nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:69:4a:81:97:2c:22:5f:30:49:c4:1e:2f:bc:26:74:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:69:4a:81:97:2c:22:5f:30:49:c4:1e:2f:bc:26:74:82
Serial Number (int): 261817095960134576451379464854128862590082
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:43:88:a4:6a:74:d6:4b:7b:ca:41:51:31:3b:56:68:de:d1:77:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:5d:25:ac:b9:80:f2:a7:04:ca:ab:b3:24:d3:0d:f3:72:41:cd:bf
Fingerprint (sha256): 0d:d4:71:bc:96:f3:8a:3e:47:e1:47:05:45:23:01:16:40:38:78:32:03:0c:bc:16:8b:80:ef:27:a5:5c:20:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261817095960134576451379464854128862590082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 18:54:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 18:54:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946189493898717154316945345152894108147071098955771090788346594083076384971505289005903856012162607782276066956067329760714142462856228106279629148165125955785025197223889940089781217713058903086962533316207268720788246666238214707426082400864200528088032940111815731214558207638042728075426888308152693431638348711547828756026043725788259814159523833127106194069214059939022566715202448564340577822627052999913682465395398796539824385762629846448045864513437325359878512771329536330906784731297017664487978534238238415366935609537630247037097464771311573594319924664312765380562856950468682609589826155290316775341275651627578396801203075399762537804105540452783122168925979665971530803858762950207097197413524001395456217579919956316640480668540969613704899925817768860461591920119925769807220770723377978450639562039724222635548645370364982109114374549999570669678510777739712708743952889139649910010454863700403823936129180511783301100423523859956494250124207754918581239137903454311064847977759232144715768539564996265688993611616124138825303210051179041710220018488212946847716927770124391633869651761788897350391618284488028670971984196166389748778954510019128056911148893594773236074280129673350498574024123318383159913746051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c4388a46a74d64b7bca4151313b5668ded1777b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2fd9095500000403004730450220353d647b8b30842f3d24b779d707ef7e54465ed815422a92e16eb0e707eff6c3022100dd394a900414a768a248f34774e8dc419e5806ab9a41aa98ef4d7e1fb647e73500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2fd90944000004030047304502206226841ef300c376d1b7c67fec07a2b9ff6ee8781ade75110c587ec943d897da022100847a3225cb4468d0a0a0f5a966d2ef3654aa1748afd42874805e090b77185334
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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