com
icu-management.ae
join.mngophoustonco.org
murphyaggregates.co.uk
outofpatience.com.wwwjpnn.com
saaj.co.za.golfequipment.in
Other certificates including the domain name icu-management.ae
(limited to 100 certificates)
sculpit.world
5272653.ca
icu-management.ae
icu-management.ae
portland.world
ebaytes.ca
musicoldies.ca
shsadi.com.icu-management.ae
musicoldies.ca
thrill.vc
5272653.ca
5272653.ca
shadi.world
vertera.ca
shadi.world
vertera.ca
icu-management.ae
ebaytes.ca
vacations.vc
5272653.ca
icu-management.ae
musicbingo.ca
radiator.cc
5272653.ca
musicoldies.ca
icu-management.ae
vertera.ca
shadi.world
musicoldies.ca
icu-management.ae
ebaytes.ca
34755625397.ca
icu-management.ae
icu-management.ae
musicoldies.ca
mediaberry.ca
sculpit.world
5272653.ca
icu-management.ae
icu-management.ae
portland.world
ebaytes.ca
musicoldies.ca
shsadi.com.icu-management.ae
musicoldies.ca
thrill.vc
5272653.ca
5272653.ca
shadi.world
vertera.ca
shadi.world
vertera.ca
icu-management.ae
ebaytes.ca
vacations.vc
5272653.ca
icu-management.ae
musicbingo.ca
radiator.cc
5272653.ca
musicoldies.ca
icu-management.ae
vertera.ca
shadi.world
musicoldies.ca
icu-management.ae
ebaytes.ca
34755625397.ca
icu-management.ae
icu-management.ae
musicoldies.ca
mediaberry.ca
sculpit.world
Certificate
The complete raw certificate details for icu-management.ae in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAyMg888/P8yPb/YEWoQnVVr1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDYwNTI1NTlaFw0yNDAzMDUwNTI1NThaMBwxGjAYBgNVBAMT EWljdS1tYW5hZ2VtZW50LmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B7hZzZu9BKP4a2i70U3SvmplQdlLLQM1s9VsJ0TNL/isBuf3BNAIjguMYTX Ul4LwZaB5/PpkzXdQF9ejHOh4E+yTkTidCRnlCE/dsp3D0bHUAleettq8jQNCf7t DoTQ3ngGy+sekd1PSLcdUIYreLJOnGGV9gWG/2maNpU77QznWSUL3XMgUex6sSAV qPuPrOSizrm7KxZm6yz2pQbBM3Yw3K/MjX7wk3MrJMmoJq9JO7sDCJuZhgLEe1XR /KLWBv+vX+/spQoqeOsW21l+z64a29LElzv5fG4UUFk4gzoY3V4KG4PxxSIwqwr9 gzUSsn1WsWA08kNZN0+dlSchHQIDAQABo4IDGzCCAxcwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBTFNza6nujNPUSNRu59JyQgDFDpcDAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCASIGA1UdEQSCARkwggEVghJhcGxhY2V0b3JlY3ljbGUudXOCFGVuZXJw YWN0b29sZ3IwdXAuY29tgg1oYXJkbmlnZ2EuY29tgi1oZWFsdGh3ZWxsbmVzc3Bs YW5zLmNvbS5zb3V0aHdlc3RjaGlsbGVycy5jb22CK2hvbWVzd2VldGhvbWUubmV0 LmhlYWx0aHlob21lYXRtb3NwaGVyZS5jb22CEWljdS1tYW5hZ2VtZW50LmFlghdq b2luLm1uZ29waG91c3RvbmNvLm9yZ4IWbXVycGh5YWdncmVnYXRlcy5jby51a4Id b3V0b2ZwYXRpZW5jZS5jb20ud3d3anBubi5jb22CG3NhYWouY28uemEuZ29sZmVx dWlwbWVudC5pbjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjD3N /hAAAAQDAEcwRQIhAI+Ta9SCBq2HZZ6Uiw5KtSkv2mhEIy4YAaFsTiNMXb4UAiBV bOTt0q3xV61u7ClSZfFoX1LDMazbOVr7xRnCNUWzWAB2AHb/iD8KtvuVUcJhzPWH ujS0pM27KdxoQgqf5mdMWjp0AAABjD3N/l0AAAQDAEcwRQIhAIRfiqQ+gHLNiQZR rv51InIVbC3wZsnuBmkWKJIuqNSTAiBs2o4jnmTFlvurwANp9CnLKjF9dI+LoTOi oUeojU/2TzANBgkqhkiG9w0BAQsFAAOCAQEAsKlVvvvFO+Rnnqb0aFiWmfhvyzrW g8VT+6AZrr9MBX7f0XlcATXdPBmhValSVz8byWVuJpX7DTSbfglkne/QkNp2uaia lpL8s37WfSuyxofdRCjZDdvNOtm78LuUuxUL0U1PVrGTCjHWvn6m3m6/NfokNZU2 kKbU/VgtI+GkfisI06C8mO/sGYiZLJVy1NsjS4/DjEsUXipn4APzkGaQ/yx0p2L8 g7VjKVRDrcj+H+bQBLqLwNPZZPEPXYx+7IsN0Kc1yC3qFdAB+MbIJ6DagHCRZbGb CaNKLRAFNUzWL1v/pB8SUWyvk4ByewEIzBsZdfkl9giTT+bd9/LFWAwBwA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B7hZzZu9BKP4a2i70U3 SvmplQdlLLQM1s9VsJ0TNL/isBuf3BNAIjguMYTXUl4LwZaB5/PpkzXdQF9ejHOh 4E+yTkTidCRnlCE/dsp3D0bHUAleettq8jQNCf7tDoTQ3ngGy+sekd1PSLcdUIYr eLJOnGGV9gWG/2maNpU77QznWSUL3XMgUex6sSAVqPuPrOSizrm7KxZm6yz2pQbB M3Yw3K/MjX7wk3MrJMmoJq9JO7sDCJuZhgLEe1XR/KLWBv+vX+/spQoqeOsW21l+ z64a29LElzv5fG4UUFk4gzoY3V4KG4PxxSIwqwr9gzUSsn1WsWA08kNZN0+dlSch HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273290541864985234480280564689500336642805 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 05:25:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 05:25:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icu-management.ae' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26777748385604747161622445364468972566374738027256441088115697661156578712505862122128088388832883942547677501216380791700259158675339804006025039612572245890519218223211288760135209102160243646584778679132446370598973027543730797255946624471177408728725593534873691075447974094969809809715021835276456024708052064142757786897563374288369743556946554319269352443663189250247043494567673728219474882115752828253911134654823407646193854135037474153524104273305025716874918287567291587737199096668786641259302140387158331080559139164073549161821980019843648672607066697245979715742675143545702993684973430068345079013661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c53736ba9ee8cd3d448d46ee7d2724200c50e970 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplacetorecycle.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgr0up.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardnigga.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthwellnessplans.com.southwestchillers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesweethome.net.healthyhomeatmosphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icu-management.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.mngophoustonco.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murphyaggregates.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outofpatience.com.wwwjpnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaj.co.za.golfequipment.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3dcdfe1000000403004730450221008f936bd48206ad87659e948b0e4ab5292fda6844232e1801a16c4e234c5dbe140220556ce4edd2adf157ad6eec295265f1685f52c331acdb395afbc519c23545b35800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3dcdfe5d0000040300473045022100845f8aa43e8072cd890651aefe752272156c2df066c9ee06691628922ea8d49302206cda8e239e64c596fbabc00369f429cb2a317d748f8ba133a2a147a88d4ff64f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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