rumahroda.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:24:05:47:8b:11:d3:41:94:56:c5:14:73:6f:a5:63:fb:14 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rumahroda.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:24:05:47:8b:11:d3:41:94:56:c5:14:73:6f:a5:63:fb:14Serial Number (int): 273594040618157599464765451061332751416084
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a0:6d:4b:ef:21:d6:44:3e:41:67:07:bd:68:ad:24:b4:99:83:06:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f2:59:45:c7:f4:48:93:bb:0c:f9:70:ea:53:96:27:17:b2:94:6c:30
Fingerprint (sha256): dd:69:a8:51:92:73:b7:6b:99:a3:74:fc:8c:99:fc:f4:21:02:6e:32:1f:7b:4b:0f:44:33:fb:45:05:97:fa:42
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rumahroda.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rumahroda.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beta.rumahroda.com
mail.rumahroda.com
rumahroda.com
www.beta.rumahroda.com
www.rumahroda.com
mail.rumahroda.com
rumahroda.com
www.beta.rumahroda.com
www.rumahroda.com
Other certificates including the domain name rumahroda.com
(limited to 100 certificates)
www.innovatechmobile.com
rumahroda.com
rumahroda.com
rumahroda.com
beta.rumahroda.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
rumahroda.com
akomoo.rumahroda.com
rumahroda.com
academiadosinovadores.com.br
mada-vote.com
oberuzwil.avdis.ch
kidscantext.com
www.indieforge.io
www.appsasync.com
rumahroda.com
theradiofy.app
rumahroda.com
rumahroda.com
supertrivias.com
www.edh-league.com
rumahroda.com
remissoeste.com.ar
tad.codes
sni.cloudflaressl.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
rumahroda.com
chromecents.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
letsscoutabout.com
rumahroda.com
beta.rumahroda.com
namastepuglia.com
rumahroda.com
rumahroda.com
akomoo.rumahroda.com
admin.citiclub.com.br
beta.rumahroda.com
rumahroda.com
rumahroda.com
rumahroda.com
beta.rumahroda.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
rumahroda.com
akomoo.rumahroda.com
rumahroda.com
academiadosinovadores.com.br
mada-vote.com
oberuzwil.avdis.ch
kidscantext.com
www.indieforge.io
www.appsasync.com
rumahroda.com
theradiofy.app
rumahroda.com
rumahroda.com
supertrivias.com
www.edh-league.com
rumahroda.com
remissoeste.com.ar
tad.codes
sni.cloudflaressl.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
rumahroda.com
chromecents.com
beta.rumahroda.com
rumahroda.com
rumahroda.com
letsscoutabout.com
rumahroda.com
beta.rumahroda.com
namastepuglia.com
rumahroda.com
rumahroda.com
akomoo.rumahroda.com
admin.citiclub.com.br
beta.rumahroda.com
Certificate
The complete raw certificate details for rumahroda.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAyQFR4sR00GUVsUUc2+lY/sUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjQxNzQzMDhaFw0x OTAyMjIxNzQzMDhaMBgxFjAUBgNVBAMTDXJ1bWFocm9kYS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2x+dyXIqYXTZAu1qY8WfyaOM4Bym9X/0L H+I8D6j5TfOPNKnbGWLw0leLra8HWdFBGlSP/TTxeRd5myumhCdVQTBE1a0OwzDv JG7N2u9MXG/lbPUOjBSaE4Mbr6dZxWYXeMPn8XAPS06YdTF+IXBH4bgGA8HgaqX4 bEe4WXoxga5LfUJH62KQnQ9m26y4PC0hcZMWnnwWlP5xeF2WJmnepG8WWQHgNr+8 KtqFd16TKQDkcb5hRNA5ZAG51kproPrObeLvQeUNxGLdwRwyp8s7YwGKBDNlLOw1 LHgXx7x8TKVkJ1GWPzfdNOnwrelrjck0UmwsLBWSJU00i3ma4OUjAgMBAAGjggK1 MIICsTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKBtS+8h1kQ+QWcHvWitJLSZgwal MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wawYDVR0RBGQwYoISYmV0YS5ydW1haHJvZGEuY29tghJtYWlsLnJ1bWFocm9k YS5jb22CDXJ1bWFocm9kYS5jb22CFnd3dy5iZXRhLnJ1bWFocm9kYS5jb22CEXd3 dy5ydW1haHJvZGEuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG NzV55hB7zFYAAAFnRwhYxgAABAMARjBEAiBZ/hAokvK6zBVVzNBWRovjTfzygxkx 1OWywLi+NM72vQIgV+mP0d+2l/qy30+W2el4RGGn8bCgTdRvdTNDE6OSTGgAdwBj 8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWdHCFjiAAAEAwBIMEYC IQC5oLjTmNF4lZrrhpwJyYjTXgoycrUf6Z3MJf1c0mbqZQIhAIzN3sW3Fh0fphi4 LDHhet3x47poWIx/JP35CCjGHo/AMA0GCSqGSIb3DQEBCwUAA4IBAQA6Db6PeBWi i1gDZy68LGRbv5ZjjuOouZm0U8p0S0RuFjmntm8EjzE+bs2TBsT6UKfox6BdtI9I t+k1wekUQlsHojNfoibC/BLyzATSA43grKIfY76CcnjsQl/uLiKjudycYugSgBBt ePqRfcPCTPxz5FcIPsQgwuFKyO3JXPTYzddRzA5KaMm4jH8cRcI17VlmBvqnXaaO bV8UYnboYmAU9R63nyB/JaOK5bDaeqbiloWT3M0q9Jr8m/YiwiRfXZ+OVdqvlKGv 1umI4ISinDY46lnyNRN1R9lI939AegGFVdpiHuFb/+hlxK8kHyuP3pys7MFUhI3g Z5dti/FvxV+7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsfnclyKmF02QLtamPFn 8mjjOAcpvV/9Cx/iPA+o+U3zjzSp2xli8NJXi62vB1nRQRpUj/008XkXeZsrpoQn VUEwRNWtDsMw7yRuzdrvTFxv5Wz1DowUmhODG6+nWcVmF3jD5/FwD0tOmHUxfiFw R+G4BgPB4Gql+GxHuFl6MYGuS31CR+tikJ0PZtusuDwtIXGTFp58FpT+cXhdliZp 3qRvFlkB4Da/vCrahXdekykA5HG+YUTQOWQBudZKa6D6zm3i70HlDcRi3cEcMqfL O2MBigQzZSzsNSx4F8e8fEylZCdRlj833TTp8K3pa43JNFJsLCwVkiVNNIt5muDl IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273594040618157599464765451061332751416084 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-24 17:43:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 17:43:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rumahroda.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23073947883986098384920607586092245679484834907760522146679455439167058295969383457318890538313606929164567556067453498732675454277125688853820646392147499092451949643674000356505785834656393041776979694507787008401916198914225963682451234881109881417503562452437960672939170530728608227270652596078473437770690771022631915433580302518753463548699885148292828559957664072317260691683649458699618000207013481896898768119713012262657717115031603795053168283150804027244131316641373602923973900676608689039157532962987739225720334629096617015505998464757005083083834736143321517075697608009939334566322137000847805048099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a06d4bef21d6443e416707bd68ad24b4998306a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rumahroda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rumahroda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumahroda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.rumahroda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumahroda.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167470858c60000040300463044022059fe102892f2bacc1555ccd056468be34dfcf2831931d4e5b2c0b8be34cef6bd022057e98fd1dfb697fab2df4f96d9e9784461a7f1b0a04dd46f75334313a3924c6800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167470858e20000040300483046022100b9a0b8d398d178959aeb869c09c988d35e0a3272b51fe99dcc25fd5cd266ea650221008ccddec5b7161d1fa618b82c31e17addf1e3ba68588c7f24fdf90828c61e8fc0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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