mnlink.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f1:02:71:79:7c:18:8f:1a:56:4d:b5:1d:e0:bf:78:87:13 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mnlink.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:02:71:79:7c:18:8f:1a:56:4d:b5:1d:e0:bf:78:87:13
Serial Number (int): 430460441804527195383059074253743407531795
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:3f:02:a0:bb:6d:ac:84:05:58:68:f7:8a:b7:0f:71:1f:24:75:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:c6:79:68:6b:d9:8a:94:63:b8:87:26:64:b9:47:a2:7c:82:42:25
Fingerprint (sha256): 01:95:1a:c3:eb:17:ee:c9:23:1d:fa:7a:4b:82:03:90:51:ca:9a:1f:c4:6c:fa:72:51:3c:d9:98:b1:6d:76:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mnlink.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mnlink.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mnlink.minitex.net
mnlink.minitex.umn.edu
mnlink.org
www.mnlink.org

Other certificates including the domain name mnlink.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for mnlink.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw9yVYV8vuoei2M4zgdDw
fyDNzGamM0itSprwoz5bqmyLMZJbiu1gvoBNPXBCjUmEc31/ggsdMz/FmgBEXymU
J8KCdp7nDXGZ2UPtHlexklbuRE3+iEOJ6DOSz1hZWJhxQ4/b76KmMkhQwPFGtf/K
vHmK6c285t63TjV4ey2IeIivQVki6J2Q6jgXyTL1zBJSJVhTnWjKCVa1syJkVZ94
egV35u5ELxdUQ1NUPjf1LGGN6XG3ogqswpj83vuq23r0vKPezbdAwY59f0OCF/Aj
mDyjeHGkFFTI+vN+MKUQJKa6WVr1kQFhiWG84ZfAA8toy5fe+DjsjcT824w44HRh
rd1AYvoaAWJQcRZYtmvNJRV5C15qwCZQF6SD78iGn59ovCmi63dXnXT8bGcNjwS6
sr88nMwtqp6pmVo+wqORUxKMS5l6nN5tA7g2pp6xYxbCBRB+6VfUPBPzQZkUo/MZ
XCCIy+THncp6oujK2rCOo5OdHwQ1Ahs4G67pkbmk9B6pNjjhiH8AI7+IdtT5rTGG
zyVWS8f5ojGeejtsDJcn1X/HJrcNo7/VOjPlzDpij7t6OTwI753sMKfpf8tAoav0
KsWf8oMggGG6jHncuhNH0t//VKsUG0gygMlJCorKrn+nK9pDQ6P/mIT4I7aLLZhh
bQKjX+fG+Ci2i89Ml/q1SjMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430460441804527195383059074253743407531795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-23 20:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-21 20:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mnlink.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799045836376184593011691184507006490217990977006334980028446814920132898992905979315269095012224082898115149672788179755183473124867737615711238886565962292560128449321907293920202027663629162104513662960346018745828520835738644920632422594236471378933569880404523393121255579799630710257229266589515282077546006720685524611952622339159096500672179769944494979973374150970386418598068693726728255877509807324798417417161454583175585439006576780464482468106626062075575389308983695861104694184503232337449278570714880905260145820175790431455531037065856387503662699891361016343375311737246089872184788571660597341573090514743076483259404229704564593719894371725737184115161701524747781854607662787381910929359183413113042866776326707396460412538339296942537962974104636582150315698327820882627047166689847126163020601370196046201192571653410733176860976840945072718425497046092622687215197895533596150825776119489101493365200076156167790127405129485894271952983571720655424928284634129119244256777772449138137226800682434629417166788866453470289819293795646817355532799718727902765208505993812580459461818841614994031238366020607431708626432676428363394049043314140752186513863339680366910260455233235549224013927872262474519136258611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d23f02a0bb6dac84055868f78ab70f711f2475d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnlink.minitex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnlink.minitex.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnlink.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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