gaana.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:0d:53:52:e6:2f:f7:32:39:63:8f:49:e7:90:24:e1:a0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gaana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:0d:53:52:e6:2f:f7:32:39:63:8f:49:e7:90:24:e1:a0
Serial Number (int): 340640361893838773738912682593678914806176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:e9:76:cd:db:d5:5d:bc:07:36:8a:27:11:ab:29:cb:ed:87:0d:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:40:72:64:cd:ab:10:0d:f3:3c:2d:b6:3f:85:37:58:3a:f6:e4:7e
Fingerprint (sha256): 5c:c5:aa:bb:8e:2b:90:01:bf:eb:67:a6:ed:a9:2b:49:0d:db:ba:7b:6a:d6:35:19:22:e4:77:3a:0b:43:00:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gaana.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaana.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaana.org
www.gaana.org

Other certificates including the domain name gaana.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for gaana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA+kNU1LmL/cyOWOPSeeQJOGgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTEyMTI3MDVaFw0y
MDAyMDkyMTI3MDVaMBQxEjAQBgNVBAMTCWdhYW5hLm9yZzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKGVZ44dNhVgHKzvhaJjbNFrvTRb85ynSV/nAZuy
mf5eB3qAnB4+bw8qb7dONvzR4RqvxTVEkQZzlKDg/8g9BA3qeKznr7AJqucXRUiJ
Bi1UA+9wEq7nZQy84plhIDfHBh6P3xafGEX3przDzUFyXXScRRZAcC9PbWKf2zTw
M8m0YNw4m/MEYC+g+RE2cSEBSNOVgRWWKVExxJXibqoIE8eqIA0zyQ8AP4LuQ0Jn
peAGVFldBoeeqpnZOvemNUCg2iiGJdEYHSLeHxtCcRoQXv0ibLeClaGUuJTE1jff
Lj+MZ+xk4dS/6kA3az7eJS7M35ggG9L4i48hYPeEU5iFsbFT3yIx9jzP0mZJwyqg
a1Ri4s6izG42zHGZwNWfICdPRdHmEiZaA9YbyPZ/1bQizziEs0OSkGjb6G2Xewt0
dQVtBBZ5hvHZ3gTwequv4ygtlpKWQWXWCzTu7jt0yFvTh1/7wkVsDohdvTRUeLcu
sSsSS0pvfc5HWeNdJ92KZxEICUE8qBXWKlZ8tZzBC6J2MHwKzxdz9eOLDlCY1lUS
AQbYMkfE/HqcE1zpEo6t0Jaqp1Ox//j9UUw5SasH9mMQiLDDIIeW9M5xH34gwkpJ
cxd0jWymNXyF7+CJCJW55DwKaWtCuUZp5IaNlhHBdBnUkMbuMT4zKBWTAthBqpoS
R/NFAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHfpds3b1V28
BzaKJxGrKcvthw3kMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZ2FhbmEub3Jngg13d3cuZ2FhbmEu
b3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu
XJPfJwAABAMARzBFAiBpFLI08FlbbWdiqADMaPV4q/fpAXtq/thU70xu6wdAOwIh
AOXydqzx8UYHwcyFdS9mjBo4o4f0Wzaog19RsZ8V5nuIAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuXJPffQAABAMARzBFAiEArUXTrKOEroGe
6zyMdMA/NhrnHqgGW88pxtfzX0vnrGwCIHm6euSMiFhW07BEulFpABbMej+S7WAX
+BQnXOs5GDSuMA0GCSqGSIb3DQEBCwUAA4IBAQBnExyzJyVSLuhIxwn8+JrM5OhM
6KG4SyRf05xDvvJJUhyWSF53o8Le9FM/M6gcmXYMR7BJsaIO3Jdqew9ql6yzQGrC
NLZFlqsaY+Rype8mlusCiElTegMF/5uNOkN1x0o9tsn7psFAkfcvS6Dkb6YKmHoS
NvWsnoPq2gvxCG8ws5aVwz5Lc72CAmXtpVRZMcKUEqQcRDKpyaJNlD9Qw44YCUy0
8PjiNGV6OEASZ+MCI9/phiaqzBkxE1lBNzcBXBwyVqIeuxh/q80d2GHvSEy3iZ3s
SZus7KbdvHYENRoy9HcepUww0oDU7BAHI8o7pQZLk+B7OTI1qYcuOunpZVCV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340640361893838773738912682593678914806176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 21:27:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 21:27:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659203621639099764496676274851311564298204312279058507856991183500684892672942913985575066851207816708094090966960893335778030936227661760660721284411675851399366700003932308920788654987365229463765917447220449442005901269606638155108841131315277189680976624064617445849951427442778114559725083414382623097628865510147634808760720680478616720813743147788487675389470550474636787157984340524439547174638639781108924979924195238010756725562664336370715262129576434305399330574794522553392502906084209443842641931624053838838765109240374793087500591637684375871879646317470178412240370934771714770775858061602607354056128664334818880335848518159042941662172045288554544092671393192548743805358964952382531235013880377342354023164292648032556118213069067409789628200732888208409302571177630198796250600442543837221572183531145897050609574476535562473613579266654443468845367695645071239681423585688873877007397053046989674110215985258956231552443879713937920621087682569674575761335165145281768233824141593445021892881421720779411864054310113145039203675266615509204193838047611544599246980565689534186056615277705426432426824652744808954670762736018896368404194523442529438249835918143289809638942416026224574142547563668593619468022597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77e976cddbd55dbc07368a2711ab29cbed870de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaana.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5c93df27000004030047304502206914b234f0595b6d6762a800cc68f578abf7e9017b6afed854ef4c6eeb07403b022100e5f276acf1f14607c1cc85752f668c1a38a387f45b36a8835f51b19f15e67b8800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5c93df7d0000040300473045022100ad45d3aca384ae819eeb3c8c74c03f361ae71ea8065bcf29c6d7f35f4be7ac6c022079ba7ae48c885856d3b044ba51690016cc7a3f92ed6017f814275ceb391834ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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