erp.ahg.af

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:c7:24:f5:f5:1e:51:d4:86:08:c9:48:c3:63:c0:d3:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=erp.ahg.af

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:c7:24:f5:f5:1e:51:d4:86:08:c9:48:c3:63:c0:d3:4e
Serial Number (int): 300393755906726466474753125363671447425870
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:7a:f5:09:69:b5:85:82:fc:d3:da:53:f1:84:ad:02:8a:7b:b0:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:6b:2f:a6:49:6b:c6:dc:b6:b1:0a:ba:31:ce:51:6f:96:cd:a7:4c
Fingerprint (sha256): 31:b7:8c:8e:7b:fa:e9:58:f9:22:dc:42:fa:1b:ee:d5:2c:e2:4d:9b:cf:38:9c:d8:3c:b1:36:18:6e:39:3d:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate erp.ahg.af

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erp.ahg.af

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erp.ahg.af
www.erp.ahg.af

Other certificates including the domain name ahg.af

(limited to 100 certificates)

Certificate

The complete raw certificate details for erp.ahg.af in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300393755906726466474753125363671447425870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 21:15:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 21:15:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erp.ahg.af'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790775471581627981488746939841260070239745596541004310367347844389192170916590506328118993382970727961515296653378651975534284472761830197237766534715243409953353457650688054047806406258829592824919284680347159948160986465857282698569973493579386351636449420499888422508245375063456666762700235420785125184176916999840545025217949007805527682222530219642814098222836828455835612596727156949888860625881050369307195537704082244879011166548286909453467141953256442809008445247620941120907924600630330539887421585502594708744145330213930640919143582439402915214343889691497792921527990300389058462458480642191932782062852779999743653820540539474876512923228818234257302601574799503687083729340632149943991102564748566194863124509604189072333665007023053973696690159382573134213205882400181223062523995709856220194785442313218397653237357003314627656907217244827352534144506491610565178363630714546433430846711736666890384436627142856921702883840324048586533028187322192874372803580766524866030844690034711549396530536717181975969916062735673784513861049294353204348105332345172786776720394161308167941387740431129324018585682652720140468280275346346181791125915930303812947435606509190129431554304322517382234702709156610138748653263419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff7af50969b58582fcd3da53f184ad028a7bb08c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.ahg.af'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erp.ahg.af'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170982b25000000040300463044022072921a26beeb2cd3421bed80ab37c3cc5a507fbf49c4235602a6efdc15bdb94a02204fc7562a5c342f48fc5f208c4f4f385db13439edff27fdcef442452ff7e188aa007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170982b24ea0000040300473045022100e4558cf38d5f2f02641f6e25d49591032026695da59c1de954f7135283fe91ef0220166a5810af8e158719adf1886738aa7509726729567424c1df29bb63dab88c2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004f258d4214fc7f105f8de314db404d8cd94db646fe16f0f0b76e010ad160ac725d61963969f801f04ef92ae62cdeab1496257b6d0279745ce60436cb70f8ef04d35b6987fcfc9d2a3a2af985f95771bb6bc11bbcbea5badc62cb4243d11d65f202a184b243e2890589919ee38b79b759443539f89959a71942552beca32b58d7d3428a261bdbc9cf1aea7dfa99df00a15bb9bb0f5fdc56f069d2bed35b81d1275a66a14d1eab480fc88859c5c7a374ba982a10eef150ddaf2725a0a93a7dde9d29ac9e3fbcb27e8658a43e71d345566e589130e5394a19490ae892dfe9f3212c08e4d0f8047ae4fc9a221484591a4fc982556cd3cc4337ed3527d6ca7808399b