give.hanalani.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:15:fb:c4:cb:0f:c2:fa:16:35:30:99:dc:dd:e1:18:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=give.hanalani.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:15:fb:c4:cb:0f:c2:fa:16:35:30:99:dc:dd:e1:18:f7
Serial Number (int): 304241657073182439105203311005576441436407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:7d:7a:f3:67:ab:60:aa:86:57:3c:67:8f:14:c1:78:ee:59:da:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:cc:1d:cb:2e:47:be:3b:d3:c8:71:ec:8f:1e:74:46:2e:1a:d2:59
Fingerprint (sha256): 14:db:35:8d:10:c6:40:ec:f9:63:44:bc:b1:d9:10:e5:0e:6a:24:88:e0:ec:86:e0:45:f5:4a:ff:1b:cf:6a:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate give.hanalani.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for give.hanalani.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

give.hanalani.org

Other certificates including the domain name hanalani.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for give.hanalani.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304241657073182439105203311005576441436407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 03:01:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 03:01:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'give.hanalani.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847154087566908448887360429634356683701584052252808251212952176440158369373197264030917632134553793588468763976411287962858277836669837040319123635474628321974286043165100009777491881283834902622498184086981603968760852918630270394670859711889779697462285044199191630683027701099261174413129601240165078941833894135226659713622033624449160117671571463559906468404426230327385251452012608056349588169731939373420429809539454713743877961190125263728051680551010475097889762831461698519482065116430856240705624496226715611277169630557369000363932448553586643272306358570191222939653411374263408862768164243433725023113534285177823203869884644361825629514405557552313587460883346045760020013521505589027122620071789719524098227687649449305651737591975351916564593337212374618615078377859849227734243857816229237282004680617843084390391016015663686571671237190816231859998505318918715627898821838494538367478489733552660176146738185552415731267014270961199873040806193601526206696085455334686525465898421502674702786721523896635425481886594937817556490278195591462113353219021686231008747066187952992806118318224465642042035131401691838595197680487941588955311820126806228056791607676570323994438464292685123325787186601570169691849863281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							147d7af367ab60aa86573c678f14c178ee59dafe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.hanalani.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eb551fbd3000004030046304402205c470a5f1501de92296c883c303932048d5081155c068fd5f28795de5bc1e537022056e1c43f93cb8f910c7ae3fc5589395e90edf0775d266fa8ee758192816b6d56007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb551fbcd0000040300473045022100c0b7ef633dca32c3bdbb62361983407b1f97a63a4da2afacecaef31bb665abeb02202828cfa63091e1c58cb8ddcdba3a0c789827c43d783ba96dad1ac5f9a70c6e34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00600415b92187feb0dc8ac1b7fc270997ed37b28a26a21956ab1a2030e7943c8cb9b6751cc397afa46d3dacd11168bc763cbe9b179aff61a1d8e98c045218c90bd3f6c621d26066011fb776eed3644a978bbcf13b3e387e08f35cb5fb1ac462c7c1ef0bbec4916cb471b61f1e1e265121d3dee3c1359d0754c089b7037abbdf747e03bfff640a5ce5159a1bcc5458e6c53364b34a59b7fc1de5611e877f0b2f8aca95e912162a128a4dddbf955ef8c304a6c4b9dfe7e753b2c75953986252112f92f6718343241ecaf00a79fc289ea2e99015e7f59db7e4fdaf25489ddd7f59b01d80fab19a26c71c7a70faf873064c3fa75d80b4d8419a3e7fd198afe2f53ec5