maliyah.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:62:d7:5f:44:8f:b9:0c:92:a4:2c:50:24:2b:48:33:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maliyah.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:62:d7:5f:44:8f:b9:0c:92:a4:2c:50:24:2b:48:33:cf
Serial Number (int): 344837420310583077696816383107209087169487
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:47:0b:d5:92:ad:09:73:a3:d3:24:7b:b5:25:17:a3:eb:75:89:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:75:e6:0c:8f:b0:5f:d3:6b:6b:e0:aa:9d:bc:e2:a0:d7:cb:2e:d0
Fingerprint (sha256): 37:96:bc:f4:bf:ca:92:49:5d:2f:da:a8:7d:93:5c:dd:b9:70:76:00:c8:2d:70:8d:2b:f5:cb:9b:38:a2:ec:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate maliyah.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maliyah.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maliyah.org

Other certificates including the domain name maliyah.org

(limited to 100 certificates)
lillianna.org
www.maliyah.org
maliyah.org
maliyah.org
maliyah.org
maliyah.org
www.maliyah.org
maliyah.org
maliyah.org
maliyah.org
www.maliyah.org
www.maliyah.org
maliyah.org
maliyah.org
maliyah.org
www.maliyah.org
www.maliyah.org
fd2.com

Certificate

The complete raw certificate details for maliyah.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344837420310583077696816383107209087169487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 21:33:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 21:33:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maliyah.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674424764660029936116978135311619958010569350829758994426981659640532024402002548877019185940534668628830199173608147203865366180336496115195601335579583577816278097242599085490416179229410042761176602845616106582676939296740415175222345570257533093483251667669813329435209597648807666689881618399118302268937066023944029219129799651441351109805559095546381833054153466560582342427732384214888366341558818301646748645580574168554639695099028890703503080374149776895002210561590159467407003037071509655196922171161924262248366672624131072331172860269972948649349865718155404791045285620021603930251391259967875964520809923323890033328801576895442158659453495171460603293102485299498546409892344713154376332262562544810270151138770630441935105095162819874174145972204969095019119958711808653858200699994490287029340828185340916803445964140484066153729043555699022563169220927030192757300624223968527733848342868160650509739160647283587184226171806733878651652316384867071136054241617623849400674671945509537819930126099226112013974034951396328160344795569479514269463165921588034470583850639890092465712713420646936348136583981087737082509771091898754257642514931285207587090395711913987648979613221989840252823799869810938635564173811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0470bd592ad0973a3d3247bb52517a3eb758971
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maliyah.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f3a0b01a00000040300483046022100896c92674c412212b77bd9eab8e43aba35a56cb86ef82ff3bbee9f23d35eb549022100fad2d5489464cd002d44493ef3df81afb1dd6812e1f4dd7a7bcfeaacc0f7003c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3a0b01920000040300473045022020efa2a5a44b75602de57d81552f1c27c43a70d07700a39cd198a78f318499c1022100ec48fe489b07018e963772e7d09abc01a8b420203be7f0c8b1c13da38a8800bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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