www.meldola.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:fe:b0:8e:42:00:07:4e:a5:18:ec:56:29:b5:8d:8a:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.meldola.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:fe:b0:8e:42:00:07:4e:a5:18:ec:56:29:b5:8d:8a:b8
Serial Number (int): 343343166496813673210811270777058269956792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:02:36:46:dd:23:70:11:07:a0:7e:48:9a:6b:9a:a5:ed:ad:b6:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:08:76:db:4f:70:c7:29:6f:0d:59:41:0b:70:e3:33:d4:31:08:27
Fingerprint (sha256): 08:b8:6a:36:32:e5:f0:77:47:38:94:55:d7:e5:23:b1:a1:af:a9:eb:19:b4:ed:d2:95:d9:51:4f:9d:d0:19:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.meldola.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meldola.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.meldola.org

Other certificates including the domain name meldola.org

(limited to 100 certificates)
www.meldola.org
meldola.org
meldola.org
www.meldola.org
meldola.org
kbs.asia
meldola.org
palestine.exposed
meldola.org
meldola.org
buyamazon.world
teddybears.world
meldola.org
www.fontanafredda.org
www.meldola.org
www.meldola.org
www.meldola.org

Certificate

The complete raw certificate details for www.meldola.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343343166496813673210811270777058269956792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:29:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:29:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meldola.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902754459798453909701229860099295741176076680735229410799885686855164960863525447727008260862866985027451881038769217920536042886420675803761329649373421853201584692700862647364631920092165872726522755263449985411388718198632542039752481740572454785754109886434523846611375132936329775311078748441994336590360186508764420332513861046550714658410045053655370198068364440838083827264255115920157113067570858361171687101775901522231963033303873868275285770812818545781460956623061288925007072999716904454324776793753369412235957321231616576746346589798923917613827271672856812572896290514832332844223933945179494366985035048350331699858648119798406572617709297214237039590039105902721485227743424522599448870121991504677122690963186076642761840891290639408875513312464304483140633505464029900609232572272484170045964978345694892164844167514440568997697237572681807276127113976232509373731005253284824984810936443034951320349847891770889449618484294627625888220878973598917645073037350354854717897490757115399550671384905384631074283523688133576875135186835144781573036661180655928157365264751412420144329508834134854540015179906774372140772054534885179154428373667430664593693558641219057650297779966857560036848700017946269986662106673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14023646dd23701107a07e489a6b9aa5edadb63f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meldola.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7c5a1c430000040300473045022024e48ee062bb7386cd351df461d559a7a21b614f52015918835bc9b868c4339e022100d08af96f1f35adfcddbc40843eb3e43524fab8c00f223a146c078f58852a5567007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c5a1b070000040300483046022100eef3eb7df5bd92cfe3396795d62f16c113923a841e9f5505e3684ab501d51eb5022100d59f82980b8565481f286cf41bea6c623178a3a5f4ef3a0141411cfc2aa6dd59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005041cce25fdc78670e5db0c8ec25b513050859f52f4f51bedae93fd8a24bc81087feadf3f454947e5425583221342817821649039eed969d7ce6c68a67ab3830cff492b1bc8fff51e4fa25febaad2f74879d13dab1702738f5f682b8c6f6193ea3ded49dd72aa05160151ed7a365ffeb4e8e3191840eae2222338213e8df1924088778d15b7e2118c40bbcbefc51827a34151195603d72bb5910a9bfe5f670a0a215430b7581d2936be3e215129ba483c35ec57c3f897e420a4ed62eac9d16915795b60fa01017ed38a89546dc3ecd41192626be0063bae68c3156ec69952106cc9281596890ca719358b92de6578eac46545dd3216601736a55a6af489f5ded