www.sinnai.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:cf:30:0a:eb:02:b9:c1:2d:73:fd:aa:50:09:e7:5f:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sinnai.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:cf:30:0a:eb:02:b9:c1:2d:73:fd:aa:50:09:e7:5f:06
Serial Number (int): 308230941710269554452691564922444842491654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:e9:10:e9:b9:15:8b:68:38:45:fe:06:a7:79:6e:16:50:69:a5:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:a5:f3:4e:19:11:52:d0:cd:2d:1f:f1:96:32:3d:d6:1e:e0:06:b2
Fingerprint (sha256): 3e:49:7d:08:86:68:0c:f4:fb:a5:18:7e:a6:d8:44:d3:be:b5:51:97:25:95:89:7e:98:7c:60:e8:6b:6b:ad:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sinnai.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sinnai.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sinnai.org

Other certificates including the domain name sinnai.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sinnai.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA4nPMArrArnBLXP9qlAJ518GMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgxOTMyMzVaFw0x
OTEwMjYxOTMyMzVaMBkxFzAVBgNVBAMTDnd3dy5zaW5uYWkub3JnMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5PcuFSv4Y1in+XKqQyCcRJ/o4iWS8QsN
7A6kQqIT7d3xS/wsPSXw2UTa/3SrMqb9vYVtoh5UV90alpjbSGtxCkYr0pJefjSk
Dc/1OwxC9q4vDYr/NQZc91wLh0sKk3LmeMuJxTxK1old9QBkZ54Q/81XfTGouVxi
XRqoVxnAOrkjF13j8eahTPO8qKOg/Zki5Hni4Ydhxz4PNctzy4fQLYOj7hC4mKpz
ELTn/48DRGAClMXT2b6/r8sa4nPgMjK9xEmMPhyj0lU8Iha+l3nE3eGnNQiSxQFo
io/56dssF5RXvxGh5+6yC7a+k3QfSZw9kHHr+ms5ahwkYmV5wmenlh7ZGqF2aC8M
amrGMIcncYp9zeLW6ClxN0FAVkI8mFgMoNU3jHe6Fwxq24RTdqcrO1CTvF2vJAjm
DLFnGRxZbC+s+C1fW4PLKCiPoxbabdgbxKvUOjA7mYVm5J9jqggT1m84FoOknjTc
3YLoejwiOaDD07F3n0pVfE8WR8nwNHnG7s5EVGwuUEUecZ6+x/gGZuNuPbHxkm7I
jrGeRsbsgv2aUQTyDES0DDzfD1mlR3JKoM15aYfykOMRxiPPWKMx9AWLKjLJZ9MG
codkbXtO1DkEMwsQEZmVqE3tkY7D4FQ7vAhWmnJzgiR/XCV4Ivq8sIeQpp7hJ49h
VFlUUCm9E10CAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVOkQ
6bkVi2g4Rf4Gp3luFlBppSQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cuc2lubmFpLm9yZzBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbDpI9p4A
AAQDAEcwRQIgWsmeqHCTnZ+rMssONnk5fA3qYR4D5P/s9wuGcZa7tTgCIQCV87xk
mkrFXxBZ41WH1Gj6qJq2/MiCtihgLGPtIRkyqgB3AHR+2oMxrTMQkSGcziVPQnDC
v/1eQiAIxjc1eeYQe8xWAAABbDpI+HkAAAQDAEgwRgIhALEu7M/YJ8I6hA687ds2
Eql/OmSFI1OrHloh6zZ5/CDmAiEA/1XZL/lUncPSxi0J1lp+JPF56nYsHcEMYGbc
x3BzZZAwDQYJKoZIhvcNAQELBQADggEBABGO/icwMOoncGUrtS4OJZan0Kirv5+8
qp8i/JAhcFrpMTaATjuNzH+36cQ/ZK1DQPmbtMC7E0Ksq7T/MaluOKXUYn1Tpo6B
Sq3v1x172jOdxgt6sz/uOKrQ/7xumNZCflbciK1PGJWE8Wn0P7FWjTh1opn9gI1q
gFnRN6odpa0EJKBmudYOFWRxNbffs/zHm3jl3vQpA/19xczU4ZFj3AAdtZ5W4rQg
ykSVQPZlYgU1dpjExnULAikSLNWZm1SwYdnOPGJljAcrtkUxwQmB/nqgk1WlHDNS
q2fwYecKXYRoB8k6wNxv3z1sAzJNjhotA/ob1qjleYKk0fKglRRrqVs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5PcuFSv4Y1in+XKqQyCc
RJ/o4iWS8QsN7A6kQqIT7d3xS/wsPSXw2UTa/3SrMqb9vYVtoh5UV90alpjbSGtx
CkYr0pJefjSkDc/1OwxC9q4vDYr/NQZc91wLh0sKk3LmeMuJxTxK1old9QBkZ54Q
/81XfTGouVxiXRqoVxnAOrkjF13j8eahTPO8qKOg/Zki5Hni4Ydhxz4PNctzy4fQ
LYOj7hC4mKpzELTn/48DRGAClMXT2b6/r8sa4nPgMjK9xEmMPhyj0lU8Iha+l3nE
3eGnNQiSxQFoio/56dssF5RXvxGh5+6yC7a+k3QfSZw9kHHr+ms5ahwkYmV5wmen
lh7ZGqF2aC8MamrGMIcncYp9zeLW6ClxN0FAVkI8mFgMoNU3jHe6Fwxq24RTdqcr
O1CTvF2vJAjmDLFnGRxZbC+s+C1fW4PLKCiPoxbabdgbxKvUOjA7mYVm5J9jqggT
1m84FoOknjTc3YLoejwiOaDD07F3n0pVfE8WR8nwNHnG7s5EVGwuUEUecZ6+x/gG
ZuNuPbHxkm7IjrGeRsbsgv2aUQTyDES0DDzfD1mlR3JKoM15aYfykOMRxiPPWKMx
9AWLKjLJZ9MGcodkbXtO1DkEMwsQEZmVqE3tkY7D4FQ7vAhWmnJzgiR/XCV4Ivq8
sIeQpp7hJ49hVFlUUCm9E10CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308230941710269554452691564922444842491654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:32:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:32:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sinnai.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934097935257790122141518875442846568619996359089556419025710869988702742386693730599101275004636828395886461216351441310425734619547621391711526192960493394347997881837316594400762489268581325395510456676590098974812892816088445360054221233959875747919715611448051109699249997988920349559676895239399321952935984351481162907149486453018258962318579088000897569730081351506823558435916567325751488079281287101551354515961270276704991874643758967535466597396286604966912237675603840114658925407162989434434322807133807341986637679286465915605862650405692019206676457651603070308991511784157903883795786942479694942935397927666554273934047711682715319641483172249383714817382281716933803022339827891389930989463528264204749677370264282642852772304040846054329582470156272906390672675090961159082710797469118491515172764243140217397714769849470421266529021427422900292762487348421135171925438436470106628814354906877092439440521010193081160042136768581877418552065189029683175307129045133607512669498800736134384448690198140825453841410911211580822085023836705762678058662938766707321908443295239746785841939817656755564640315754089314057543147373297381497493328470706377045881931115896240146842126424987787343520933806882459305746699101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54e910e9b9158b683845fe06a7796e165069a524
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinnai.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a48f69e000004030047304502205ac99ea870939d9fab32cb0e3679397c0dea611e03e4ffecf70b867196bbb53802210095f3bc649a4ac55f1059e35587d468faa89ab6fcc882b628602c63ed211932aa007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3a48f8790000040300483046022100b12eeccfd827c23a840ebceddb3612a97f3a64852353ab1e5a21eb3679fc20e6022100ff55d92ff9549dc3d2c62d09d65a7e24f179ea762c1dc10c6066dcc770736590
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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