saveria.org
Issued by R11
About this certificate
This digital certificate with serial number 03:99:42:88:57:6b:11:46:e3:4f:c2:3f:57:b5:5c:4d:46:86 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=saveria.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:99:42:88:57:6b:11:46:e3:4f:c2:3f:57:b5:5c:4d:46:86Serial Number (int): 313488496907331285884081573150104272848518
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7c:07:04:13:16:8c:ac:7a:a2:bc:cd:8c:e0:40:6a:8c:c8:05:7d:75
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): dd:fc:0e:4e:4c:21:33:10:1d:da:23:1c:18:bb:1e:d3:67:b4:b1:73
Fingerprint (sha256): 0e:1b:eb:ac:3e:43:c1:86:0f:5d:f5:47:98:f7:4a:37:57:f8:e3:18:8b:4c:7a:ff:fb:a0:e5:dd:74:54:25:25
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate saveria.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saveria.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saveria.org
Other certificates including the domain name saveria.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for saveria.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISA5lCiFdrEUbjT8I/V7VcTUaGMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjEwMDA0MTU3WhcNMjQwOTA4MDA0MTU2WjAWMRQwEgYDVQQD EwtzYXZlcmlhLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPqA ACbp01cRg3FSyg9hjjaWO27qqbNSEpewHiDEb45dkoveisSFZ45VFopzLo8a5ndi LA8ywGlUU9ZhuH4wuc+ke6BS5EJCX6yv0QKseDGEbifRpfMdlnOhE5vh2Voo2m7m kjr/cyqfQiNeZc5NKH7vmGDrqwlVAqYvoIU3mylnn/tD3tOHFU1e6ymza5FDLobi hIhxWiYPkhRsBlCseftphbYOyEsIyJ0lZxxK8qOn/NVDxOgLaA+V6eQuWoayKlWo AXPrwpxHu72WaAGcs1rqQvzJKOZ0otg7AmgYhwnPIjkh2gE6+PYoGhPzVXjym+6+ LpjaQ1Ub+Rj/zKv82zvkSUHEmmsve38OatTgnx70G87sypLHISm+i204kkmUzLXw P/1CszCIOUfhc288bktE4+Xduu/P39pdG+JShAyWPXl/kgkmARFkcGilKvrcgJAi g0tEIfRyAf6rPfE0Erf8y3P2gSEO/Hgl6kmfgI9XK5f50Fjv7ZJuObYs5ooXOsOi 1+8sC9w899Ez0vCNYDWB1C4n+zZKyUmWeGqpvN2mrNIiywEUNy2ywpPp9H28jNc8 dOQ9IObYqi2SfXnsphBVcPYxy91QwTu3sKJiV5tMTowgW1bpPPsYsqbpSXE54Geu znR+suT0ZhiBdXaJMyc6LG+G4c92wzstHiT/9OzjAgMBAAGjggIPMIICCzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFHwHBBMWjKx6orzNjOBAaozIBX11MB8GA1UdIwQY MBaAFMXPRqTq9MPAemyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEF BQcwAYYWaHR0cDovL3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDov L3IxMS5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILc2F2ZXJpYS5vcmcwEwYDVR0g BAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZH NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY//zyeVAAAEAwBHMEUCIQCjhaao kv7hcOjHNZfsPyjpODYhks1UsMuq+WnTrjMQXwIgLLemUTGX0fE9p+0BTdC+qwPV RH+6p1iEtS0TY96TfjAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7Phk bgAAAY//zyecAAAEAwBHMEUCIQDurMMabcEm6DNtzFiqNvYmr1Aws5F+p6QfupEI m1TbfwIgWoJElushIRT/Eogwt3l5xWgrRwRMfG6mZfmgpPG0I9IwDQYJKoZIhvcN AQELBQADggEBAJamSy2IsnnpG3fSawpKsHia4u369LkHkbhe8GM6/ObkAXDkwEDO FstYYJo/LroCxwoRgHKaFBZyTH73yYDbE3Cv4MaqD6w18tK3aClS45aakNC5Bata QYdXcW8RzqSHhWPVQROozvW0E1qwtLayA+utahvVmUOIgR8X1D0a/SvqjSHU1yKx VYrUD1HS05Jbum1ma6g3D9WJmRVncOrBUBg+Kl5DCBmsHtbvKzTrI/A181dMenSg z44jn7ftm9yRbXDI4gViOHmXnq/aY28Q0reQqILslIVJF/ySveQdWtstnBeR2wKU qumCluE70zofw0XXApBx5H7uIx6wjWMncao= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+oAAJunTVxGDcVLKD2GO NpY7buqps1ISl7AeIMRvjl2Si96KxIVnjlUWinMujxrmd2IsDzLAaVRT1mG4fjC5 z6R7oFLkQkJfrK/RAqx4MYRuJ9Gl8x2Wc6ETm+HZWijabuaSOv9zKp9CI15lzk0o fu+YYOurCVUCpi+ghTebKWef+0Pe04cVTV7rKbNrkUMuhuKEiHFaJg+SFGwGUKx5 +2mFtg7ISwjInSVnHEryo6f81UPE6AtoD5Xp5C5ahrIqVagBc+vCnEe7vZZoAZyz WupC/Mko5nSi2DsCaBiHCc8iOSHaATr49igaE/NVePKb7r4umNpDVRv5GP/Mq/zb O+RJQcSaay97fw5q1OCfHvQbzuzKkschKb6LbTiSSZTMtfA//UKzMIg5R+Fzbzxu S0Tj5d2678/f2l0b4lKEDJY9eX+SCSYBEWRwaKUq+tyAkCKDS0Qh9HIB/qs98TQS t/zLc/aBIQ78eCXqSZ+Aj1crl/nQWO/tkm45tizmihc6w6LX7ywL3Dz30TPS8I1g NYHULif7NkrJSZZ4aqm83aas0iLLARQ3LbLCk+n0fbyM1zx05D0g5tiqLZJ9eeym EFVw9jHL3VDBO7ewomJXm0xOjCBbVuk8+xiypulJcTngZ67OdH6y5PRmGIF1dokz Jzosb4bhz3bDOy0eJP/07OMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313488496907331285884081573150104272848518 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 00:41:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 00:41:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saveria.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1021950848501442730095867093298890004455063351652572897541561555751958513862841519993184013931323995075309970316645289963956001536266701327483407066839561578696197012237224917810074021549311007156322415611001990569258140817000654942610575127674023486459217413746829415245843576135884339796631144417830951025252786672594623057930473649092432570696350796222283257190062481561821717230080298944077361892330448086402449858686679553376221846158797667345152830537882034552701380524727100589452642956620619152167487715472503444805484415653852935385184017707407869541908318374179617076212117714900152771220998294310400255491622873624447240965423498596938437121676432704461606359249891699229999024066236120288046037946453120601906786588261911448197433855461251804201881985309914948148206180035369128656637140982685991477053973411793570083125598419779745797783049415183602380599389710104837417616455630684871883410022039247062786792146192375273503677577785848376230909668110114971899937662765030986895364969620096152016308395105359498080421582628420115644418589291612377091958735822986383636462169095659391072472778332663401628780541193726400901802910518273223465610422711253566368336519855888125841266175259200777843232712496990511917849439459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c070413168cac7aa2bccd8ce0406a8cc8057d75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveria.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fffcf27950000040300473045022100a385a6a892fee170e8c73597ec3f28e938362192cd54b0cbaaf969d3ae33105f02202cb7a6513197d1f13da7ed014dd0beab03d5447fbaa75884b52d1363de937e300076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fffcf279c0000040300473045022100eeacc31a6dc126e8336dcc58aa36f626af5030b3917ea7a41fba91089b54db7f02205a824496eb212114ff128830b77979c5682b47044c7c6ea665f9a0a4f1b423d2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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