vacation.hawassaonline.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:05:e5:fb:bd:a5:e2:e2:50:f7:f2:3c:c1:94:1d:5d:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vacation.hawassaonline.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:05:e5:fb:bd:a5:e2:e2:50:f7:f2:3c:c1:94:1d:5d:d8
Serial Number (int): 305241123409951603325907897507640256585176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:a5:fc:9f:1e:54:c7:2b:86:2c:31:b9:4f:bf:4e:97:f0:93:41:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:67:12:12:cd:95:88:4d:71:99:e6:d9:71:38:d3:76:72:82:cb:aa
Fingerprint (sha256): 13:2a:b0:f4:80:fc:2a:81:9d:a6:6e:db:90:b0:11:40:5e:31:74:0b:a6:ac:ae:d5:af:67:a6:15:38:09:f0:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vacation.hawassaonline.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vacation.hawassaonline.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vacation.hawassaonline.com
www.vacation.hawassaonline.com

Other certificates including the domain name hawassaonline.com

(limited to 100 certificates)
ker-awudhotel2.hawassaonline.com
diakoniacollege.hawassaonline.com
newline2.hawassaonline.com
ornashandcraftethiopia.com
newline.hawassaonline.com
bofedpms.hawassaonline.com
huenterpriseadmin.hawassaonline.com
hawassao.hawassaonline.com
linkinjam.hawassaonline.com
tamirat.hawassaonline.com
pnap.hawassaonline.com
saddismedia.com
infolinkcollege.com
newlinestudio.hawassaonline.com
tlctngo.hawassaonline.com
empertec.hawassaonline.com
united.hawassaonline.com
*.org.hawassaonline.com
selamethiopiatourtravel.com
infolinkcollege.com
hawassao.hawassaonline.com
linkinjam.hawassaonline.com
bfi.hawassaonline.com
addisketemaosschawassa.net
etabsoap.hawassaonline.com
mmcleaning.hawassaonline.com
venezia.hawassaonline.com
grandgreen.hawassaonline.com
hawassaview.hawassaonline.com
tamirat.hawassaonline.com
linkinjam2.hawassaonline.com
huenterprise.hawassaonline.com
uagh.hawassaonline.com
pharesnap.hawassaonline.com
hotelpinna.hawassaonline.com
addisketema.hawassaonline.com
linkinjam2.hawassaonline.com
*.heroninternationalhotelhawassa.com
hawassalakeviewhotel.com
diakoniacollege.hawassaonline.com
addisketematradeindustryhawassa.hawassaonline.com
linkinjam.hawassaonline.com
hawassaview.hawassaonline.com
hawassaviewhotel.com
addisketematradeindustryhawassa.hawassaonline.com
vacation.hawassaonline.com
unitedafricahotelhawassa.hawassaonline.com
addisketemaosschawassa.hawassaonline.com
addisketemaosschawassa.net
diakoniacollege.com
mmcleaning2.hawassaonline.com
huenterpriseadmin.hawassaonline.com
united.hawassaonline.com
fevendecor.hawassaonline.com
diakoniacollege.hawassaonline.com
bezaforgeneration.hawassaonline.com
meleketpromotion.com
kelta2.hawassaonline.com
tamirat.hawassaonline.com
zelalemtrading.hawassaonline.com
bethphagechurch.hawassaonline.com
www.himefoundation2.hawassaonline.com
pnap.hawassaonline.com
southspringhotel.hawassaonline.com
addisketemaosschawassa.net
kfleselamhotel.hawassaonline.com
dolcevitaitalianrestaurants.com
meleketpromotion.com
huenterprise.com
srfbocya.org
southspring.hawassaonline.com
mmcleaning2.hawassaonline.com
linkinjam.hawassaonline.com
newlinephotostudio.com.hawassaonline.com
huenterprise.hawassaonline.com
mmcleaning.hawassaonline.com
briquette.hawassaonline.com
infolinkcollege.hawassaonline.com
euse.hawassaonline.com
hawassachamber.org
pnap.hawassaonline.com
venezia.hawassaonline.com
hawassalakeviewhotel.com
hawassaevora.hawassaonline.com
linkinjam.hawassaonline.com
eminencetour.hawassaonline.com
hawassalakeviewhotel.com
meleketpromotion.com
addisketema.hawassaonline.com
lakehawassa.hawassaonline.com
eusethiopia.hawassaonline.com
tlccorphanage.hawassaonline.com
tlctngo.org
lakehawassa.hawassaonline.com
yirgalemconstruction.hawassaonline.com
eminence.hawassaonline.com
hawassalakeviewhotel.com
beka.hawassaonline.com
vacation.hawassaonline.com
meleketpromotion.hawassaonline.com

Certificate

The complete raw certificate details for vacation.hawassaonline.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3Mc0QuIdIrdAe06Wfz
yqdtNI1XFRhn+voJqsmScPIUr9dKgIIvXAMF/vrUKHOg0aPw/vWCSMH+OwmJfzTo
P6IlLvpvhohfZAYvfjLhTeE+W/hnv6DfjrXlgiS1bSwgG3xbZc7YDMOKW2epWe03
4OlkgfVnaNzzcxhmdN2klSyMeQypt9QZc8hXQ7uBEGUX0TjFlOgcobu/Ozqdsz5s
W/FeF1iu8jrqTMesnhYr9rvd5OqBPao8XP7BODyb9CtW3fM4Q29fJsIWTgSgbcya
QlMC5ABPg4hFFdMMIU0F+KSE3Ig3Lomwml4wdD910QGvYC+rJvJh73It6fk5FoYR
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305241123409951603325907897507640256585176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 02:43:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 02:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacation.hawassaonline.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23976302515371258640142458827140841784272415442381128787325211637194749958308352983374495341148850360180572494252371811026792778886898814001692987384626163402247920943010827939728373617280406960804498630206065388235925599602637442211856095705226354062301661121827360129100134172597441817859970438842546677940965054064053294725467599861341242848487199818538127825909563727407132518815628842612637250969102397814412869593210257918023271515194405530862824290417460960589579095751273271337362830652914965518340846257685563833168787299216969417436206119943352047644644396685729481287276909703744851815052014537000314343729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13a5fc9f1e54c72b862c31b94fbf4e97f0934172
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacation.hawassaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacation.hawassaonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1fe9a7e3000004030047304502206ba0b1c638cdbccf06e9c3c431880258bccb8d3a3f0e669ebb79fa83dc74d65f022100e5eaf100e586a2bca82517a69497acf3184e8d9ce8296e5599c542339acad8d80076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e1fe9a81f000004030047304502202a30a47cd22e284d37ae53d94b1aaa750897d5293cfc751693aa04e3ae6c7b1e0221008bcdbcebe6a55c560c97e7e91f5fec26c4a600b8c39a2bf26ad6f02fc5e45106
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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