nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:5f:26:a3:85:95:fa:58:31:ce:28:ee:93:cc:ca:a6:62 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:5f:26:a3:85:95:fa:58:31:ce:28:ee:93:cc:ca:a6:62
Serial Number (int): 306040325145420396908974234324453730985570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:76:21:e5:47:47:48:51:2e:b7:e6:2c:7a:d4:e3:2b:bd:f4:65:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:05:a8:11:a7:92:d2:d5:56:64:63:2a:e6:f2:ee:e4:f3:8a:78:bc
Fingerprint (sha256): 2f:fa:70:18:18:e5:c9:0c:91:80:78:ca:6c:6e:d7:79:72:55:0d:6c:2a:12:f7:78:3f:d8:f6:be:af:24:15:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306040325145420396908974234324453730985570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 15:24:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 15:24:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894950482136817511793867365950673878947664907723140259668336199997994094357968068958113411934861734159779916014913894077219289184434874744884032907730831417606931233703797983622354958966250622637325872820996886047458163950850094057764016631847030322969397447535661139893110297567328243097100901175470477053598408874034052698371774950819540525153792428414249961744926665294659629176532137891061186205831092446646833815813789020777412442929182255492616275518544324103859224370030590875219354366318994636207305160224977350417287557549779493133133603537480276057572446099302299250522164364473731220476011460095723569321661174738423881799912667902876660712093079578017069343988853259150672777454262848556005901359352023288739308389313040414333975437871395052552294527607941960799698281427695686521374435348938980758589779841131625246093495297110572653325245812049354175423822637810416164363967588203913313104960131624324222522194634906526725070290569143140255974694234841286192512769580695913977379276927566012052371976205783881371868448232269750527843534268097782363489239504232745212508345540743462644386016340324200890936676884799885701767245301462587233288043220861117719312325465046316966788035824200842231084087664956545173425547963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de7621e5474748512eb7e62c7ad4e32bbdf4659c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aefcef4fb000004030046304402201129f4c8047c7c98a3980b49e3a45df76267801436062b448631fceea2922d9d022007eb1d895397cfc34c300a41b63177dac78853b3265710906db34feeb2691a0500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aefcef4ec0000040300473045022032bbc1b8b9e88f00cfc3fcb52997b47b2e705842a6ab8d8851e8b0ab6e4b4b02022100ad7081f5ad692b3a3fe051784f2d3b9c2008dfbab5f42a6e35ee3d0e8699ebb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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