gaana.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:39:93:f4:91:3d:22:9f:0b:aa:95:6f:86:c0:67:f8:1f:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gaana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:93:f4:91:3d:22:9f:0b:aa:95:6f:86:c0:67:f8:1f:ae
Serial Number (int): 368041905023141369342660498014131738648494
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:41:81:21:27:24:c0:ab:ac:e4:01:7f:00:12:2e:5d:37:b6:a5:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:f1:d1:b8:ef:75:90:88:a9:98:ce:c1:97:f9:86:9e:95:5a:c0:0c
Fingerprint (sha256): 32:80:71:d9:07:c6:9d:7d:f0:b4:99:04:08:f0:93:55:b1:82:a8:95:c2:45:8e:99:63:d8:0b:25:78:a3:0d:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gaana.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaana.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaana.org

Other certificates including the domain name gaana.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for gaana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4Qvrs+R29CNeul9GZnrS
pi4mK0avmXbkkLuKhhHb5IWJq27GWOxFfB9gp82ia16u9yFoop6/tspANrT/DH0V
uiPaj2lu31eW6LMcmZA2dQ8qx8NyrQfWnj52GP3fPhXiOLwsYBSmVJfiE1Jsqidw
oKM4ROjDaUPtCyVZGaRQVrnZalmfy5lOc55I5h+xxI0LLnSje9iyipS9YNpBcSlS
8GIAE2u7A3MmICQNK1c3cGHR8fCFrwc/DUKjU6VzFYQDAW3/H2AC5OKa+9dP3+NL
SopMBaqI2CzcCfGpY7lfAfMwSFP1wccXaYE6Jd4mO4p+CxAvbp+deIYHwNGw6W+Y
Hvx3gDmbdxCAB8K7m0Dh9kDqIABVDY+VpaBU5+xtMSj7B5glJEZ9NEXHK0YtoEth
Jgw+wdnMfLKM3+CUd+2Kr5TaKkrL0B1P2KISTWkaotuf9SKmgjO5Ha35mMJLmHAu
N1Qqlj3VW+O1yN0SULHeaF5IAiN33o0pPEYGtrRLEOJbwZim9F8K9ImdSGWXq97C
/boncgvPa8r42jQP+HMTy+s0+AXHPJWV+mnFhvdbUdSN07WqfZmr/cGxrzuY29Ff
8/opTALzqebOKPrkTF4L7EmQPIXTHvsoO+JnOZ4oHGl/RuyMZDFbEErY14a7Rr9/
xvHK83B/5mO3k+nM+gLYEp0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368041905023141369342660498014131738648494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 01:05:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 01:05:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918109885104900552107617009782345760338032478896003423243514333473479863707409140109748336801438744823413304228363029070466631233251565204420283504484933314921499493333140773795768193641230084405667684339834086037832856213570208568423288707593945066823163158386720807319188172042388027478857087094787634329637550812031209322684199458137028936587797721665959636499204025484391727747469390474666873855530613078450981933548677844725463602524440348283782725090928894625462436482588738592459605967124501331663570647288140861151608360824835789854529411859400553951900379746327719002705010125350839704514828697818766547641136796948384315006017778961952720297178558823873513021796534084922261853889956524793412648698981026070560219074649673626883430894331120471234121515781828194276055087336658693301154619940418236832487365345403067667107202327767330849059256162885415192732754309293809246426745763234566779473909155494039523973220611176100186434169353199181874675081342418014862969213978448315594087952414966244386116033807757226891449073070312747142299356070714370881934708061138659333548416540997998919691617421590795463123108269823680609019064578405932417654729312416356185042027751011212292331264315211243443918683577453885371610305181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							344181212724c0abace4017f00122e5d37b6a5c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaana.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166f11141800000040300473045022100ecaff9e29703b170fa368701fa8b8d95da2d53076e270e38617e14df4f6e69df02204280c7b147f3e0711cb895a5c62028f09dc4449c8e583537b706e5948d0d793e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f11141a70000040300473045022075757abde5b2f73761ee79047ca6f23371977fce012cf68176d067cd2d4425bb022100cbb5b387ca01864d73b7fd676a0c75f1bb41e8fc405bb4448b4ea940298e9345
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004c0cdc67a706f812274436c6cd5d342cca0eb0d3002d773fcb145096759608b887dd786ca1ef617c3ff863e551533fa6343285d21c0e629a45635a581c25822aeda1059b5c4d42a907edc22d04c25da1cd7514e074387cfb38a2768bdd079fcdd0fcdf8a1891ddf1dbf577ca12995eeecc7a1f7698368f6c1b0d5d4c5de1020b59b28884a5b86a9c2c669d61d4560558f9a99c08b5f1a261e70a84fa727a3fc96f425c7900fe69873aa5dd06a6bee675fbc1bd8e5907818ff18b39bbdfd7c6773ec4106826454db76afa5e951c56af930727a0f6510eb46ff6dce6a089fba8c89eec965b6b958cdb6648aec4fc8e48293fde6ed1e8601c4f313e68b3b1a8139