mesainn.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:7d:bc:c4:53:40:ff:41:23:dc:25:05:bf:b9:0e:eb:be was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mesainn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:7d:bc:c4:53:40:ff:41:23:dc:25:05:bf:b9:0e:eb:be
Serial Number (int): 287705733681423856086997914345142668422078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:a1:27:89:9d:d0:3d:c0:0c:69:e0:b6:f4:b4:05:29:cd:b3:0d:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:93:cf:c5:19:c4:b9:91:a3:c4:15:cb:64:6f:bd:73:07:60:8c:dd
Fingerprint (sha256): 3a:bf:c7:e6:d9:43:8a:31:ac:52:0a:8a:50:cb:82:9f:0d:b7:c6:e2:36:09:ea:20:11:4c:ad:91:fb:23:9a:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mesainn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mesainn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mesainn.com

Other certificates including the domain name mesainn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mesainn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287705733681423856086997914345142668422078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 05:55:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 05:55:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mesainn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675634571026336116456684120678293078666689244542408766695232571309590916484656394037747222067399464743686952021142375810275826165809512954811271287904420869355054654943209535903249984816249428974408419527519615165344237162448986195566798913834041217810062276714855463360316629576033772944188602827224444008682744864439199377093675603989755040286599297818083722719074205395906496604968470777714080431322351116264765956593391964725210098388858112795344303369280096060150163713258351995538610212909548033895504322736155282627716743882896828284657032285048093371023219633691425321958800718148823746261273073833230989990981207829652126746542582591824165618376061485943177951498916638498013407905306298383486489925952524532841470308724026354020443680228899319200734093410485199433187050326698044288387336425194628668049824276968196495258496076745305188539703881474676215144185253738000477108648682118152174158607060942488150053742051616125951983745038913890441720848615870054972322392004718411451703975725257752757969892714292646255829007307320159990466311633713902949272231399053093354138497116729883713035704107817982846054509670161359585611612673960520051160663409493881784648709677649288925548039617176388831483845533442138763902834341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afa127899dd03dc00c69e0b6f4b40529cdb30d0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesainn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5aa4d1730000040300483046022100dca99c028107ed49669c88d81b9ef647aa0cb9d86bcfa6a4959ac02f25c21ce7022100afffd6d524ede24485f659f84d6576554a0ae173038190cb873b6463e9194c3100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5aa4d1820000040300473045022100ad99154384a7f934aceb278abb319ecb937ac25a8158e72b09721488572dd33b02202e1e1957069a4c4b8d30934f8eff59b056fb9df4feaadab740ae5d2b45f60f59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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