www.emina.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:33:1b:c4:fd:ac:07:fe:1a:85:0f:2b:ec:f7:1f:b7:2e:7a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.emina.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:33:1b:c4:fd:ac:07:fe:1a:85:0f:2b:ec:f7:1f:b7:2e:7aSerial Number (int): 278728170499398414395076451854856691854970
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:ec:4a:4a:a2:be:e3:91:e9:67:f6:81:2d:5b:3e:f3:3d:21:5d:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:2d:cd:7e:bc:d9:e6:08:28:b1:8f:b7:f2:b5:a5:ca:3b:d8:23:c8
Fingerprint (sha256): 23:b7:f8:a9:08:4e:75:c2:e0:a6:00:73:82:71:69:c9:a3:54:74:7c:2c:4f:cf:d9:f1:aa:92:5f:be:e0:3e:cb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.emina.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.emina.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.emina.org
Other certificates including the domain name emina.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.emina.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAzMbxP2sB/4ahQ8r7Pcfty56MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjYxNzEzMzRaFw0x OTEyMjUxNzEzMzRaMBgxFjAUBgNVBAMTDXd3dy5lbWluYS5vcmcwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDINKfx7y0Bn6BsnWo3HPvwb+U49Slp5wGa 09kU3ZDTiCy1nti//xsI+nYJtVliYvujOxA5oAQSUdCkzcctBt1my5YSUZnlLB4P slxpnNGdz89Nuz3OPawGWIEHI1NfmNvDflGIl26j+xW/XMyKu/8xh/1Av1Pkq0x5 00HLEXG3higti32/ePtVOL2gyT344BKh9WRqWXsHt27nOIFLFw6Dbar+LlDdKjYU wOVK6UeqAY006wClQT/bmfHfv8WXtfaUbKCKfH1wCRtxP6cRFZkrHdTrAVc3KFLD SLFbJ6CqVu0VQGRkl7El335oaCAfDZI1W5ibXvkVOCFEdqPBRa3N1QViN2Y13J1P o/t+YQEc1+qY9qqdxKvACb034WZyRkkDow2lQR5xHSeYOGGPFoTC5GQgudZ7+EWE qS1VCVIZZiYvqF8a87+fSYCsOW75Ao+Pp0tM3XxY0xD+TwLPZTu7XGkqh47feBBs 51yt1MvWDyOgM4uN5E9kP91d5vA2fKeI/yHojd9eprxOTClzmXMgzBW45//YE7SC iHR5gYCfksmXJPq+3yWM4M8GJ+e78TDV5RoASm7lRn3L0vQfqHv/0uJwBVKGmF1f SlPKYmetdSCi0v8j2jK4M5S7NgNSLnvtyRl9NfQUk4fMOv1R3e5LS+gEbTy9/zFx M0INw2v3rwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRl7EpK or7jkeln9oEtWz7zPSFd4DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5lbWluYS5vcmcwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAW1uxz3GAAAE AwBHMEUCIChqgNVs76X6brC9DjFv8EuCxMy8QWl0HGyMPiEahRJGAiEA2bULSX7e IuZB4quwd+ULeg4zHhcYB2IMjm+GiqbdbcwAdgApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAW1uxz+tAAAEAwBHMEUCIQCRcKKiJyMzECJ5ueLOzpPU kBm/awBl1MNWsp09jK4unAIgWF0f0sGUXWjKZxrgiY2QuxvhESjkpI5RDkVCDqrE s9AwDQYJKoZIhvcNAQELBQADggEBAE4Nc4hmWHTguPxVSiCp5VTO84aIlOEdwBqc mAykSOytDErzHvyxCzUiVqUvHSevkRvqrOaJd5TmpED+vtjbucpZTlHsaPpM2Htd FMXDwgsuK6GYQ31PZnxI5K29YskGvgxdfWr5WI376avXOYXmo3K3prMpPmdoxFIF Fhy1QxyNGx5RoDiMOMy8bnRw051qeTtHZAazNLny6xQdY0fbkA1LPGs8qmx9opip jGQo5yatNe7iihqydWIgCvE543PcRkpSHQTGrQDU9+7ZOv1dic8czgDiVZo5MGNr JGsk0mpZ6iXl8wJsQ7WRax6cblR3WtCwqe0K/6vFO1VsFw2jnZg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyDSn8e8tAZ+gbJ1qNxz7 8G/lOPUpaecBmtPZFN2Q04gstZ7Yv/8bCPp2CbVZYmL7ozsQOaAEElHQpM3HLQbd ZsuWElGZ5SweD7JcaZzRnc/PTbs9zj2sBliBByNTX5jbw35RiJduo/sVv1zMirv/ MYf9QL9T5KtMedNByxFxt4YoLYt9v3j7VTi9oMk9+OASofVkall7B7du5ziBSxcO g22q/i5Q3So2FMDlSulHqgGNNOsApUE/25nx37/Fl7X2lGyginx9cAkbcT+nERWZ Kx3U6wFXNyhSw0ixWyegqlbtFUBkZJexJd9+aGggHw2SNVuYm175FTghRHajwUWt zdUFYjdmNdydT6P7fmEBHNfqmPaqncSrwAm9N+FmckZJA6MNpUEecR0nmDhhjxaE wuRkILnWe/hFhKktVQlSGWYmL6hfGvO/n0mArDlu+QKPj6dLTN18WNMQ/k8Cz2U7 u1xpKoeO33gQbOdcrdTL1g8joDOLjeRPZD/dXebwNnyniP8h6I3fXqa8Tkwpc5lz IMwVuOf/2BO0goh0eYGAn5LJlyT6vt8ljODPBifnu/Ew1eUaAEpu5UZ9y9L0H6h7 /9LicAVShphdX0pTymJnrXUgotL/I9oyuDOUuzYDUi577ckZfTX0FJOHzDr9Ud3u S0voBG08vf8xcTNCDcNr968CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278728170499398414395076451854856691854970 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 17:13:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 17:13:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emina.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816767945956992666684930397309271519025305844040753161483525812445791856592622724084192379369376326172026593946385413556207672502282195625140788638351997927068833304170998998413466524862958154130355014719148095319410874929401617935490709041179431196216237997727185764939998289956208187858910527999636147133181941504128597748954317974556959877802954543283469825729079101116847102142626805831528313802624578716947794810269246434371822989868759985381571026316490608127088730312350095484621760116959506969648401896467959055178799145709535888148997458451840962115123220310352934136051966030048203976529187136423766686650314524385674110896137533183640113116088645107231211791074710724584817161267398995464865059571583857623716437391707688927893914633938100856959312831097727257650003929360871112841918229091669786072785572812511133082334762679612598829933448855050787690710250973499170548933166264136167806315822539039775993278783357637471661768031119950277238563129536552196190707957623480199148658888833567026574835402280166131961752505839854649129578631229325309883105938780545512374788713721085282182226229491385070878322372663354764523090620254313585197909813594478160165004215374771454328983297258562659996518529687503232923012429743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65ec4a4aa2bee391e967f6812d5b3ef33d215de0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emina.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d6ec73dc600000403004730450220286a80d56cefa5fa6eb0bd0e316ff04b82c4ccbc4169741c6c8c3e211a851246022100d9b50b497ede22e641e2abb077e50b7a0e331e171807620c8e6f868aa6dd6dcc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6ec73fad00000403004730450221009170a2a2272333102279b9e2cece93d49019bf6b0065d4c356b29d3d8cae2e9c0220585d1fd2c1945d68ca671ae0898d90bb1be11128e4a48e510e45420eaac4b3d0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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