ash.naf.org

Issued by R3

About this certificate

This digital certificate with serial number 03:05:28:9d:97:f7:e4:a1:02:bf:b2:43:2d:34:c4:1f:ab:68 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ash.naf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:05:28:9d:97:f7:e4:a1:02:bf:b2:43:2d:34:c4:1f:ab:68
Serial Number (int): 263092257022607582384745059391783064021864
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:d9:c1:6f:0a:45:32:2e:d7:3c:2c:b4:b8:3d:53:43:e4:6a:ab:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:f7:e9:b1:ba:14:78:ba:3f:e5:4b:e8:0b:81:a0:f5:20:15:70:f6
Fingerprint (sha256): 28:e3:7e:5d:65:ae:7a:70:8b:7f:57:88:bb:53:bd:29:c1:22:63:c3:41:cd:4b:95:ec:52:f4:d7:5c:b4:fc:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ash.naf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ash.naf.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ash.naf.org

Other certificates including the domain name naf.org

(limited to 100 certificates)
tls.automattic.com
help.ciclolabs.com
niles.naf.org
naf.org
go.naf.org
naf.org
help.ciclolabs.com
support.cbont.com
support.callocean.com
naf.org
assist.emergencysupport.us
naf.org
qanda.spaceshipsrentals.co.nz
bojack.naf.org
support.infothink.com.au
tls.automattic.com
support.5030media.com
naf.org
mis.naf.org
help.mitipi.com
help.ciclolabs.com
naf.org
mis.naf.org
help.ciclolabs.com
helpp.medtoureasy.com
help.ciclolabs.com
support.cbont.com
help.ciclolabs.com
naf.org
help.ciclolabs.com
support.smobot.com
store.naf.org
frasier.naf.org
winger.naf.org
niles.naf.org
ash.naf.org
help.ciclolabs.com
naf.org
help.wecasa.fr
help.provirtualhelpdesk.com
naf.org
help.ciclolabs.com
niles.naf.org
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
mis.naf.org
vpn.naf.org
naf.org
niles.naf.org
help.ciclolabs.com
naf.org
help.ciclolabs.com
tls.automattic.com
mis.naf.org
naf.org
qanda.spaceshipsrentals.co.nz
naf.org
help.ciclolabs.com
help.ciclolabs.com
support.itenergy.net
portal.abhinav.com
pied-piper.naf.org
qanda.spaceshipsrentals.co.nz
help.ciclolabs.com
support.intersect.co.uk
tls.automattic.com
help.provirtualhelpdesk.com
pied-piper.naf.org
bojack.naf.org
store.naf.org
adastra.naf.org
naf.org
mis.naf.org
help.goodflow.io
naf.org
help.ciclolabs.com
help.ciclolabs.com
helpdesk.intueri.io
help.ciclolabs.com
support.damianknowles.com
pied-piper.naf.org
help.ciclolabs.com
support.montfortcare.org.sg
naf.org
tls.automattic.com
niles.naf.org
help.ciclolabs.com
mis.naf.org
naf.org
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
go.naf.org
naf.org
naf.org
help.ciclolabs.com
pied-piper.naf.org
mis.naf.org
frasier.naf.org

Certificate

The complete raw certificate details for ash.naf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53ZcJRhxhyM0QNtSkFIq
zXot1N47R7t73bOLvm7IAjuZw/SRaYoVrrHqFPXWb/SbjuUgLM27QU0Sb0E4bGrr
pgqwVuGuP24DlXwa+upLOlshEZPPP7jN26UmKPowKDPoF90veHf7KPgODV4JESqT
cw7GNik17LorStjce2Jjyn4wSo9hWXVMrvJDuUPlnZdeE8KUW9GC90WN86Feai3/
YPlEsGUTWfng0+MdC+Zz1U3anFfvSOyWD8FquZnZe2QEu3fTvC/0nw5h16L3XHqM
Ei0ejaShuV3MECNFsy9hWebu3c2497Djo5NchHq0Rvxj7/7R6unTHpmYBjqVdlN3
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263092257022607582384745059391783064021864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 23:09:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 23:09:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ash.naf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29219413909393057168590528676218994141580840993662062289348485471995280388668959373892205691418904180970204068513004343368804994853610877745924988857400054714857574683124939463630108692440505483914998088088586711601382263104330322559253695353505741110007697231947963721453189947928529161808490248202861063902785360867850995108925245559240800842734283929931200523139542743139828991343798935290740981866062753711917949815894478859066315877731508361873504073781882255073319934276726775409716805151935287291680766156918248387905991873317214598386546794012190366315910962941231037609699157565287157825454130724214827874071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62d9c16f0a45322ed73c2cb4b83d5343e46aab14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ash.naf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5062194d00000403004730450220247eb6497f878df74c7c4ebd28729751e6ff019e28d60d9cb1f71c2d053dec91022100ac1e5ebf378a5ffbe0921ba3f22a6585e85b5bb88a96e1cca157f4b37fde204a007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f50621a080000040300483046022100be2df594cdb9f6c18ea19fd9596308cca1c736d44eb79f77d343bab30284bb34022100bab2d7e5c048abd47de6d5c6fa478961b9bbe9c31966b56b223dcf3b7661a743
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004376e24acfc1ea3a5e63147ceef71fd9aad488c26abb08d8b8fc976030337b394d456c8d0447fcb9047d885a14d465ab39bc23b7e9691c7a881bf11689fcc56f72e0f788efbc4b49186ffdb0d0cef3a1c3cfd6cf8f43c7c914612f6fff612975f5fafc68207246355448f54da566f3a49a77d5879c8e19666f697a55773b87b51ffbe80724813abf8dee73f9cc745fc94753479abec3313520928a1aaadc370a8d4686349f6fd1df09b3b841dcf1d8888e474cbed2f06d2d3d615adc889cc3e2b69eb8c2d4eb596a9f89b2d1b3a0f0c2bafb479fe36d009f565f1e2c16dd50c08147a5209bcda6d810f0937101fc980730fe82e8c1130d8aec08cddf8b763a5