roomag.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:f0:ff:ef:ee:fd:77:60:49:d0:be:31:9e:8f:2a:12:9d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roomag.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:f0:ff:ef:ee:fd:77:60:49:d0:be:31:9e:8f:2a:12:9d
Serial Number (int): 271185107690184965082898690787863685632669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:85:25:e9:ac:e1:95:f0:c6:21:53:2c:90:62:e4:b8:fd:30:d3:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:b4:96:2d:78:4e:d7:b7:2b:84:ec:7f:1e:f9:e5:9b:ff:57:3b:c7
Fingerprint (sha256): 54:7c:71:58:ce:e9:85:c1:16:ee:d0:ac:66:0b:8b:d9:2e:c1:3e:b3:94:34:0b:c4:bb:1a:f6:42:7f:77:45:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roomag.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roomag.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roomag.org
www.roomag.org

Other certificates including the domain name roomag.org

(limited to 100 certificates)
roomag.org
roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
roomag.org
angad.roomag.org
roomag.org
roomag.org
roomag.org
roomag.org
nanak.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
nanak.roomag.org
nanak.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org

Certificate

The complete raw certificate details for roomag.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271185107690184965082898690787863685632669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 14:53:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 14:53:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roomag.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697036691487148941224839070811197475489848957902469529364994846263530904533507304528283708846354236295893057176755441306964109512603318008145490821969806146086173813878365992655719253852451424646857086165287676790432854404782382320389837217767528798224713738533028572280988534895670968918443660140265777223691864438632765138986359898832998527335835816453465459189702041780866080521668680143439296156607024579641570229762076416043225261214023149687187439877450260995672293441963451194894576446030454975112653925510745453071591700509328903293119658318693467659797264259437958629494156083917886576235358688632316988938057560062093057924871019572432728216578946799681582389582146846294490490835187492092687101108779458669711859399590678183323926288723871338327070760795778454235266954214452428909801798415412138547786616211335507403413777301442651352767580750567873340831380723877188585349491585618768383543965922899521714009711644247861044747151951670800366035695669362857272216752223282458757976492297497811336209076418186813377764062378033908615078540091006653248050801558803699559574132464172657612460502420476962840405110092377018197723180868456507350951543938639690950113418367439964206705687221308261109257569391871903512592760811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							728525e9ace195f0c621532c9062e4b8fd30d31d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomag.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dac1340e0000004030047304502210098b4e75c5848a09cecd42c59dc4a1c9b71c4277d55c1b7ec3f5fc767ba3ea0640220019c03d053f53a1fd9695f934164cbda0912960e96fdb48f611815c61477ed460076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dac134131000004030047304502201c486b29cf51ab5235e1d980a093834051125f08dbf641f8ed09d90293817c90022100e4f8c114b19f63b5810db141a9367b9d2def8ff06d90f57e0d5f60328e9ceace
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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