www.xolholding.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:15:44:0b:6d:8f:a8:56:87:0f:bb:b9:25:4c:0a:40:a1 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.xolholding.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:15:44:0b:6d:8f:a8:56:87:0f:bb:b9:25:4c:0a:40:a1
Serial Number (int): 414492190005587747318780288617596337143969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:a1:49:d4:b1:d3:92:58:9b:60:a9:34:dc:57:cb:a4:29:ef:3e:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:26:c2:6b:1e:bc:3e:fe:25:86:48:5b:f2:c5:5a:69:a6:b3:ee:c3
Fingerprint (sha256): e8:34:18:c4:b4:5f:e2:f5:a9:dd:42:ba:dc:02:87:df:f3:6b:18:8f:96:c7:22:04:9f:0d:04:eb:a3:35:1f:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.xolholding.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xolholding.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mymada.com
mymada.com
www.xolholding.net
xolholding.net

Other certificates including the domain name xolholding.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.xolholding.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISBMIVRAttj6hWhw+7uSVMCkChMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDQxMjAwNDZaFw0yMzExMDIxMjAwNDVaMB0xGzAZBgNVBAMT
End3dy54b2xob2xkaW5nLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANELiJvYgp9rHlimHy3Lde009MFyHo7ksTgoteHnTTFIjUGdI4AXan3deL1R
PixuhMe7X+AxzRYSkoD5Wvq/NwAl/3g46wAKx1hgAF23aP6sEZ983ip4H2t+UigO
Hk28vQuy1IoOSAyomHV0ZkFpKjRxHjA15hyVrE1c3nLEioIwQDZCLSdNucDeITN2
Ti8oNVjOJ/f5OZh1uIfKOKljDJiF1vJpVYHijoDmHwhtIfa4wP4RDhlYv7pVdRea
ZlojhcBDkYRjkTBk1PvwCSYa5vBLIx+Yh81o0W7gP6lK9wVOxUyxQCfPa+P7oCCY
4n4I+SaN+Jep7sM7SOKOqnfldqcCAwEAAaOCAj4wggI6MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUpqFJ1LHTklibYKk03FfLpCnvPpgwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wRwYDVR0RBEAwPoIMKi5teW1hZGEuY29tggpteW1hZGEuY29tghJ3d3cu
eG9saG9sZGluZy5uZXSCDnhvbGhvbGRpbmcubmV0MBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGJwKLdNwAABAMARjBEAiBWBS/ilvaLte3zA09FYRJG
E98HhguoOJIVniyDSb60rgIgUHzSE57U1ADPF3OF8b7wZ0UmU1AQmUOv6RBBcyla
uyIAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYnAot1BAAAE
AwBIMEYCIQDRLeGUf72Y2K4DiWB2yXjsjBlB4h4IIPw2iG1Y8MEfGwIhAJW1s9pH
IUcs4qj6iC910UhyyezWHoQRWWYYPtJNy+gwMA0GCSqGSIb3DQEBCwUAA4IBAQCc
T7NH+Zkfr8/cVcSRYQAR+zXIA2G26JXEtgT59cNFw/I2hAZJQqYpwDJGpAJOEmTc
nSYBTuowrl04zf2FmHyCuAradCqSRYimTBOyFmbqrPN5bAYm2V0HjBQ4QPJErIO1
SsbPdZvwlIA2lEujXQMYww6/Bmd43hht7f/PIL4mvnEJcpvZppwJtHZuUx4kUMvG
Z+qV2zVVYfOTuXkyVTCwKwsXMsWRcHurKMeQsZ/TRLqe3xBM15akMEsSlrXUEgeQ
P8Dm3IuOKi++MDppZ2mjoOo619i4xhXYpnne3p3IY1Bu8vHbHkorQC21vfKisU5i
8tvrldvicbufyWS6WF7x
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QuIm9iCn2seWKYfLct1
7TT0wXIejuSxOCi14edNMUiNQZ0jgBdqfd14vVE+LG6Ex7tf4DHNFhKSgPla+r83
ACX/eDjrAArHWGAAXbdo/qwRn3zeKngfa35SKA4eTby9C7LUig5IDKiYdXRmQWkq
NHEeMDXmHJWsTVzecsSKgjBANkItJ025wN4hM3ZOLyg1WM4n9/k5mHW4h8o4qWMM
mIXW8mlVgeKOgOYfCG0h9rjA/hEOGVi/ulV1F5pmWiOFwEORhGORMGTU+/AJJhrm
8EsjH5iHzWjRbuA/qUr3BU7FTLFAJ89r4/ugIJjifgj5Jo34l6nuwztI4o6qd+V2
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414492190005587747318780288617596337143969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 12:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 12:00:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xolholding.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26389493181855531889968178515956143230378245818351973888600347014630765774112770027436419613613134909964696542843884690471884451350500860418555416105742665231775171613479665586099195448737120604109804382751752210897562213680873753593522124161729352733450648704469917145484306361958636163178186410257788747446560883980830180592850884094587306906620940631500421557481868939469465813670330464643311556663011624338914739983628641593378389338835286059747641592872962829265657035986497397470061357717094835239702153949432011900310215231808273161304524116306467739554123531889805380874609525833142668370420473627050558977703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6a149d4b1d392589b60a934dc57cba429ef3e98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xolholding.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xolholding.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189c0a2dd370000040300463044022056052fe296f68bb5edf3034f4561124613df07860ba83892159e2c8349beb4ae0220507cd2139ed4d400cf177385f1bef06745265350109943afe9104173295abb22007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189c0a2dd410000040300483046022100d12de1947fbd98d8ae03896076c978ec8c1941e21e0820fc36886d58f0c11f1b02210095b5b3da4721472ce2a8fa882f75d14872c9ecd61e84115966183ed24dcbe830
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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