www.emina.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:1b:c4:fd:ac:07:fe:1a:85:0f:2b:ec:f7:1f:b7:2e:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.emina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:1b:c4:fd:ac:07:fe:1a:85:0f:2b:ec:f7:1f:b7:2e:7a
Serial Number (int): 278728170499398414395076451854856691854970
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:ec:4a:4a:a2:be:e3:91:e9:67:f6:81:2d:5b:3e:f3:3d:21:5d:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:2d:cd:7e:bc:d9:e6:08:28:b1:8f:b7:f2:b5:a5:ca:3b:d8:23:c8
Fingerprint (sha256): 23:b7:f8:a9:08:4e:75:c2:e0:a6:00:73:82:71:69:c9:a3:54:74:7c:2c:4f:cf:d9:f1:aa:92:5f:be:e0:3e:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.emina.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.emina.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.emina.org

Other certificates including the domain name emina.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.emina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278728170499398414395076451854856691854970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 17:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 17:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816767945956992666684930397309271519025305844040753161483525812445791856592622724084192379369376326172026593946385413556207672502282195625140788638351997927068833304170998998413466524862958154130355014719148095319410874929401617935490709041179431196216237997727185764939998289956208187858910527999636147133181941504128597748954317974556959877802954543283469825729079101116847102142626805831528313802624578716947794810269246434371822989868759985381571026316490608127088730312350095484621760116959506969648401896467959055178799145709535888148997458451840962115123220310352934136051966030048203976529187136423766686650314524385674110896137533183640113116088645107231211791074710724584817161267398995464865059571583857623716437391707688927893914633938100856959312831097727257650003929360871112841918229091669786072785572812511133082334762679612598829933448855050787690710250973499170548933166264136167806315822539039775993278783357637471661768031119950277238563129536552196190707957623480199148658888833567026574835402280166131961752505839854649129578631229325309883105938780545512374788713721085282182226229491385070878322372663354764523090620254313585197909813594478160165004215374771454328983297258562659996518529687503232923012429743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65ec4a4aa2bee391e967f6812d5b3ef33d215de0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d6ec73dc600000403004730450220286a80d56cefa5fa6eb0bd0e316ff04b82c4ccbc4169741c6c8c3e211a851246022100d9b50b497ede22e641e2abb077e50b7a0e331e171807620c8e6f868aa6dd6dcc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6ec73fad00000403004730450221009170a2a2272333102279b9e2cece93d49019bf6b0065d4c356b29d3d8cae2e9c0220585d1fd2c1945d68ca671ae0898d90bb1be11128e4a48e510e45420eaac4b3d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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