naf.org

Issued by R10

About this certificate

This digital certificate with serial number 03:aa:14:84:d9:af:ac:be:48:4c:56:a8:3c:f2:c7:a1:8d:06 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:aa:14:84:d9:af:ac:be:48:4c:56:a8:3c:f2:c7:a1:8d:06
Serial Number (int): 319212134530142577534772746768620382686470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:4d:a7:29:8c:9c:bd:a1:4d:ed:72:b1:2d:ab:05:ce:64:78:3a:1f
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 0a:f5:99:a8:b1:7b:9e:36:f1:b6:ac:c9:53:89:fd:4f:51:36:25:55
Fingerprint (sha256): 2b:94:10:41:1e:a5:74:48:01:db:b2:e6:8e:9c:14:5c:7b:16:c1:8e:d6:93:39:2c:3b:e4:b0:99:7f:ab:99:b8

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate naf.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naf.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naf.org
www.naf.org

Other certificates including the domain name naf.org

(limited to 100 certificates)
tls.automattic.com
help.ciclolabs.com
niles.naf.org
naf.org
go.naf.org
naf.org
help.ciclolabs.com
support.cbont.com
support.callocean.com
naf.org
assist.emergencysupport.us
naf.org
qanda.spaceshipsrentals.co.nz
bojack.naf.org
support.infothink.com.au
tls.automattic.com
support.5030media.com
naf.org
mis.naf.org
help.mitipi.com
help.ciclolabs.com
naf.org
mis.naf.org
help.ciclolabs.com
helpp.medtoureasy.com
help.ciclolabs.com
support.cbont.com
help.ciclolabs.com
naf.org
help.ciclolabs.com
support.smobot.com
store.naf.org
frasier.naf.org
winger.naf.org
niles.naf.org
ash.naf.org
help.ciclolabs.com
naf.org
help.wecasa.fr
help.provirtualhelpdesk.com
naf.org
help.ciclolabs.com
niles.naf.org
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
mis.naf.org
vpn.naf.org
naf.org
niles.naf.org
help.ciclolabs.com
naf.org
help.ciclolabs.com
tls.automattic.com
mis.naf.org
naf.org
qanda.spaceshipsrentals.co.nz
naf.org
help.ciclolabs.com
help.ciclolabs.com
support.itenergy.net
portal.abhinav.com
pied-piper.naf.org
qanda.spaceshipsrentals.co.nz
help.ciclolabs.com
support.intersect.co.uk
tls.automattic.com
help.provirtualhelpdesk.com
pied-piper.naf.org
bojack.naf.org
store.naf.org
adastra.naf.org
naf.org
mis.naf.org
help.goodflow.io
naf.org
help.ciclolabs.com
help.ciclolabs.com
helpdesk.intueri.io
help.ciclolabs.com
support.damianknowles.com
pied-piper.naf.org
help.ciclolabs.com
support.montfortcare.org.sg
naf.org
tls.automattic.com
niles.naf.org
help.ciclolabs.com
mis.naf.org
naf.org
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
go.naf.org
naf.org
naf.org
help.ciclolabs.com
pied-piper.naf.org
mis.naf.org
frasier.naf.org

Certificate

The complete raw certificate details for naf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeMLTyW9NGiSyPRmIqRB
zRgxLbaKxRZTxtdslE1/gTXV0bsklXbhCnITEEhcM2EkyC2H3IlMWi/5mG/yc3mn
hvC+ADN2XiAOwbxaM6lSZY11RHoa8kR1Syzfw89fu7eFHRV9b8xsKbsNLZszCXjm
lCRPcfbKjqdLPg5laYx0pXDqo2tZLyifI06xMusr1qbaYEsGgnvbVqt9UGxxMydA
t+BCJpkaLYQxGN1aWgCgIKefSbYRWPHvlpMs2KOFzV8tEygZzBo2WIiwpKXiWqR7
2FiioNtUsXLpYiIjURCwmh864zSn+K6960OIrWbrsH+43T0YpN3BCEDrtHFPMewm
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319212134530142577534772746768620382686470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 17:48:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 17:48:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20436326755733387618873108353295218839162489485795571819390580983152550689150435844349833502477949040625557608787233290786365379726202466886326257820015367603741052007481034796701166508002160161433035319339465092967297824794340880104937856031293641223219243892257883320646625577663864201775834944239603801044811840903883564352705348357342055337711299301705042364011798288246864836215298966357458846989685907754723823631220901120258677273131276900714379215689095260952400185271043621170851018312316462352087839528367166354886904004221652225358679988295394481299468490212586208284099148534392245318000825626841056028247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							474da7298c9cbda14ded72b12dab05ce64783a1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019027873720000004030047304502210093edf32a220b67902d0e578acf8f88f97fcd75634e9a1c46b57db024d8a8019302207ce3878e983c5c6e01e0cb97b91f0d08ecb479d02f4e6fc0519f90e61e3e84fc0077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190278737c30000040300483046022100d7e32d1a1aff760e85da64979b0924a12e0304388ae12f71706a9565c024ae7c0221008b31ae54c580d0a382202fe081226989dd9d25f9e5131d4c92622dbfde71a60d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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