nadesain.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8a:61:d4:59:cb:36:a3:5b:9d:7a:e7:27:2f:c0:0d:c1:e6 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nadesain.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8a:61:d4:59:cb:36:a3:5b:9d:7a:e7:27:2f:c0:0d:c1:e6Serial Number (int): 308425862134130075514419935015300789813734
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6e:b2:67:fc:57:db:c0:07:8b:5c:b9:7a:af:1d:0f:ef:f0:b6:39:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6b:51:f6:51:cb:ea:0a:f2:1c:c0:15:7a:f2:45:46:99:4e:e3:e2:aa
Fingerprint (sha256): 31:e8:1c:2d:35:6b:bc:39:51:04:35:2a:51:92:6f:71:dd:97:36:df:59:c2:41:20:71:a2:f1:18:a5:61:08:22
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nadesain.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nadesain.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.nadesain.com
mail.nadesain.com
nadesain.azwirnazar.com
nadesain.com
webdisk.nadesain.com
webmail.nadesain.com
www.nadesain.azwirnazar.com
www.nadesain.com
mail.nadesain.com
nadesain.azwirnazar.com
nadesain.com
webdisk.nadesain.com
webmail.nadesain.com
www.nadesain.azwirnazar.com
www.nadesain.com
Other certificates including the domain name nadesain.com
(limited to 100 certificates)
rukoh.nadesain.com
nadesain.com
rukoh.nadesain.com
babulhuda.nadesain.com
binamediaprinting.com.nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.azwirnazar.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
babulhuda.com
www.sinarharian.co.id
nadesain.com
nadesain.com
nadesain.com
babulhuda.com
nadesain.com
rukoh.com
nadesain.com
nadesain.com
rukoh.nadesain.com
babulhuda.nadesain.com
binamediaprinting.com.nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.azwirnazar.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
nadesain.com
babulhuda.com
www.sinarharian.co.id
nadesain.com
nadesain.com
nadesain.com
babulhuda.com
nadesain.com
rukoh.com
nadesain.com
Certificate
The complete raw certificate details for nadesain.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISA4ph1FnLNqNbnXrnJy/ADcHmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjAxNjQ0NTVaFw0x OTA0MjAxNjQ0NTVaMBcxFTATBgNVBAMTDG5hZGVzYWluLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAPD+UuOF7XCoe4XBQjBrpNaCnzTHFHBPMcpl 1IWpqAQrWUvwZkzQuOb5Qp8s8MdCZUwe9iaDJU9ZjGUxOtA+5tgHwRCozeMhXDlg /1K8dNfev/cIAm11lsVR8+17JDXV2W29X1LoFz7UNFODuEESJUNRBNhYdxbzSXk8 IKqjhf/U5spMDKBPm4ETuBZOv3UPpdcRExYWAZ3/KTSFWb6BVrL+K6TK4ILlY1d5 yGY8S26Z6uEN6xt9C7GLbGmsGgizQAeV/q3Ljwdo2MHWAH5RHncaAF+2LXXAXE4J ffFAP8/fUUVfxdh4pZg9/dmQKqyHP9MtU+p+mOf8n/d/fFqc5CECAwEAAaOCAwEw ggL9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbrJn/FfbwAeLXLl6rx0P7/C2Ofcw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCBtQYDVR0RBIGtMIGqghNjcGFuZWwubmFkZXNhaW4uY29tghFtYWlsLm5hZGVz YWluLmNvbYIXbmFkZXNhaW4uYXp3aXJuYXphci5jb22CDG5hZGVzYWluLmNvbYIU d2ViZGlzay5uYWRlc2Fpbi5jb22CFHdlYm1haWwubmFkZXNhaW4uY29tght3d3cu bmFkZXNhaW4uYXp3aXJuYXphci5jb22CEHd3dy5uYWRlc2Fpbi5jb20wTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWhsXYk4AAAEAwBI MEYCIQC+1dZxoKc0ff//B9g/y5a5ERyPE8tlvUebjBB7SuwtjwIhAMog+Cexi09D FHZyJzpGS93k+ocL1z7LFsHXhYvLpi/iAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXeP vXWmOLHHaFRL2I0AAAFobF2JQwAABAMARzBFAiEA0JsqvTxhkBjCpUrvBGdbRmwz Vg6uRoXd4qF5yMPn56kCIGe8feIVXcUGPpooS5ybJVKf59Tk5oAZKkIACGLQCJsR MA0GCSqGSIb3DQEBCwUAA4IBAQAo5Mp2Lv60RGnf6GJri0tSQRmLPX9nXtv3Zgpd HA0iBXO1pIBMBQQjDL536szssiSbw8Ty/RopW++tWAQiASq4FkNx4SsE2MSJnKol n8WgtUEc7QhSgIgPTFcE8u4++JL+4qsKZcSnoLaAaNnQ/hiae6wtXfj+6XlqGJ5e Lj0Ot4h0tMbJOp40NSw73Oa5U5lATyZbvJAupsbio54Q0w9szmKKvgMVxrQ+d4YS 7uCV5Po1i0tgT6MuQLVWp3yoFWgIVMJ4GIg5tq4yEXEx0zp65s8w3vRpvn8b8cGd E8fj57QwPMaKssJMOxoYa8TjBcWzyxq2Ws+qIytOUMT24mft -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P5S44XtcKh7hcFCMGuk 1oKfNMcUcE8xymXUhamoBCtZS/BmTNC45vlCnyzwx0JlTB72JoMlT1mMZTE60D7m 2AfBEKjN4yFcOWD/Urx0196/9wgCbXWWxVHz7XskNdXZbb1fUugXPtQ0U4O4QRIl Q1EE2Fh3FvNJeTwgqqOF/9TmykwMoE+bgRO4Fk6/dQ+l1xETFhYBnf8pNIVZvoFW sv4rpMrgguVjV3nIZjxLbpnq4Q3rG30LsYtsaawaCLNAB5X+rcuPB2jYwdYAflEe dxoAX7YtdcBcTgl98UA/z99RRV/F2HilmD392ZAqrIc/0y1T6n6Y5/yf9398Wpzk IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308425862134130075514419935015300789813734 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 16:44:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 16:44:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nadesain.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30422604924016074861085842649365579812361698186784056008034530598906346470540920261480434309253503400205040026056380180667120881663638996278931539522207969444188892521878090999218701232529994627104672856639846938331923661501943023256804169716492742468252275110416813264262082244946330463565086424931322736469472314739167718444198001588071849102958825579551302079716786452623125685882174258860068407310803980027580605906166958471337539754189355052740257804192787584933347786411238871834487608533420447176797514033048684528166325069165337842606405230810964962720332362995248680893721147708328041250833551570481543177249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6eb267fc57dbc0078b5cb97aaf1d0feff0b639f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.nadesain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nadesain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nadesain.azwirnazar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nadesain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.nadesain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nadesain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadesain.azwirnazar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadesain.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686c5d89380000040300483046022100bed5d671a0a7347dffff07d83fcb96b9111c8f13cb65bd479b8c107b4aec2d8f022100ca20f827b18b4f43147672273a464bdde4fa870bd73ecb16c1d7858bcba62fe200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001686c5d89430000040300473045022100d09b2abd3c619018c2a54aef04675b466c33560eae4685dde2a179c8c3e7e7a9022067bc7de2155dc5063e9a284b9c9b25529fe7d4e4e680192a42000862d0089b11 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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