www.igad.int

Issued by R3

About this certificate

This digital certificate with serial number 04:e2:c6:1d:36:5e:91:83:71:27:71:30:e4:aa:60:e5:71:e8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.igad.int

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e2:c6:1d:36:5e:91:83:71:27:71:30:e4:aa:60:e5:71:e8
Serial Number (int): 425616297473689990285646947503861171319272
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:d2:4f:07:9b:fe:05:c0:86:a6:59:3e:9d:92:fa:11:f3:61:53:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:c8:34:1b:40:28:ed:b2:1c:92:ef:d1:eb:10:0d:8c:ab:74:6a:c1
Fingerprint (sha256): 4a:7a:fa:20:9e:10:4d:72:2e:ab:27:d6:0c:2e:e1:ce:c9:ef:42:3e:70:ed:37:9f:59:f0:1b:63:5e:74:5f:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.igad.int

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.igad.int

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

igad.int
www.igad.int

Other certificates including the domain name igad.int

(limited to 100 certificates)
southsudan.igad.int
www.biodiversity.igad.int
somalia.igad.int
itsd.taqa.com.eg
resilience.igad.int
intranet.igad.int
water.igad.int
compendium.igad.int
land.igad.int
servicedesk.newstory.com
extranet.igad.int
igad.int
somalia.igad.int
southsudan.igad.int
helpdesk.sam-dinesh.com
ictsupport.igad.int
migration.igad.int
resilience.igad.int
servicedesk.tandemstudio.cloud
biodiversity.igad.int
drdipregional.igad.int
land.igad.int
ibe.igad.int
somalia.igad.int
water.igad.int
water.igad.int
cve.igad.int
3w.igad.int
water.igad.int
intranet.igad.int
migration.igad.int
igad.int
somalia.igad.int
itservices.luminuseducation.com
igad.int
somalia.igad.int
land.igad.int
henleyhelp.vioc.net
henleyhelp.vioc.net
www.biodiversity.igad.int
intranet.igad.int
hdesk.amfarconsulting.com
resilience.igad.int
info.igad.int
cve.igad.int
cve.igad.int
resilience.igad.int
somalia.igad.int
geonode.igad.int
igad.int
www.biodiversity.igad.int
newsletter.igad.int
helpdesk.ineosphenol.net
support.edita.com.eg
cve.igad.int
mesa.aylsoluciones.pw
somalia.igad.int
cve.igad.int
igad.int
servicedesk.buhaleeba.ae
servicedesk.buhaleeba.ae
helpdesk.northwestradiology.com
info.igad.int
cve.igad.int
igad.int
3w.igad.int
somalia.igad.int
extranet.igad.int
mesa.aylsoluciones.pw
migration.igad.int
www.biodiversity.igad.int
land.igad.int
compendium.igad.int
land.igad.int
migration.igad.int
land.igad.int
drdipregional.igad.int
itsd.taqa.com.eg
southsudan.igad.int
southsudan.igad.int
intranet.igad.int
mrh.igad.int
mrh.igad.int
resilience.igad.int
drdip.igad.int
ibe.igad.int
somalia.igad.int
drdipregional.igad.int
land.igad.int
compendium.igad.int
extranet.igad.int
servicedesk.stjulians.com
water.igad.int
servicedesk.newstory.com
igad.int
land.igad.int
southsudan.igad.int
resilience.igad.int
cve.igad.int
www.igad.int

Certificate

The complete raw certificate details for www.igad.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoun4cX2gjH2XzgLc6IkO
vs/3w4I8fPr1Lhye5EoruP76pJJzhOj6CMzlVSnvH9HwLXYHRajpjKIxohTWD+Bb
wgn3eBxEFNkvKUuFbjNBm/78GmYfO37oC/0XNyvnO+fh5VrGE5FbM6nnuAokssVL
cPdaFOglP+6eyZuY8YwXkNtWlAa/Yls2I/zwVho9pjuxWXcJtql1Wo00Es/rCoSx
jFdiqe4hmj3v36eXfTfcN1AZiTUE3h5OIN4hh1FwnbD+8rxoR3Fv1iSesZ9wQqCB
qsQWNcIWhkHo1ZJJZLPTdfRi8t50KUr47jjLYd2AfRt24lE8/SqF4H3rQB8jh70u
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425616297473689990285646947503861171319272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 21:29:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 21:29:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.igad.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20565980549133643088326808359966417803554691124342978422698729174612345170514813039675211857615513006195420201817111704445028811975393235748909863553343472069845852493882502587298198272483325001375942102928686647315201770753455856318512177869457706801695455550019106489578373893898332533091564062561484225835960605151287558245894471727151621146452778145167058961552564863323312936153143223435559083641708645523169343847075391609925303797934531003849629185014191349094705356277119440714471693491103701111956567849936206248096522972487242838267307590111167097759372576644089694739009740555372339362301804989969938067167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aad24f079bfe05c086a6593e9d92fa11f3615368
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igad.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igad.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a059df4f3000004030046304402205e49cf44a2824149c1fddaee7d81329965d054f487af3bbc0ae1f7cc044881c002204f072b7d5c3895b8b5296f08a09e37e7e8eb33bf199d6f2e1dc78d5bc34ced0e007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a059df5060000040300463044022003c4d6609e06803362061033c19908778e0f96dbdd9d735005cb952733dcea0402204185ef5515b6725ce3195fe3e62ce3c06e7d341f0e7a24cc73615ed422149fc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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