na.am

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:d4:d0:a2:d9:16:24:ae:f0:41:3a:02:a3:56:dd:7b:d8 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=na.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:d4:d0:a2:d9:16:24:ae:f0:41:3a:02:a3:56:dd:7b:d8
Serial Number (int): 280675549978655991377858250288279131618264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:50:14:ff:fb:32:5f:8e:10:7d:10:f8:8e:55:a5:85:64:90:a2:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:3c:de:e1:71:b9:66:3e:6e:c0:ad:3f:97:94:09:5b:86:ea:cd:a6
Fingerprint (sha256): 10:8c:1b:b2:ae:29:89:f4:2b:cf:1e:08:4c:8c:7c:fe:15:01:5d:a7:59:4b:4f:5a:fa:a7:2d:4f:c5:65:f6:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate na.am

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for na.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.na.am
na.am
www.na.am

Other certificates including the domain name na.am

(limited to 100 certificates)

Certificate

The complete raw certificate details for na.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280675549978655991377858250288279131618264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-19 17:52:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-17 17:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'na.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840055228108540479793824965324595891014238096518943427761098836762767252104263088136236108921754368212469983348750077025886027550698078009782147313918469603063076574017845253750830921814277435998684926789543114296310709850467095235382720522463174300793191835145357987178554492693759928554547123135987868154906863401481625785958040176526403393137191589158546287479607328870769904782369832416264368848995449039911871845370191084487222549988722444562538535659235279505594278574781976490996375704377208247840785551006097366888491961235211507291633275339168559363627129728860084773679973271336341746163822473846435681197705025814097192988352456192360680037001298134790251683453231667350842657599894926609147103687728545082729278264987373437287311862853801789101171263026919895761422270515224551735592791481574546986766769417768355445608814159105327240879253279587588737143700918943458430826782281833566606842263662838255590944869670034694299823147031595036168625376065003713824921341046961452028194664295276279950415674796083639719767706664092580374679026885285198574068669314473855150697569426129782262794886490710639282904319341534562810423777025643824599407160349231143775161720759797362700534556100720624451579888321821077434112484663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c35014fffb325f8e107d10f88e55a5856490a280
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.na.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.na.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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