ndjamena.org

Issued by R3

About this certificate

This digital certificate with serial number 03:51:3b:52:03:d7:dd:c7:ee:d8:66:89:e7:93:65:0e:72:b7 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:51:3b:52:03:d7:dd:c7:ee:d8:66:89:e7:93:65:0e:72:b7
Serial Number (int): 288978579813920387015617478586855137899191
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:86:5c:50:2a:05:0a:6e:37:af:dd:e3:d0:68:21:a7:af:9d:6b:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:1f:01:42:f1:ce:d7:30:e1:8e:32:be:22:f4:c7:b8:a0:08:14:a5
Fingerprint (sha256): 2d:b1:84:00:e4:c6:6c:02:96:56:c3:7b:c4:96:1d:de:35:36:4f:78:15:90:fa:19:3a:40:36:de:84:93:be:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288978579813920387015617478586855137899191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 10:31:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 10:31:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845022690446125260531305883359495763579017308847047519232660655915132041092676534966971893130924373016271104105571902203381889496836642302266006465984170826331996643887743481769998268328398181761397101666237214724671285643867936031397686775306776163181334477615172552149765233883827002270617556551925382900624446960947083279860140363144153191927951167910071921924738372925328875965473863656314429905208729073922091268953027132243173192927330549980267170850559703748880514618878524761909064512177069950497761542657583482737948116245673232745958816609099165987781603212084346555382169689684775074874675521123843794332349059032047903164699546201754194233406823584029133413174037764051827845124164185174022419965155314677375681453407644609353889202411419542221150799169148338805023727121071589172772578386073352747420701366074916602899197507232556099935576115230551285504315436970881450000900125325599079597432550174450041474882898293903131492690508519451382499490806906348573418179976696420124970342212367183185878684773558407710847806951871410797058422166683858818054437300841597668442345977450103544329568870806421750546156605191028163393053609896384455269862923915249071775388154141891445899160131958558223609195177786592139917857331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b865c502a050a6e37afdde3d06821a7af9d6b7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb4ababa600000403004630440220740a97fc57bf37184be0cc345860f4fffd0c874c63b7771ea73856c19aa2fac0022064319ae1088dc0c4df78694a234b7a3e700052a3c5b046e655d55036b25eb2f4007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fb4abac5f000004030046304402200e222b99f0004ec8ad24e321de802929eda0fb36b53b4f7433d1e96f22e95dff022029d7a26a7eb73b3cd5f85f0986aa84b744149aff540e03ef0cb4dbe53fc4dbea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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