www.ministeriali.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8b:0d:32:ee:a7:39:2c:74:de:c0:f0:ac:aa:66:3a:f6:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ministeriali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8b:0d:32:ee:a7:39:2c:74:de:c0:f0:ac:aa:66:3a:f6:eb
Serial Number (int): 395765937148301846854813021449055098304235
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:75:a9:3a:70:0e:15:d2:d9:0b:eb:15:75:12:20:3e:38:59:86:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:ae:c5:26:95:21:a3:99:1d:13:98:e2:dd:75:b1:a9:d6:04:33:7c
Fingerprint (sha256): 40:14:e5:d5:f8:33:36:66:27:90:d9:d1:70:af:4a:d3:3c:f0:57:1e:1f:cd:e0:56:e3:37:c2:35:8d:34:18:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ministeriali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ministeriali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ministeriali.com

Other certificates including the domain name ministeriali.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ministeriali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA28WfDj2uLtDZHj881pyX
4dVYbZ2enHrnG0lTWvt8lH+ECuI9tJ9ug8aerP2QCfB77VM2Q7U1s+HVCt6RPU3S
C6b860+soX1uhWrh4DUYSM40VvaZX4KCEZApam2uukRT5JmoA0UbbNx2Cr3pBKuk
KQDIUYIPmMKgATz0rBmsk35DCkBMU4UyfdBtJEVxC4lC3g/jm8RWUtxSwKJema6v
YwgzenM7MpbACVDnHrH6JXiSJkF25uK/LZeXiBKIE6JLtDNrj//VlEZZLN540/wa
lt1XQgzwEQ1AzHRDW88N9zdGpYL241lvlW+kQrSBXaXBYd1PcTnTjKcp6cOQYUew
DyLCOUxtRYrHiXKXJMH59vxoDBokiGTnIPRLCUFBZkCmKAu0e2ZgGgLGUo8Ygjhj
wh7/rNQ4WnX/MFj7uNz8y9Apgqw72gBV2w1t5sfGfNNQtmTR93H6yXuzSz3XdI+D
OZLu5M3zV3LNxzvob3Nu3Mdj8CwkCVk6y2GO8CMn7V+xnZDO5iRsy8fHMZrEFPim
80kgM/S5/z53IAYoQkEo+H8IJTdc9qyNl9/ObAEeOaOltvS2a8m1lBbsGZ2qOGh6
Ynwb6wEFBf0OiwWJsu2XRL73qW/TVVHG/nnG6/r3CUJUnSH0MbvNaII9r3C1Iy0B
YyI8vG/lT0Bh2RAvZgyvK5UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395765937148301846854813021449055098304235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 18:32:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 18:32:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ministeriali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896591365776632000443717960796848607966784221145199411414999957523582543532082424478934745191378014757934188629183071177276448980087745691855840016835130462774364209299260139913813265886643511911135725389309685511625962716586428626259160060680928007334301292834399484730178939904168072178548497874910453976933999256664438176277720443471387969098730209003919569798816453948350775717121648430484429693278947990642763067047129480101086651694781755041509311247310210032135342355799004014841763617706050255991707946766153610244137655035191902985758091119979597269121450101028485142628932352072081617533444575265133429354443355161655048900043000000366166829576154592227255119096966266161893682929474152598724402787579585123195493457329964366572667856813565987932606075323919520430883041713329705885785345737311984439788360228910608807292722927048339386845217209131625612016924541956551848529203036950118284194854542395213722906642158955172192420317950412905483053059723119681904153112160804182894854894666069259572948433314524105509586530639241691840294868316481510845577739067055737912463036655360736304845817885481340622948673547003234681007939516953523344158283669134785726986034064160977905092952711497156933913864613259593978683009941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0875a93a700e15d2d90beb157512203e38598625
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ministeriali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170da88862a0000040300473045022100d908d098acd17cb08c0bf4ea23fa8e0782c52e24b02bc229921e125c01aee6d40220307458abce32d4482908ff52915adaed18d86f35e4df27872eb3e51b1fda5fa2007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170da8887e9000004030046304402200eafc63f2a535da3eca029b50554ca942953baaee5b25a00fe2e38622420c43902206c2576d42d45989042dd14f3887f5ddadd6eb4398d82fb08866b7597ca57a7a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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