www.menastay.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b8:cf:48:26:bc:cb:cf:d6:40:d0:7d:ca:82:d1:91:cb:61 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.menastay.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b8:cf:48:26:bc:cb:cf:d6:40:d0:7d:ca:82:d1:91:cb:61Serial Number (int): 411336624066684492164902475230978516306785
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1d:25:c0:99:93:26:f3:22:80:fe:d9:38:ec:2c:fc:c5:13:6f:5d:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 43:fb:45:4a:a7:84:79:6a:fe:66:70:90:30:12:fe:1b:bd:4d:a8:e5
Fingerprint (sha256): 01:ea:0e:52:62:3c:54:25:2b:eb:28:95:16:6e:67:aa:31:b0:3d:ef:69:72:65:09:5e:53:1a:71:bf:ce:0c:ba
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.menastay.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.menastay.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.menastay.com
Other certificates including the domain name menastay.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.menastay.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISBLjPSCa8y8/WQNB9yoLRkcthMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIxNTA1MTRaFw0y MDA1MjIxNTA1MTRaMBsxGTAXBgNVBAMTEHd3dy5tZW5hc3RheS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8Ttjs9KGbrleh0dUvdHLGAodaW9V7 bx33DT3Iwd+M1uzUxEYDMpu170ME2JaaOs+8nAjx9WWmW5XqSUNEAWbkbpb/npGQ 6cX9S2rUrgWHldeIZQDXaWSLKFpIGzxZVQRCteFfUJpCUGFIv4ot4qGpza4pI48w 8b0CFREYpr2Yvu58xJYy9cNfi79RIR7tLcNf55kdKQS9Sf15DQfgXUndn/W3kpus 4XHA5rWfWf+/DNrZ6igCCNhx+N+E87KizAabR03pHqDp4HE0zpTHm1YWIIrL1f5X cm3RobtLjcQEcwpCoVcPPqHuk1VKNwGqQUNkWz4wzjsgJLCz7vecNPM1R0+ZZiVC /o4XesWWcRVptPQUmAy8ggdT0oTHYc3rf3e7S5xOiS3OR0/CEADnVOC+3M/9DmzH jhQXUMZMfLIT6E5ck8byxmKFrf7zCxmQ23y3g1n3rjBvj+Vg2ZjzSciRdkDLgaWu Ct68Yt572S5WzB+ktFe+Ka5H4kqJYQ+g3iK+zL8A+XZgwBoLTLRQH04JiK+Gtqjc YOp9ugew+o/zx6Ghxr3IgT85xvwOuFjxuVrZGY3AwuNB8D+nJVi/U82vu4c+k61Q 8znF/lI1sAJPnakqz3HqzLdmtmAIXYSNPoEf+Z2lxFJLQ+O5WNe7nMhR23NxGa1f cm1L3xKdTJS8mwIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQd JcCZkybzIoD+2TjsLPzFE29dPjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5tZW5hc3RheS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQC BIHzBIHwAO4AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXBt pUuAAAAEAwBGMEQCICOeuIz6fefQe0OoTrhXFvbcV4PxyA9ecETJEaAZcmYLAiBT XYL5c6MUD0n6XNd76fVjwKLEBTZSMMjlTUvjXj58fgB1ALIeBcyLos2KIE6HZvkr uYolIGdr2vpw57JJUy3vi5BeAAABcG2lS3QAAAQDAEYwRAIgNfg2TqQJ+M/H+GFP E1PHDV0MrCo4cs34ryiUXSyV27gCID8n/++rh2aBVFZ9m/3YB1cepAAFigjvZLdP moGz6yLMMA0GCSqGSIb3DQEBCwUAA4IBAQA8uMaEIhbjEbjc0TZLIBMrsMBlJbQ9 AgYrnUQ0lwa8/3gisfCpb5bNzL0Ye44Z61AJ5souH9KhOirZrL4mjqquIwwe90oY nBb31x88AsSCNCg/Myon7UFBoYICaGTDaXSlGVMfN/8WEBtDuLcs58sKEhJe7Tgn l5oN6x02WuLiVDJLZ3CnTXGMkOMWjguau7WmyJlRrDFFQiHMYWgUxYuXys4ygl3D xiDMQA16Zhh5/3YwLS01DTiS34Pb544SVC4aDJmnSAbrWxLafmeXz4DNojABnACh AzvtjPgQwGKPRqGPNtCyoB/iFi/Upah3o46EUkobuu/XmUxBb5yyI0lQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvE7Y7PShm65XodHVL3Ry xgKHWlvVe28d9w09yMHfjNbs1MRGAzKbte9DBNiWmjrPvJwI8fVlpluV6klDRAFm 5G6W/56RkOnF/Utq1K4Fh5XXiGUA12lkiyhaSBs8WVUEQrXhX1CaQlBhSL+KLeKh qc2uKSOPMPG9AhURGKa9mL7ufMSWMvXDX4u/USEe7S3DX+eZHSkEvUn9eQ0H4F1J 3Z/1t5KbrOFxwOa1n1n/vwza2eooAgjYcfjfhPOyoswGm0dN6R6g6eBxNM6Ux5tW FiCKy9X+V3Jt0aG7S43EBHMKQqFXDz6h7pNVSjcBqkFDZFs+MM47ICSws+73nDTz NUdPmWYlQv6OF3rFlnEVabT0FJgMvIIHU9KEx2HN6393u0ucToktzkdPwhAA51Tg vtzP/Q5sx44UF1DGTHyyE+hOXJPG8sZiha3+8wsZkNt8t4NZ964wb4/lYNmY80nI kXZAy4GlrgrevGLee9kuVswfpLRXvimuR+JKiWEPoN4ivsy/APl2YMAaC0y0UB9O CYivhrao3GDqfboHsPqP88ehoca9yIE/Ocb8DrhY8bla2RmNwMLjQfA/pyVYv1PN r7uHPpOtUPM5xf5SNbACT52pKs9x6sy3ZrZgCF2EjT6BH/mdpcRSS0PjuVjXu5zI UdtzcRmtX3JtS98SnUyUvJsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411336624066684492164902475230978516306785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 15:05:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 15:05:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.menastay.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768229605051748647337486491627531235321151011656174804543974877471849356702999262212080043935642589978848522743017489014074264475065865489643284194996366830179710898548777269465666855570449170928469585383492699219854761426629060799145710893190992673783317617447848984402837883904190988523511532641413395983428530346014282333284983332828990594277264360694454668125661851712113601444389981668353434462455103431716285435107765022856966123949155930294858131056474886696558378001700329089526092959881994249050223644610206072623845291961236296731207358305694568891891191927586440391354562527951978872625055995399420071343332048989518059670538075296695006455930656463476698321738866622560773384332439608053107150207103999031209217691192351948603575755008393038327001985415594345869854183636332328725931308853108985650449917129471808046198034373053270765677401918050130974973328501241678799880520391860354118396127572699909271689679577330462064603793830098133199152417839970570313648986431600121893970467354143794893046322661927312699715409791094069161380170658342625652700983369026141663764106591973143076791769520659761886257178157539979028143679043306839514766269708504416019987376965430172615029539508639871526755904611986805013175647387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d25c0999326f32280fed938ec2cfcc5136f5d3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menastay.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706da54b8000000403004630440220239eb88cfa7de7d07b43a84eb85716f6dc5783f1c80f5e7044c911a01972660b0220535d82f973a3140f49fa5cd77be9f563c0a2c405365230c8e54d4be35e3e7c7e007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706da54b740000040300463044022035f8364ea409f8cfc7f8614f1353c70d5d0cac2a3872cdf8af28945d2c95dbb802203f27ffefab87668154567d9bfdd807571ea400058a08ef64b74f9a81b3eb22cc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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