gopikasmegamart.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:35:b2:36:a7:0a:a6:ee:34:b2:b4:c5:a5:e9:bb:fc:16:91 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gopikasmegamart.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:b2:36:a7:0a:a6:ee:34:b2:b4:c5:a5:e9:bb:fc:16:91
Serial Number (int): 366720995529137148975929889800086731101841
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:4d:ab:ad:cd:a7:5d:76:01:e9:ac:77:1c:01:a0:22:7b:ab:78:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:bc:7a:92:1e:fd:d9:ef:5d:ad:90:93:2a:28:3c:b6:f7:f8:21:e8
Fingerprint (sha256): e2:d7:20:2c:a4:31:85:d8:84:48:14:1f:9e:d4:d2:87:39:15:89:60:81:79:4c:cb:eb:78:0e:c9:20:95:dc:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gopikasmegamart.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gopikasmegamart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.gopikasmegamart.com
cpanel.gopikasmegamart.com
gopikasmegamart.com
gopikasmegamart.com.cp-ht-3.bigrockservers.com
mail.gopikasmegamart.com
mail.gopikasmegamart.com.cp-ht-3.bigrockservers.com
webdisk.gopikasmegamart.com
webmail.gopikasmegamart.com
www.api.gopikasmegamart.com
www.gopikasmegamart.com
www.gopikasmegamart.com.cp-ht-3.bigrockservers.com

Other certificates including the domain name gopikasmegamart.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gopikasmegamart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UscprrnqX0xuHLcksm2
VjIAboyMaJgA05JzcGaVxgCUtPXB2q1r+xayTgYtRN4DcTWbX7no4Y8Xt8cy5vn3
kg/Yye+r4QswCO2ENsgYnA40ysUlaP44z44GS5x78pcxHDZe5qO0D6rRjsvghaLY
ehFRyIJIMxCDCvyMuruZ0F8JMwlDoL9CduaYBga3mzckJwnrqHLjvm0zvDgire9F
7Ndtw+dzg4dd5MGv0FsS0lKrlfnUUaLCxPO92b0pr1c7bARvJtUswI3hXsB/1hpa
3v8a+8ygczEEPFLHVrlluyR+TYqBCs0xSyMmOh4mvXNz8E4gl6wpLVzdj4udMgLG
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366720995529137148975929889800086731101841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 00:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 00:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gopikasmegamart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26420844805679120237630455552386676794545601091630367806677220823164082029964757607446377607264095513793716625188415325133458325936356625689638900007364433005011844848819603538332965862029969584909775745083075341020331741661715579035479922738543665200642770319313101019054619049920701087368785993985770206217940505354832747035406412975732400857171005628005876254776493692791719264532813684348680581186512158266327634596397208445048813618692074837003581564103328551627523284661355897377252716046193033395303072630137368203472214640685866872580115339795044736015309170303319919043257944673734706764531325921888793970291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad4dabadcda75d7601e9ac771c01a0227bab789f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopikasmegamart.com.cp-ht-3.bigrockservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gopikasmegamart.com.cp-ht-3.bigrockservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gopikasmegamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gopikasmegamart.com.cp-ht-3.bigrockservers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017147e698f60000040300463044022003a131f9d42d88b674879572be4e036c90e06d63603fbfb389b0894a6951953302205b8f658091eada6b93129d098485247497b10686a472d6ed16129a3767fef0130076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017147e6992c000004030047304502203058f2c43422799b446ca23f1fc63b1473b90688adb29831cd9f8b027a6ef8e0022100ab47d082c88646f98d4d365fd21fdae0914129537c4109a8a2fb3b068ffeb0d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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