www.londonar.net.sajur.net

Issued by R3

About this certificate

This digital certificate with serial number 03:3c:f1:f3:9c:41:d8:3c:c7:12:96:42:46:04:2f:03:03:04 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.londonar.net.sajur.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3c:f1:f3:9c:41:d8:3c:c7:12:96:42:46:04:2f:03:03:04
Serial Number (int): 282075408654930487407009879635410339169028
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:2b:b6:0a:40:a5:cf:68:95:97:cd:f4:0e:0c:24:5a:0a:62:eb:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:db:2e:f9:ce:f7:33:71:1b:a7:5f:a4:97:43:81:16:93:90:f1:dc
Fingerprint (sha256): fa:68:97:57:e7:ee:5c:93:f7:6a:9a:c2:16:15:14:a9:fb:6d:6f:f3:38:c6:43:17:89:3e:1e:51:6f:d7:bf:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.londonar.net.sajur.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.londonar.net.sajur.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.londonar.net
londonar.net
londonar.net.sajur.net
www.londonar.net.sajur.net

Other certificates including the domain name sajur.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.londonar.net.sajur.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAzzx85xB2DzHEpZCRgQvAwMEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTkyMDQ0MjRaFw0yNDA3MTgyMDQ0MjNaMCUxIzAhBgNVBAMT
Gnd3dy5sb25kb25hci5uZXQuc2FqdXIubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4xmXKypYbVVHMIirCAzvsqHCRFcDToaLOssmvdpsyHWHo0Ld
IWaCHD4RqMRte8aX1OaceLYj9qad3SHb71gIQxwdM1xTBlMr77v95figDxjiVKgI
p6r2OfLmF70c1NK+xeQsd9BLXCEwUWR/zXudykmqlT84ng/9cFB3sHgAz0zSIp5n
vKloFvbSP7//aybkPhq0oP1dGC+SB4MzoqiXmuDGajCYG3ILKVK9Q3SFqeaMt5O0
LSKe+4N1VtOcRC4lWFMxSTt/bb7Ao6mfmK2f6RVgtR+KtuH1Fg3hVNbcCRHHST6W
3TghVfsSYvS9kZEbYbiognzSA0Aqp6siSzqpmwIDAQABo4ICUjCCAk4wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTKK7YKQKXPaJWXzfQODCRaCmLrsTAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzBbBgNVHREEVDBSgg4qLmxvbmRvbmFyLm5ldIIMbG9uZG9u
YXIubmV0ghZsb25kb25hci5uZXQuc2FqdXIubmV0ghp3d3cubG9uZG9uYXIubmV0
LnNhanVyLm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjvhR
Wd4AAAQDAEcwRQIhAPjlaJTgU5saz6m5ivp0NiRbolcGR24gV0KOQPRsTfGoAiBs
mm7Pbwj19H+W4tKCwL5GHjXdXHvSpNesp3I4HEdmMwB2AN/hVuuqBa+1nA+GcY2o
wDJOrlbZbqf1pWoB0cE7vlJcAAABjvhRWrQAAAQDAEcwRQIhAMb///zijZ44a+P3
Dmyla40/ScFRIzk55tbOkTBntUYRAiAKshAVeqwrfrZgJVncbIPrb+qYIrBfHcXz
6gPh9CxG3jANBgkqhkiG9w0BAQsFAAOCAQEAK6pzIgdYqQi8aiBw+K8NcOlU4Tg2
SYnjUjLxoSbf7iqet3WlH5dblPki7iFeVbvbmMNssc/BxaIS5ApWmThThmWk8oeZ
apI6krDVaFTPyn9xoBPKFmokYrpx3aAil/2Dhi5UMOj7En9Zgnr4I0xOBEFnaYRw
2UbmaOIq+cRMbcpiXd9q/DfWLINBupxZC3vtFsUpBnRsWfLIB9erEkbcQ4WZ5QgT
J43v8mcm5cN2h7duwi5Aqi30CAXC/QiIk8iDr9bIS7pTUnsGhLcwwEd5GXkv3ifU
VdpvcPhnWjTa4DqHUEioaQb282CZoE4Zh7sAyj81gOWs8mbzZKHwyOSDUA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xmXKypYbVVHMIirCAzv
sqHCRFcDToaLOssmvdpsyHWHo0LdIWaCHD4RqMRte8aX1OaceLYj9qad3SHb71gI
QxwdM1xTBlMr77v95figDxjiVKgIp6r2OfLmF70c1NK+xeQsd9BLXCEwUWR/zXud
ykmqlT84ng/9cFB3sHgAz0zSIp5nvKloFvbSP7//aybkPhq0oP1dGC+SB4MzoqiX
muDGajCYG3ILKVK9Q3SFqeaMt5O0LSKe+4N1VtOcRC4lWFMxSTt/bb7Ao6mfmK2f
6RVgtR+KtuH1Fg3hVNbcCRHHST6W3TghVfsSYvS9kZEbYbiognzSA0Aqp6siSzqp
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282075408654930487407009879635410339169028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 20:44:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 20:44:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.londonar.net.sajur.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28668714374351742361058475429014325319824894490885485685847937207138768543021922928702707181329102070211530222181710779933221728577824718161522573430029216666489747349084230511616912047389100047925782671002052069509018220959021670263305837646978028634600729446546130976895240456666814378564728647174835074207929518905929681502967576685403387538293939711580442560368377337410474795304876648261510863184927814369465961161402859858503617293014448313634981110228509000251882074791464798054892900631577948949724378651228253851473084753061176063985177602032573511428460474526467197188742633435683184288444920032306415708571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca2bb60a40a5cf689597cdf40e0c245a0a62ebb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londonar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonar.net.sajur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonar.net.sajur.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef85159de0000040300473045022100f8e56894e0539b1acfa9b98afa7436245ba25706476e2057428e40f46c4df1a802206c9a6ecf6f08f5f47f96e2d282c0be461e35dd5c7bd2a4d7aca772381c476633007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef8515ab40000040300473045022100c6fffffce28d9e386be3f70e6ca56b8d3f49c151233939e6d6ce913067b5461102200ab210157aac2b7eb6602559dc6c83eb6fea9822b05f1dc5f3ea03e1f42c46de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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