gudul.net

Issued by R3

About this certificate

This digital certificate with serial number 04:e1:3f:a2:81:c0:8c:23:bf:08:9a:9b:63:b2:de:3d:5c:33 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gudul.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:3f:a2:81:c0:8c:23:bf:08:9a:9b:63:b2:de:3d:5c:33
Serial Number (int): 425097261431763690397537271584694957071411
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:de:8b:d9:52:c3:16:5c:5b:d3:72:52:e4:67:e6:8f:bb:79:f9:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:f4:c7:eb:81:ff:ba:54:e0:f2:ee:86:01:d7:c5:35:c9:5d:d5:3b
Fingerprint (sha256): fc:bd:f6:92:d0:07:e5:25:4a:2c:e7:2c:9b:69:0e:43:de:b0:8d:84:2e:e2:19:c5:71:c5:6d:bb:54:d7:43:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gudul.net

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gudul.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coco5000.com
coco5000.fr
coco5000.net
db.gudul.net
gdl.re
gudul.eu
gudul.fr
gudul.net
mail.gudul.net
nivier.com
rc.gudul.net
sousparis.com
sousparis.fr
sousparis.net
sousparis.org
splatland.net
www.coco5000.com
www.coco5000.fr
www.coco5000.net
www.gdl.re
www.gudul.eu
www.gudul.fr
www.gudul.net
www.nivier.com
www.sousparis.fr
www.sousparis.net
www.sousparis.org
www.splatland.net

Other certificates including the domain name gudul.net

(limited to 100 certificates)
gudul.net
rc9.gudul.net
gudul.gudul.net
gudul.net
rc9.gudul.net
rc9.gudul.net
gudul.gudul.net
gudul.gudul.net
gudul.net
rc9.gudul.net
gudul.net
gudul.net
gudul.net
gudul.net
gudul.net
rc9.gudul.net
gudul.net
gudul.net

Certificate

The complete raw certificate details for gudul.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAronutMUNiIlV1KKuh7bE
rm3aP+8pwdP/DuD09a0gBujaQ0UhoQDVrJnepbydjpWcrBSw089GC9oz3naEI92Y
L6n/0Ur6ltVqtRrUFi/7yfF8Gvrcfb55Rbci1TiZUB6vdrZC6HUvyi5Whsc10W22
kgXJwn3y5G1o2dmsstPIPxk3SND+XNWkijDBEbj+i6p1oY9zYdM5F2geMrMjvicO
SMREQZ/S2wgzoHV50HxfKm8UWS34fYgZtyNzTyur5NK+3va2KQMSoc/RghotTIyh
0dczO+MaEL0DUAdoF1Donvzwbf77Q4rrgOI9Z+EJjM38yazXlhAcT8SiwQZ4A+57
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425097261431763690397537271584694957071411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 02:37:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 02:37:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gudul.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22033482088160843673582694906182372154556329798441137265608944172066138790444813866424070056316324347540554907729509273397120978038938533153139755693283618580147409442649550318146857115687912912806090688733202568618676028901925727968896000313934953843048694870768737920521083994148860599893176153687432080307219169949683467331414060313850796916193508815263050009476881562920630593582443600244759283555886679111765525510099071123682079635344591874188166922726890113161936465044037026991857731301776700407129048075195245607396942707401040532457631830228638175383961472585551972093538733989134559815275513795239021017931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3de8bd952c3165c5bd37252e467e68fbb79f948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coco5000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coco5000.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coco5000.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.gudul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdl.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudul.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudul.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gudul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.gudul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sousparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sousparis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sousparis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sousparis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splatland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coco5000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coco5000.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coco5000.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdl.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gudul.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gudul.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gudul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sousparis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sousparis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sousparis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splatland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9867fb4a00000403004830460221008068100d80d54b66af29b25a0a5d1661cb93a2debbf905713593d9036395002e022100c054253d809b78d3949cf15e8e691cfd269ccae87c1bf9d44fee7a093d941bdf00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b9867fb4e000004030047304502207dbcacff36804e33c0ca18090a54d8fd4a1a92bab3dce39c8da812b061cca048022100d22a502e70785e1b5e498f34e6d43a6230e56ca4fd42d84648357ebff9b92904
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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