heiamfoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9f:a1:f6:24:94:55:3a:d9:fd:10:a5:f5:a7:0e:05:e0:2a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heiamfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:a1:f6:24:94:55:3a:d9:fd:10:a5:f5:a7:0e:05:e0:2a
Serial Number (int): 402769323821737664456831653904198343712810
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:1f:9e:3d:fe:ca:5f:37:ed:0c:64:60:15:f4:b9:1c:48:3d:bc:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:23:c2:8b:ce:a0:8d:82:df:11:10:38:d7:61:bb:41:ea:7a:51:35
Fingerprint (sha256): 08:3d:1d:72:48:f9:74:2e:b4:be:13:5e:1c:ad:68:f7:cf:13:94:9c:44:57:75:00:3e:82:f9:d7:b8:17:0b:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate heiamfoundation.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heiamfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heiamfoundation.org
www.heiamfoundation.org

Other certificates including the domain name heiamfoundation.org

(limited to 100 certificates)
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
www.heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
www.heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
www.heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
heiamfoundation.org
www.heiamfoundation.org
heiamfoundation.org

Certificate

The complete raw certificate details for heiamfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402769323821737664456831653904198343712810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 06:41:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 06:41:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heiamfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843481833376287911400929211748537092239483080666604086281117543940422931083521785568783921674299855671354255396649790496880172149088466712178336522043564196059995135970227452576724292245239595169795792129054396707992537337392314468269131282740354985946774281478047450338765766925562413232184114157735719389287586690144254286069284519732681936499632731381005333281497295181125669704500239583762674519971875971304709610130065139727877704633813740639793616017259710763879033604118783712249134144864213073975824607366528611568275900653919357425012097815955206333880019584106780117024346609513631358573954416302101417115999534680577963295480004733194763727461314015416940192520925128359445708919797051245700303774373328969970409871555369922315276184983417432074803813678813281151673927319627592500847514670479178494186780405999229133713367085154196082751267062168895675159428958591679492428732107437890412990908908034402240745293240898915943933019729254766413112032245383825540887019890377008348435265932387942507307823946126796960398101283193747162611243765533944909357292794841876001392697598564540462241499287193680712913595379922056948491619958958673775484783831984117988041912332079051069000133781371704361980459119295912428164408551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							691f9e3dfeca5f37ed0c646015f4b91c483dbcc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiamfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heiamfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a0b57f9aa0000040300473045022071c0a585394bfe7625767f04491ee8e92c5d1e29ce788a7461d52e1e0b8096860221009cce3cf738b6590ee3c9cf53b5d2bdf9ec3147446cde21f07b7bca2a279d61a800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a0b57fb8f0000040300473045022079da9ea7f03424d2b2f03dabf473bfb49d11ea5707a0ab5f06829ef359107a63022100c8a2e90bd944a5317a3d7a147005e3a6362d34eea8cc3d5edd294ff4f783e97b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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