ndjamena.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:94:a4:eb:08:98:64:e2:83:41:1e:77:c0:4f:9e:19:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:94:a4:eb:08:98:64:e2:83:41:1e:77:c0:4f:9e:19:c5
Serial Number (int): 285694487893775583948699649245014443039173
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:69:3b:5b:ac:56:cf:6a:4d:a8:19:cc:c4:61:2c:fe:c1:95:db:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:1c:c7:8b:4d:d1:39:54:27:7d:fa:b8:06:22:82:33:a1:32:7e:04
Fingerprint (sha256): 25:4a:5d:6a:b1:be:31:eb:0b:a4:4f:d6:13:e0:47:10:6e:0d:5e:69:77:d3:09:0b:b9:9e:09:1b:d0:71:80:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA0eUpOsImGTig0Eed8BPnhnFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwOTQ1MjJaFw0x
OTA4MjYwOTQ1MjJaMBcxFTATBgNVBAMTDG5kamFtZW5hLm9yZzCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBALszoyeo7I/xBbx7urbo4uQfExLwxDNzUQXB
t2hLbgZxtSgDDo9oTV9y3fDzil0MJibFfO2mAWO8prpwiQTipPNqSLQtMDAzoGpy
dMuYOMXRPMFFviCMtBqgW7tL2t53kQP3wqzRZNxl58MLBqoF4J0dMOLR75PJB0tu
hI8VdKfwrqOeV//m9rRBrzjmewcMqP7X/iiRzcHP7i0goH5Uq2s4SHBpC/LWlGOc
lGiTk8jywYUt9qZXtCt0yMyBbYRbNv659Xlpa13F792wNl8L/Gqt/x/1oobKGcj6
thSfa/wkqmx9Rcz822xyK/1FouVl/HBFbPjPvAWc3Om4D0H995BgieYodCN6nLHY
oOs86O7o7utAxhSz6lvErAtwqcbXuQuJCZSoIM/jgXbvsU9OoVUq8EojxYa+HsVW
dzQv4Y2RnK9f8JwiC+t68CYgRkWnaLt+mTK1+zSQOofe6R0Md7U86Ex9ZYJO/Gs4
covbUk8KYQNBIQOeAHaEtpCLR0zpZhHkZRA3alnK4DfnZW2RlPVbNYJ2y1nten07
4a8OYjAx+gPk3EBOjgjnNjd2OZwQoIzYD81RpC1CX41ynE53D7mRrvD2meBmb543
mjUYGt0scuFu/I3LvG/N9yxPzuRuY0Ilf8VtbiRHpQ9r+L6jArfb7mzlOkgio9Yv
mrwI3lDTAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIFpO1us
Vs9qTagZzMRhLP7BlduxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbmRqYW1lbmEub3JnMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq/gttXAAABAMA
SDBGAiEA8ytVQ8JXXqKJ1s+23jso/c8acdGkcq0Zgk7rRSoOB1QCIQCQ1k5xmBeH
3JqjrZQOXWpq/AHV/zxOpPQgyeyYm+JQUQB2AGPy283oO8wszwtyhCdXazOkjWF3
j711pjixx2hUS9iNAAABav4LbcUAAAQDAEcwRQIgfFbxJpfvt0n1DTPKNyWtFW3h
v42XJPywtE8KS9oCNtMCIQDfvfqRTS+W4d9vCubmDQ1KEKRwivD2fa3Bugba2RBq
LTANBgkqhkiG9w0BAQsFAAOCAQEAg7qS96VfmDKMdS1tbdiWxMVRZPpVp72baKVR
bg4Oogx6zeqJW+0TTD8qSciWNVt/xagkVEItOaHdgbATuZ6cSFoI7+CkOyvBHvcG
mjyif4Sg0xewH8L1w6H/9AveWUW1YXpuUtqIsvcf0UYK7uvX3EAxudYK4bpI7Qs4
dVYIKQIyUqSdxEfm7W+N5jeb3Yk5h7gQNvShWYogxp/66+y+peVAAH22GWRcXidK
+8FYHchb5eZZcHVgtwV3rI/QeaV9xfXrrNpPfIuVrjn5LKsR3TTVWITwdW9ZjLhA
kTDYlENaaJWh46D4NVw4vucF6pDhB3rt5MmaUxJ8lXDN61eWWw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285694487893775583948699649245014443039173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:45:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:45:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763716338775168863476057395784183195593119511363925069141497928164365172620623687786395053160623458690322114224191344074742199040202425125644609262885780670066969017422876924917710762623536398085683580162595596514975903791414615525519934671171201375879553387090982484852631323734796618398289898788004555968010945613774348702144713430035216406455303462021131403166232094644465580603751121030218000927074084024461625831045141186166269947979650906296525349445125954952172844037884874520347834569612118619366139446396525185953790496995609973702987592101512423641629509303381697021415639611772568268281785653516675037449693635633150572127509485425975971805170917858206474786783717378726583813066440188418316630127224924930801770235149415476039695300314267080424747230917398046901450730417630244276200122419005344061462895819196651212517368605168979839886185833635996254536027509451301695823391021012941444551583120858012497862762738830552746669354007917469567168678975466197747707518848670644423872606301260997566073562632071895818916760690465778073160582015372070963013314137645614280229519964039821764259484479614109591303568881696734592311365926136419212710061114229494280005756441193121427191552512423723887679459656515104921041653971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81693b5bac56cf6a4da819ccc4612cfec195dbb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afe0b6d5c0000040300483046022100f32b5543c2575ea289d6cfb6de3b28fdcf1a71d1a472ad19824eeb452a0e075402210090d64e71981787dc9aa3ad940e5d6a6afc01d5ff3c4ea4f420c9ec989be2505100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe0b6dc5000004030047304502207c56f12697efb749f50d33ca3725ad156de1bf8d9724fcb0b44f0a4bda0236d3022100dfbdfa914d2f96e1df6f0ae6e60d0d4a10a4708af0f67dadc1ba06dad9106a2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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