nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:0d:19:ee:a7:59:ff:c8:5b:86:68:88:59:eb:4f:09:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:0d:19:ee:a7:59:ff:c8:5b:86:68:88:59:eb:4f:09:d6
Serial Number (int): 294701944365371818833420314934781900949974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:f8:65:bb:8f:65:d1:38:d3:32:df:72:77:ac:9d:1b:cd:41:cc:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:cd:cf:4e:14:23:a6:96:45:b7:f2:59:09:a9:10:a9:5f:f3:d5:3b
Fingerprint (sha256): 11:b8:fd:80:ea:25:90:d4:88:ac:72:ba:5b:b7:32:d7:fa:19:39:fc:e5:76:65:19:ea:d0:42:a9:f2:85:08:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294701944365371818833420314934781900949974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 20:33:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 20:33:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819792473468145841899014077369943755989300552039753428379858744789870833175614977397265864045781410953848001750409662981677666852940961335748906695359495782258534506758175744703296488769531312612688626538008913416778844975675453754927221852979078223213483114455849339580873554330607412339679421556536308559336095687448361810404490645451248219239241464769638936519042162634411517738682504972143020103097040022917753497974162056520535113754180922490644547763705480518107621135843267801485274207152045034875947872607910438098256365564937893394349227960891109854718125692975956656470968137528187105387903905408849691272077029245405009248442965980126645395429634898309428731372219543880084704086508205624804350804399266990591251952850801958931421522060660023600040736226436465070194839307194430305651134624854431501665056702133669912957382416472004163437639123977237971402575417750445129168134926224310102053288731857081180195585152577083481631271304368409675017743674830063375234238236973327119939664332624578058354289303154774628374802895800815004272427749634662488883978338803816051300621103198507772573662229965889549747506284850970701331948857090281906297052027752476925562739938418240690018363774373027897324436607931446418272476299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcf865bb8f65d138d332df7277ac9d1bcd41ccaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed7fb250f0000040300483046022100a31a1f2126ce3d7ffe994f494bb749f23d332b706df1b2d390888c998f1f2e07022100c6cbaab7bbd219248901427b3aa51bb34d71e0798a8202f9a78c243e98d89e9a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed7fb25030000040300483046022100b15182c18054d8381f4bd27c70c630d8bbadfdf47bdab3db495119478253129e022100a2bc931eb4a963290d1f1a277d1699db8ee1ce8ca0031076599c9993c2a23927
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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