www.nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:6d:dc:93:48:14:26:09:a8:08:69:7b:45:6e:84:f2:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:6d:dc:93:48:14:26:09:a8:08:69:7b:45:6e:84:f2:a9
Serial Number (int): 319330891315914587343671287835398813053609
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:c7:9b:41:79:ca:d3:a8:3e:18:3e:cf:34:71:dd:25:f9:ea:e1:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:90:1c:ed:0b:c6:56:fa:71:d0:41:7d:e0:62:b0:02:0d:38:23:41
Fingerprint (sha256): 0c:02:6c:ac:9f:6d:54:cb:06:b5:56:38:47:60:e8:3f:3b:c0:50:4b:93:0b:56:b0:a4:69:0b:be:d8:2c:e2:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319330891315914587343671287835398813053609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 03:30:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 03:30:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856486775713866255995105487170659572631683454448232174124889128786427693908855979600128292016191896433756189007649472958711051784310966111555494666478834418136071452324671530905580260551568829848090634151105120493235969100571646605296279265573348973527773194811065140545723013661456926925295388499202676524882920508740461708972344806225587146300934610035783234437871020969042081302526114047849868055655391124185201633708356134738515211327103773428255780546746238475126308585385668330336518117836062766288500828576181479807856895031332519578230541753719244558095762003600043965799672347255798632961118108986373271250823610410048325353312803467193251180384006498191899715408260040054635998821857741332562170026887239453659707276037242200535336652193468890800986695872256058789768671225692139638972513313675194408534760725810116613295744451732036440083336233096803663107790166936573248020076312535264353288040766237242327949021957094747294322864332167093104115080354088904382087830384013810096842491134547476386570745867858501963609803472544806636318502479100549909982115879303449853944978232177716597317456592426508898242241288719539019045772082427856597547180740651837477076678871681546238693099192393633340785056358191044784607564111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c79b4179cad3a83e183ecf3471dd25f9eae1c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017152e797d10000040300473045022100bf62e73018a020c303b2afaed4f80576eafbdbf8bc2359189f7d988d1281419f022078493352b71eb23a07d52a3905ae257fd918de55671f7cd923af5087233a5f52007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017152e797c40000040300483046022100bc2cb655beec1105fa16e4e851cfbe93e5468b5ae282f4861d5727e8c3e1bb59022100b63295bebbc20af88cee44de7bf83165816dff429f9fc2fac00c6ebf002b1a9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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