na.am

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:0e:e4:d7:0e:c2:98:9d:4a:d3:b2:b3:dd:79:4a:f2:9f was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=na.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:0e:e4:d7:0e:c2:98:9d:4a:d3:b2:b3:dd:79:4a:f2:9f
Serial Number (int): 277009644071156127673837504268042582553247
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:b6:41:e0:cd:be:d5:bf:fc:ca:88:64:6f:6d:88:1d:aa:6a:53:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:c0:39:91:27:a5:6e:ea:cd:13:4f:c1:53:b0:d9:8d:43:a0:c3:43
Fingerprint (sha256): 0f:e9:24:88:11:d6:53:a5:51:2b:fc:ba:dc:28:29:d2:99:df:5c:91:62:a9:18:2f:2f:5e:94:cf:7a:8d:7f:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate na.am

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for na.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.na.am
na.am
www.na.am

Other certificates including the domain name na.am

(limited to 100 certificates)

Certificate

The complete raw certificate details for na.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277009644071156127673837504268042582553247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 03:20:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 03:20:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'na.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835615703178860840746614446067106654905830239325457940540713545975518617669994484156810831071261251088500011134596161729841854591636454266588029033313284847256211285174340239286586956269498886145040355865417963640071490664423263681467330894314237399494791696093145213530874193156785859200317696327561670889003618648545249510205721787584541298391294554440324914604017266869194933387501747071240756096412547113272148065872119841209873988911489315608754587542080978457097275578196752559620109933472772722381619254370927857855807078884632293310149796453567370477370787804893598258042500432876469346519298542397787368226299029231062237869595234706869233046217981718008878048469614124146795387436400891664169481312819772586859227192626807974436048332932680165856733431842417053266490296758715068948828660339622314360044018638460888195540943883535797811684501708813448886141576327080260388556478435337430939269483897100936736642801975097943227219233515034952276399574738429240210134212231052245373326010674727966130098804923262536140633597544012247591428884058746584912750086644696825969114881507975471041972894412665632437966858356534189152319645248378803659198674191103848447229109205099412349957649026272475837049592764960806997563501671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57b641e0cdbed5bffcca88646f6d881daa6a53ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.na.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.na.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3326bc0000000403004830460221009338918172375acb26ee3abf57bd854f720df3b673e3c44339385970582f7242022100f6765532c0616b39ecb3bebad3c5da3a2f56114d3d0e35ec9a56967e817c9498007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3326be100000040300483046022100ba4cb433339508031d3a79898d487bf3724f3350f9e71a46bbdd8936938c97e40221009ba73d1db9a7b44f334eb00935004d2f14bf231ab7448955f4cff583ab2d4ede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00050cc8734f9fd7496fc0682098e6c3dddd94409f8e20e9d83065bdeec8e016090b1760897f42eb288375b11ec746100aed7a26c6b52f79cca064b4cbbbe39b0db8f2d8a7c38f2a2613fc02418a3d0f70889f72b284200380151748d2eaf820690c8aa115abbaec7893ba8763ca7466658a477646dd3140514bcb700fe404f68e7d3026d1e06568eb2d5cefef27959e2f3d6aea7965f634758220b13c0dcb9a4d556a1b83282d850f8168152b2e133af9486dee5199838fa9ecac43381cc9e808ebff3f0249f963be312a0c6b1d1c11a5684c564bff46fa0fe781e164cbd14427e937b4a2ab6f8340080f4de58e7ed37c0b9dc9453c963dcc62cc9d756dfa71c0