assuan.org

Issued by R3

About this certificate

This digital certificate with serial number 03:61:82:ba:23:0e:59:d8:6c:56:45:20:c2:de:ed:2d:5c:68 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=assuan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:61:82:ba:23:0e:59:d8:6c:56:45:20:c2:de:ed:2d:5c:68
Serial Number (int): 294518013504300833645701720389826128993384
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:dc:3c:1d:f7:16:44:76:a5:88:76:b6:a2:26:4a:eb:3d:e9:b7:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:8d:46:96:1f:b2:43:81:d0:2f:63:9b:00:fd:56:14:d6:4d:51:d9
Fingerprint (sha256): 4c:3a:aa:17:c3:7d:bd:51:0e:a3:2b:ef:25:4f:c1:53:0d:52:15:c2:eb:a5:a0:a0:7a:1f:3b:39:21:e3:94:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assuan.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assuan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assuan.org

Other certificates including the domain name assuan.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for assuan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294518013504300833645701720389826128993384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 16:26:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 16:26:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assuan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732417198709201298442974863724824778913646985579595017566080753996069169601452388414155414160357312211446453349264680073674507987197516564754200814799910023426364084255902322869289677172389959537019301786094273375983994398323622517905187946354525354194862919333452385803753631291363571188866315651276267351817534197033476173795153769879392078874222556550399056004977076653003712957412831333541868591523595879562619747943072996356360272448979402411169398894660860512645686904003958010301745336919123836659730637185424215748371417996605902810150543559919353692406645201201406870819195245440044085273439234340781867752372500677910454235958803078385709894271689129182627160741636570349076233700166446647770935054279880798815284166155210510113152582098906604746998517531988587470461299185976222114557632969111895147548159824973046819219414852178543619008435315556973531426484696032568251643989081004450925981070221317820818938574133270310341120674900461412582444715785054634424118371636735763524393608251777871658236823074195403605663897279095167316916824631486222444266859373895501010667957387063884068620307924528835087174203693154523088950434854231043975755158716257646701191588787627045023912916903686007514333507748084285171577978607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79dc3c1df7164476a58876b6a2264aeb3de9b7df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assuan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f970a275800000403004730450221009711c82653c16f424ecac52eda294c3bf0def7f8703159c6c62fb22879489fc502207b76a6fe98bc868c81a00a0d58eebeaa836d0250cfa203add6af3bdd3bc9922a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f970a27500000040300473045022028ae915bfad7635f5a45b875a600638a972ece3f4c0b555bb1bf91933ab8c36e022100c5a70684871e63786adaa619e73617d894fc03b2f6026cf8cb26fa39d085aa5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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