www.menastay.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b8:cf:48:26:bc:cb:cf:d6:40:d0:7d:ca:82:d1:91:cb:61 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.menastay.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:cf:48:26:bc:cb:cf:d6:40:d0:7d:ca:82:d1:91:cb:61
Serial Number (int): 411336624066684492164902475230978516306785
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:25:c0:99:93:26:f3:22:80:fe:d9:38:ec:2c:fc:c5:13:6f:5d:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:fb:45:4a:a7:84:79:6a:fe:66:70:90:30:12:fe:1b:bd:4d:a8:e5
Fingerprint (sha256): 01:ea:0e:52:62:3c:54:25:2b:eb:28:95:16:6e:67:aa:31:b0:3d:ef:69:72:65:09:5e:53:1a:71:bf:ce:0c:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.menastay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.menastay.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.menastay.com

Other certificates including the domain name menastay.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.menastay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISBLjPSCa8y8/WQNB9yoLRkcthMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIxNTA1MTRaFw0y
MDA1MjIxNTA1MTRaMBsxGTAXBgNVBAMTEHd3dy5tZW5hc3RheS5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8Ttjs9KGbrleh0dUvdHLGAodaW9V7
bx33DT3Iwd+M1uzUxEYDMpu170ME2JaaOs+8nAjx9WWmW5XqSUNEAWbkbpb/npGQ
6cX9S2rUrgWHldeIZQDXaWSLKFpIGzxZVQRCteFfUJpCUGFIv4ot4qGpza4pI48w
8b0CFREYpr2Yvu58xJYy9cNfi79RIR7tLcNf55kdKQS9Sf15DQfgXUndn/W3kpus
4XHA5rWfWf+/DNrZ6igCCNhx+N+E87KizAabR03pHqDp4HE0zpTHm1YWIIrL1f5X
cm3RobtLjcQEcwpCoVcPPqHuk1VKNwGqQUNkWz4wzjsgJLCz7vecNPM1R0+ZZiVC
/o4XesWWcRVptPQUmAy8ggdT0oTHYc3rf3e7S5xOiS3OR0/CEADnVOC+3M/9DmzH
jhQXUMZMfLIT6E5ck8byxmKFrf7zCxmQ23y3g1n3rjBvj+Vg2ZjzSciRdkDLgaWu
Ct68Yt572S5WzB+ktFe+Ka5H4kqJYQ+g3iK+zL8A+XZgwBoLTLRQH04JiK+Gtqjc
YOp9ugew+o/zx6Ghxr3IgT85xvwOuFjxuVrZGY3AwuNB8D+nJVi/U82vu4c+k61Q
8znF/lI1sAJPnakqz3HqzLdmtmAIXYSNPoEf+Z2lxFJLQ+O5WNe7nMhR23NxGa1f
cm1L3xKdTJS8mwIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQd
JcCZkybzIoD+2TjsLPzFE29dPjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5tZW5hc3RheS5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQC
BIHzBIHwAO4AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXBt
pUuAAAAEAwBGMEQCICOeuIz6fefQe0OoTrhXFvbcV4PxyA9ecETJEaAZcmYLAiBT
XYL5c6MUD0n6XNd76fVjwKLEBTZSMMjlTUvjXj58fgB1ALIeBcyLos2KIE6HZvkr
uYolIGdr2vpw57JJUy3vi5BeAAABcG2lS3QAAAQDAEYwRAIgNfg2TqQJ+M/H+GFP
E1PHDV0MrCo4cs34ryiUXSyV27gCID8n/++rh2aBVFZ9m/3YB1cepAAFigjvZLdP
moGz6yLMMA0GCSqGSIb3DQEBCwUAA4IBAQA8uMaEIhbjEbjc0TZLIBMrsMBlJbQ9
AgYrnUQ0lwa8/3gisfCpb5bNzL0Ye44Z61AJ5souH9KhOirZrL4mjqquIwwe90oY
nBb31x88AsSCNCg/Myon7UFBoYICaGTDaXSlGVMfN/8WEBtDuLcs58sKEhJe7Tgn
l5oN6x02WuLiVDJLZ3CnTXGMkOMWjguau7WmyJlRrDFFQiHMYWgUxYuXys4ygl3D
xiDMQA16Zhh5/3YwLS01DTiS34Pb544SVC4aDJmnSAbrWxLafmeXz4DNojABnACh
AzvtjPgQwGKPRqGPNtCyoB/iFi/Upah3o46EUkobuu/XmUxBb5yyI0lQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411336624066684492164902475230978516306785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 15:05:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 15:05:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.menastay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768229605051748647337486491627531235321151011656174804543974877471849356702999262212080043935642589978848522743017489014074264475065865489643284194996366830179710898548777269465666855570449170928469585383492699219854761426629060799145710893190992673783317617447848984402837883904190988523511532641413395983428530346014282333284983332828990594277264360694454668125661851712113601444389981668353434462455103431716285435107765022856966123949155930294858131056474886696558378001700329089526092959881994249050223644610206072623845291961236296731207358305694568891891191927586440391354562527951978872625055995399420071343332048989518059670538075296695006455930656463476698321738866622560773384332439608053107150207103999031209217691192351948603575755008393038327001985415594345869854183636332328725931308853108985650449917129471808046198034373053270765677401918050130974973328501241678799880520391860354118396127572699909271689679577330462064603793830098133199152417839970570313648986431600121893970467354143794893046322661927312699715409791094069161380170658342625652700983369026141663764106591973143076791769520659761886257178157539979028143679043306839514766269708504416019987376965430172615029539508639871526755904611986805013175647387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d25c0999326f32280fed938ec2cfcc5136f5d3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menastay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706da54b8000000403004630440220239eb88cfa7de7d07b43a84eb85716f6dc5783f1c80f5e7044c911a01972660b0220535d82f973a3140f49fa5cd77be9f563c0a2c405365230c8e54d4be35e3e7c7e007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706da54b740000040300463044022035f8364ea409f8cfc7f8614f1353c70d5d0cac2a3872cdf8af28945d2c95dbb802203f27ffefab87668154567d9bfdd807571ea400058a08ef64b74f9a81b3eb22cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003cb8c6842216e311b8dcd1364b20132bb0c06525b43d02062b9d44349706bcff7822b1f0a96f96cdccbd187b8e19eb5009e6ca2e1fd2a13a2ad9acbe268eaaae230c1ef74a189c16f7d71f3c02c48234283f332a27ed4141a182026864c36974a519531f37ff16101b43b8b72ce7cb0a12125eed3827979a0deb1d365ae2e254324b6770a74d718c90e3168e0b9abbb5a6c89951ac31454221cc616814c58b97cace32825dc3c620cc400d7a661879ff76302d2d350d3892df83dbe78e12542e1a0c99a74806eb5b12da7e6797cf80cda230019c00a1033bed8cf810c0628f46a18f36d0b2a01fe2162fd4a5a877a38e84524a1bbaefd7994c416f9cb2234950