khalistanmedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:f8:b9:1f:1d:72:99:cc:71:11:d7:c4:68:12:39:e3:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khalistanmedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:f8:b9:1f:1d:72:99:cc:71:11:d7:c4:68:12:39:e3:ee
Serial Number (int): 284126103761023948256379858497447740957678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:91:b6:a6:7e:0b:19:9c:62:8b:ee:1e:f9:c7:fa:d6:21:fe:65:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:b8:a4:88:0c:75:78:37:2f:31:bc:38:6e:7b:4c:28:d7:af:d4:db
Fingerprint (sha256): 16:f4:fb:f4:ff:98:ff:49:df:4d:13:71:dc:26:20:fd:c4:c8:8d:1f:9b:ab:49:1d:98:09:e6:95:61:48:a5:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate khalistanmedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khalistanmedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

khalistanmedia.com

Other certificates including the domain name khalistanmedia.com

(limited to 100 certificates)
khalistanmedia.com
www.khalistanmedia.com
khalistanmedia.com
www.khalistanmedia.com
www.khalistanmedia.com

Certificate

The complete raw certificate details for khalistanmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA295v9iArrsFM+e8gTJla
IvmnglL9xRB+lRTfPsxtj/GXCM0vMvCeiMGTOYYU2Uyfpc1qEFLvmfZZ8AEA3ic5
w50q8woRBX0yoSrTwY69ivkuq/rYXWd7RZS86296bJ+Q3D+JzovbXhF3WRnI0xwq
dE1XPbfwUqjPNR/AEx2tWV83cQ8UN5hCbbgwuKh8zQ6VU1RD5mJiBsGxHM55GWtO
pav561vJjZiKqkyk9869SsZliTd6/LEEaSdd30Tj2SbiQHBMnjbSxbLoIJeZX6an
1ByaKQIrisb1hlfZKkNK/mF5cunfeAtwWMucbTckf9cKBbqg2aCkPi+rL7xKaiWe
9WRZy4qz2riKunzD9alce/PUe9ya+A0Ei8OpQbarOKlj8Pz1ADcLtC4eaqe0V0JI
Kqx2kQhCAikZYelVcisAF35NelWCGrJZPXa74AYszG9P6Q7Dj02FMR5NluCIuq0i
ieg3fQg/aPB5Eya1+t+ZFmrkLnGNMcpySQKNnLx2OYckSwS02PNwPk8e8+sJU6je
5lVHGzXCXV8JEDB0ytD3wkENSS4+Nx+FJBhx6EqIw0CBmBhjZ4gbOMT6gAAfuUT9
n60Ltq3/4bUOFDmr+J4el1hZWFcCPTKp9n7TDTs6Nxwd8I/25AnG54d4yin1/glQ
qthLCGh3fxtPbeVrpLG1PCkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284126103761023948256379858497447740957678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 18:39:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 18:39:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khalistanmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896986836883512262946896182208586392441127690994823316001653449118399707470663207246991985423767054363483336668368798812185500352426155136471396293496643376651371448870335771294771789837109154089848364892555074017407363935830403375861338599141824612406460506203459987232813341585959136184761848334316404875768929919429343803836344249241001276509755517268157546946094096362853203468236481166909098006392516362292534401880563209072307627303997572387781927180590027189955197363432854607150557496981877464701179496629706921105953808624783654725761955673026912945506724166527331484386798483327969615269310997330802663036201173496547360616646853447119205661275811690058012387905951024362203046242699551256526937405903502970030209062776277014818871070730010843073251332324341688132101118498466652282747985065355088737709016686980842003016076086424587342529579454174755548330891230661703699854557128203924612024534983140385637841845182772026327150699523312830905874999151212415617188632544538432487528778748389656462326218459077315990857474199008008318909781425888997366030281360614359665912623900419091156558069655353044018349065687528566846107266852561783995723666062538725583926849557360813399367461736490529859591729500632516755897793577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa91b6a67e0b199c628bee1ef9c7fad621fe650b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalistanmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001708828da150000040300473045022100e7a8d5a338803f8a8abec328a41c2f921264de2b1e1691a7625f143ff58a6daf022003202e7fecdfe430771c882684a29773d853a83c50c57664966a7532a0bc2ab3007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708828da000000040300483046022100bb80f24dd3ec52f7791ba655054516a63c6e956fff9a6be8894a7dd6ff4743b4022100de891801bdf60268611c4d261a6909e634ef66b758c0a280ff09f26d5edeafee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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