www.nathali.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:7a:ed:c9:4a:36:3f:2d:60:97:4a:15:86:a1:50:0a:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nathali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:7a:ed:c9:4a:36:3f:2d:60:97:4a:15:86:a1:50:0a:47
Serial Number (int): 326494190349665221879205059976444978924103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:88:f8:7b:d8:a6:2a:f1:a3:72:75:85:15:8b:7f:3f:e1:3c:b5:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:8b:79:bf:16:79:7f:2c:6c:50:fc:b7:42:3e:e8:f9:d0:16:fd:60
Fingerprint (sha256): 3c:a3:6b:dd:5d:8c:f1:6b:89:2e:94:b8:a1:83:19:8e:36:0b:b7:e7:5d:b6:99:9e:49:a5:88:1c:a7:ac:46:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nathali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nathali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nathali.com

Other certificates including the domain name nathali.com

(limited to 100 certificates)
palmspringstemcellclinic.com
nathali.com
nathali.com
www.nathali.com
nathali.com
www.krummrich.com
peschieraborromeo.org
nathali.com
ministry1.com
nathali.com
www.nathali.com
www.nathali.com
www.nathali.com
www.nathali.com
nathali.com
nathali.com

Certificate

The complete raw certificate details for www.nathali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326494190349665221879205059976444978924103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 17:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 17:12:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nathali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831299624588303233740721085965667635479153183088266130894177796840598064567754851151286510066571033761720958660885077023860662682328411189225263871417495018720722260638492089863157223905958977191420990370924459461057750675735434600025079770405793952168296721340698026944852757253007469298513996562818184437090638776536231542178150324578224050501913808149973794647195736992473661950468496882838747071215156564621332733113024421665720258873997852633894970461855550795274837784535270351308280315802630304736205172383045826386079859217404764301178524035089297701798323045728684710538470887560030054390464532889741506236021546732752482526847463469466166416119321468329006854144706105079271534848558924087530915513122773378943576036567050741718028146009620073167534169186292180105866458651417016730541704740498225300991762916721927339747128165634144806075891576898740466038805315827771443754998238205520623774904028335382416986651737209068827339506474795772122411848395782299153468106486799122634591547420914851933131800199599866344511121466214491097251817508774617735115602532249886514042901397556873256715443687291214425610553808389432180974611476410633241750645887893821361989444519190136419711754438321544078895233901892742679616176351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7188f87bd8a62af1a3727585158b7f3fe13cb554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nathali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb336aa4100000403004830460221008a5dff18742b5590998e2004518ad91a9e32a6a8991e4b3b08ae3e714f5ed5fc02210080a95890566c2a52f7273dd1bdb2c3599e8668bf3a0571a4b95e6f769c5c50280076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eb336aa7300000403004730450221008c36a063fb6a77cb910064db32f8c3423ac4abc0ab573e8b5c0c1bac9044f6cc02207766a1763a07782d029e3a04f22c35119f969a724b64f8b3e2b4deef4205c9f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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