loca-web.net

Issued by R3

About this certificate

This digital certificate with serial number 03:78:8a:2c:8b:37:28:86:89:0b:24:e3:24:5c:90:d5:42:c3 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loca-web.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:8a:2c:8b:37:28:86:89:0b:24:e3:24:5c:90:d5:42:c3
Serial Number (int): 302354406573898475367842222121075856458435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:84:ec:8b:d8:ae:b9:58:ea:77:e5:49:73:78:78:19:ce:09:d6:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:c2:c6:94:85:36:25:ad:91:77:71:e8:0a:b5:8a:07:14:82:fd:a6
Fingerprint (sha256): e4:82:ff:a2:91:5a:05:e1:21:5d:7a:91:43:b7:96:ad:d7:e0:7f:43:34:17:45:1c:e3:83:73:24:ce:90:7b:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loca-web.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loca-web.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.loca-web.com
*.loca-web.net
loca-web.com
loca-web.net

Other certificates including the domain name loca-web.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for loca-web.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISA3iKLIs3KIaJCyTjJFyQ1ULDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MDEyMjAxNTZaFw0yMzA5MjkyMjAxNTVaMBcxFTATBgNVBAMT
DGxvY2Etd2ViLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKeD
5RIFAcU3HRvYYtRagzgDQ2KWgQkix54CVmXra53Q6Ma+7mkEhY/G+ZCCdcRfGCB1
KhWK2n7mZOmQIjENwEQR7DS45tjFOtpnSprqDJp8baROdM1wQAlBY1Rpe6nQcmxM
IwRi47CPLvCQ7Nuv4uj5XCFOB2AgI4ID0Eg97XFiukmILtGO44rtkdWelIpUlg5M
KMe6G0ZQEKfF2oRjCYucvpObD+MtuoVh7fnqlq86ETrOLgKtGcXqERAxm52Ozkaa
1ra+wpJ9D1MgXJoNtOUf/QZ0KHAHiYjtwu6s0s4kQFMB8QlS3g1ZbuK3dt03QY5Z
qLqVEcMt1Tb/4Ye5ROsCAwEAAaOCAjwwggI4MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUR4Tsi9iuuVjqd+VJc3h4Gc4J1hswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
RQYDVR0RBD4wPIIOKi5sb2NhLXdlYi5jb22CDioubG9jYS13ZWIubmV0ggxsb2Nh
LXdlYi5jb22CDGxvY2Etd2ViLm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4d
CYEl7bSZAAABiROxCBIAAAQDAEYwRAIgHMYL+Q2PWlGMlxzyVVlke7LyNWRVrMM8
3vGjYplV36QCIFeoXsn085oyXRQy2kBlG1ehAhLqsXVie8sXLVLHxLJ4AHcAejKM
VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJE7EIKwAABAMASDBGAiEA
m0NrfdiFyhnsK6xAqeR1dDWJXs8lID7qBjNpMZJNP0oCIQDbwzRwdoYcd0z7CcDt
LYfv8yq5eDY/4XZvAvdGSJl09zANBgkqhkiG9w0BAQsFAAOCAQEAL1G6I+LltleC
k4CTGf1jdcDp4OAiNTleH3tFwibq/jjmniyHtIGsqQrLFZTw9I2eOOLFnzRuskNZ
S+sC9SdHx2khmrfae+MYyOaGJwc0yPx6j5lN6szY/1qGbhYvmhazfoHd6W1ZcJf/
lS1l6rxeR+GkewQ+fmfNMXHpgRu9r38TtSTO8lELxpfFrAmpb4eq8BsN3u8q5k4b
ZXSAFvEvgii4Y3jS7IzLkXUU2o8ctnCBeY0E8KeiK+2eWrZ1k3nKltosSrZ506IT
Z3ITx404uSk3vPgULt5cYdeEwGs2oLhrifFW2ujuxXMOtu/UdUrW5GipEgeLartg
RPqY2ug/VQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4PlEgUBxTcdG9hi1FqD
OANDYpaBCSLHngJWZetrndDoxr7uaQSFj8b5kIJ1xF8YIHUqFYrafuZk6ZAiMQ3A
RBHsNLjm2MU62mdKmuoMmnxtpE50zXBACUFjVGl7qdBybEwjBGLjsI8u8JDs26/i
6PlcIU4HYCAjggPQSD3tcWK6SYgu0Y7jiu2R1Z6UilSWDkwox7obRlAQp8XahGMJ
i5y+k5sP4y26hWHt+eqWrzoROs4uAq0ZxeoREDGbnY7ORprWtr7Ckn0PUyBcmg20
5R/9BnQocAeJiO3C7qzSziRAUwHxCVLeDVlu4rd23TdBjlmoupURwy3VNv/hh7lE
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302354406573898475367842222121075856458435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 22:01:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 22:01:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loca-web.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21146836682337074443547001761569983279909584650960833199140554540502354190383241929722558877377519290492136333642503877155281694149831328135226423416694162770772422300877418297788530404394517824305658533099798469084453358506215148431383327389581503370887149342947598929519038547491374376312844995265919092871837241216881461142153896499517537402113905307134906564867437706908393150433570604110741287892967207570667095024196059563872803484265675129114101667883256461061437593892250827702315901876540557383434032415456335298511814739311094354508230384726335869746122600199073039975559006800885607025429284539094435185899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4784ec8bd8aeb958ea77e54973787819ce09d61b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loca-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loca-web.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018913b10812000004030046304402201cc60bf90d8f5a518c971cf25559647bb2f2356455acc33cdef1a3629955dfa4022057a85ec9f4f39a325d1432da40651b57a10212eab175627bcb172d52c7c4b2780077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018913b1082b00000403004830460221009b436b7dd885ca19ec2bac40a9e4757435895ecf25203eea06336931924d3f4a022100dbc3347076861c774cfb09c0ed2d87eff32ab978363fe1766f02f746489974f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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