loripsum.net

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:27:f2:f6:41:3e:71:a6:cc:b9:5c:0e:59:fa:1a:d1:eb was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loripsum.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:27:f2:f6:41:3e:71:a6:cc:b9:5c:0e:59:fa:1a:d1:eb
Serial Number (int): 344078574379386082237455055564714456830443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:3a:60:de:71:01:97:d8:45:4e:83:29:05:99:16:e7:8d:1c:80:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:13:06:9d:04:26:cc:ee:b2:78:8c:59:32:e0:96:bb:20:79:9a:da
Fingerprint (sha256): fa:ec:d3:68:12:ef:c0:ed:5b:71:c1:c1:d8:07:80:3b:bc:b0:7c:ae:a5:dd:a4:41:96:7c:99:08:0f:fd:e2:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate loripsum.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loripsum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loripsum.net
test.loripsum.net
www.loripsum.net
www.test.loripsum.net

Other certificates including the domain name loripsum.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for loripsum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344078574379386082237455055564714456830443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 21:14:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 21:14:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loripsum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875020574128489911583092708854530540239982297605696415561991958385446140396150325963777910994290970325610421714086847402991914023209453015929080898264168656184185054442092795786300504928061855565168462872839299159511272249804429915208534694865125663091940890398579903964410572805772177316026283852988772284583299858087510028347129027275753361396109614261268606946087299742498535157785031430498606196861854912000985475079417370768794517643444949274015729807857678334151382177278802423627463149310336606024716550379288961372420469529130897633067271461148715069914089221487544814905231601288536483055456946034782798625493300857589516813349490348764757534195141521902442045676601266021216579027674402697883078442063462355247407043434953656888567331065405092446737832712014536609897679387359666587224628408658009662927270522740118494784390059191608263789054909251694577262231817093218516833428864374064069022988177914880789864945708555839984203427573384650583186221647251472461817595231383092847034697253409401087768186244293447984825696043031741975756184528603555969053389581003694916801043800265208637929879809925920856209937713040190500314120797566044429241299361260640767115572765790203033448246742496025120952165320406248252609428777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f53a60de710197d8454e8329059916e78d1c80d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loripsum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.loripsum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189f61dccdd0000040300463044022049dcd58a94b4d301bef001d6c9c79e4cb3212016245cf8c62571a8bd3c2a3fcd022047975ba464d54451a134f1b76b22d1a06807b298529959ba17119c314eb1f6820077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189f61dccf4000004030048304602210090d7408e1988df8f96072104855c463415132df312d7398c6da3615ffb9a1533022100c8715c373ab483decdeb2c98e84a8bc3dd6672b9d50a4d7ea7dc0db999acf2c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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