curomatic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:00:41:41:72:35:b3:89:ec:fa:85:23:9e:c2:32:5c:da:b4 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curomatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:41:41:72:35:b3:89:ec:fa:85:23:9e:c2:32:5c:da:b4
Serial Number (int): 348535883362512162870271715807105210178228
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:74:d0:90:34:a9:8c:1e:f4:9f:84:16:8a:34:19:12:3e:4d:18:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:f5:2f:2d:99:de:4c:27:5a:ea:26:ab:b0:4a:cd:04:6b:b4:ae:9c
Fingerprint (sha256): e0:ec:5a:b9:94:91:09:f0:90:8c:33:ea:85:db:56:5f:ce:63:48:1e:d6:40:b4:f8:06:dc:a0:88:f5:48:7c:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate curomatic.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curomatic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccheadshots.com
curomatic.com
iluckyou.com
jenworth.com
oscarstudio.com
rellc.com
sexxx.baby
transclinical.com
www.saltcavernstorage.com

Other certificates including the domain name curomatic.com

(limited to 100 certificates)
curomatic.com
curomatic.com
sni.cloudflaressl.com
sni.cloudflaressl.com
example316.bible
curomatic.com
flanaganinstitute.ie
curomatic.com
curomatic.com
roa-news.com.curomatic.com
curomatic.com
www.curomatic.com
adf1ega1.org
www.curomatic.com
got12.com
ukr.bible
bridgespublishing.house
curomatic.com
hotyogastudio.com.webchannelcb.com

Certificate

The complete raw certificate details for curomatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISBABBQXI1s4ns+oUjnsIyXNq0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTUxNjAxNDRaFw0yNDA0MTQxNjAxNDNaMBgxFjAUBgNVBAMT
DWN1cm9tYXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX
V+O9hzjfKwsqTBj6AQa0smpDkqB46VaHDfrv3iKeJb3B8RkV2I99oFo2mr/Xlryk
LQ3co3PrJg2tjtCYDvvfm0o+JmLIP7YiWycisbdBF1KS0s+T3jgH9rsnotAGYkHI
uWCDl/lIyoKWkZ3OUYURMts9D/zTBpSJKctArcmw0v30ZEmXaCswPsmSn+0dSI0+
sdtuNoPDnoewWpKh9R71wiQWbSqWpHHxnq18T9J+59UhYVW9iUumNlKaNHhQFY5E
Z4EG+TwouOqWotbsVVB/NbuckJyO7V91RTW9Q7CKPNuZiOdi38jNGZQHqlPm4u/a
uhyRgOHEj3qSvAcJ3y6BAgMBAAGjggKVMIICkTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFGF00JA0qYwe9J+EFoo0GRI+TRiwMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIGdBgNVHREEgZUwgZKCD2NjaGVhZHNob3RzLmNvbYINY3Vyb21hdGljLmNvbYIM
aWx1Y2t5b3UuY29tggxqZW53b3J0aC5jb22CD29zY2Fyc3R1ZGlvLmNvbYIJcmVs
bGMuY29tggpzZXh4eC5iYWJ5ghF0cmFuc2NsaW5pY2FsLmNvbYIZd3d3LnNhbHRj
YXZlcm5zdG9yYWdlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY
AAABjQ4SbEAAAAQDAEcwRQIgG7wr2ryBY7EcgjPN47GDBs29yb3qT5BX+xFS3UXR
WYsCIQDgGvjr+qdwoPoHr/+AH9CmyoH83WnpN4m6T7yKwvVPdAB2AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjQ4SbnQAAAQDAEcwRQIgKSDC0itJ
O/GJua6+DODWIc15uMmK2RF66eYAHs3sLqcCIQDVcczTVnkb4yEEXPcVdZ+QK4Dw
OaPICLAv3rIMvCVqNzANBgkqhkiG9w0BAQsFAAOCAQEANbnqzU+8lF7ketfiSfIx
K7+JrHa3/fTjLhrY3tPC/0g3avrvJcc0Pfj3K4E4BxLhn8vujqsFo3CIP86CmKV2
T2T4VeifewVcWf327FHBtAkfs7PqyfEpSu2B2BweTOLI7DtmbuyXDo0YEEgn2Bmv
hV8CjOt6+rPzUd+aRb2XOaGlp7v3KRVtUfpcTgtmzw3fItVGS4NOIl+capn+4csE
9KiW0Ug/rwUEFzhR5c3J0j1Y+uBs3QrTOKn7kwuRwX9GV+IbdWe06OtNkpsBntB+
4b7ybd0MBxP3j3qCFesxU3qx/NWOrcPUC4l9aimZEDev+NzvenY9Zxz3vVi5M5oY
dw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11fjvYc43ysLKkwY+gEG
tLJqQ5KgeOlWhw36794iniW9wfEZFdiPfaBaNpq/15a8pC0N3KNz6yYNrY7QmA77
35tKPiZiyD+2IlsnIrG3QRdSktLPk944B/a7J6LQBmJByLlgg5f5SMqClpGdzlGF
ETLbPQ/80waUiSnLQK3JsNL99GRJl2grMD7Jkp/tHUiNPrHbbjaDw56HsFqSofUe
9cIkFm0qlqRx8Z6tfE/SfufVIWFVvYlLpjZSmjR4UBWORGeBBvk8KLjqlqLW7FVQ
fzW7nJCcju1fdUU1vUOwijzbmYjnYt/IzRmUB6pT5uLv2rockYDhxI96krwHCd8u
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348535883362512162870271715807105210178228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 16:01:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 16:01:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curomatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27184575550052392627652195122925693199499261169510273592555257730252786094984436328403514673291945296773680477444827008984813996352566575577993821371006917303928583255535982590885181279405935839425996950642442696399930759519099577356104732202204988844065873168910103356674417020542367211655290178879597987754287271376262910381092869542647514782511447507992248763012947911232869992982634904577497363129026646528912804807597029381382629722095389900804497849052821463992972643621550388773924669850444617987098250909014352479884540487412779671870369200717160556811964920474945860734667136858048560109019105300347296362113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6174d09034a98c1ef49f84168a3419123e4d18b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccheadshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curomatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iluckyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rellc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexxx.baby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltcavernstorage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0e126c40000004030047304502201bbc2bdabc8163b11c8233cde3b18306cdbdc9bdea4f9057fb1152dd45d1598b022100e01af8ebfaa770a0fa07afff801fd0a6ca81fcdd69e93789ba4fbc8ac2f54f74007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d0e126e74000004030047304502202920c2d22b493bf189b9aebe0ce0d621cd79b8c98ad9117ae9e6001ecdec2ea7022100d571ccd356791be321045cf715759f902b80f039a3c808b02fdeb20cbc256a37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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