gaana.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:0d:53:52:e6:2f:f7:32:39:63:8f:49:e7:90:24:e1:a0 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gaana.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:0d:53:52:e6:2f:f7:32:39:63:8f:49:e7:90:24:e1:a0Serial Number (int): 340640361893838773738912682593678914806176
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 77:e9:76:cd:db:d5:5d:bc:07:36:8a:27:11:ab:29:cb:ed:87:0d:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cd:40:72:64:cd:ab:10:0d:f3:3c:2d:b6:3f:85:37:58:3a:f6:e4:7e
Fingerprint (sha256): 5c:c5:aa:bb:8e:2b:90:01:bf:eb:67:a6:ed:a9:2b:49:0d:db:ba:7b:6a:d6:35:19:22:e4:77:3a:0b:43:00:18
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gaana.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gaana.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gaana.org
www.gaana.org
www.gaana.org
Other certificates including the domain name gaana.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for gaana.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISA+kNU1LmL/cyOWOPSeeQJOGgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTEyMTI3MDVaFw0y MDAyMDkyMTI3MDVaMBQxEjAQBgNVBAMTCWdhYW5hLm9yZzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAKGVZ44dNhVgHKzvhaJjbNFrvTRb85ynSV/nAZuy mf5eB3qAnB4+bw8qb7dONvzR4RqvxTVEkQZzlKDg/8g9BA3qeKznr7AJqucXRUiJ Bi1UA+9wEq7nZQy84plhIDfHBh6P3xafGEX3przDzUFyXXScRRZAcC9PbWKf2zTw M8m0YNw4m/MEYC+g+RE2cSEBSNOVgRWWKVExxJXibqoIE8eqIA0zyQ8AP4LuQ0Jn peAGVFldBoeeqpnZOvemNUCg2iiGJdEYHSLeHxtCcRoQXv0ibLeClaGUuJTE1jff Lj+MZ+xk4dS/6kA3az7eJS7M35ggG9L4i48hYPeEU5iFsbFT3yIx9jzP0mZJwyqg a1Ri4s6izG42zHGZwNWfICdPRdHmEiZaA9YbyPZ/1bQizziEs0OSkGjb6G2Xewt0 dQVtBBZ5hvHZ3gTwequv4ygtlpKWQWXWCzTu7jt0yFvTh1/7wkVsDohdvTRUeLcu sSsSS0pvfc5HWeNdJ92KZxEICUE8qBXWKlZ8tZzBC6J2MHwKzxdz9eOLDlCY1lUS AQbYMkfE/HqcE1zpEo6t0Jaqp1Ox//j9UUw5SasH9mMQiLDDIIeW9M5xH34gwkpJ cxd0jWymNXyF7+CJCJW55DwKaWtCuUZp5IaNlhHBdBnUkMbuMT4zKBWTAthBqpoS R/NFAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHfpds3b1V28 BzaKJxGrKcvthw3kMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZ2FhbmEub3Jngg13d3cuZ2FhbmEu b3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu XJPfJwAABAMARzBFAiBpFLI08FlbbWdiqADMaPV4q/fpAXtq/thU70xu6wdAOwIh AOXydqzx8UYHwcyFdS9mjBo4o4f0Wzaog19RsZ8V5nuIAHYAB7dcG+V9aP/xsMYd IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuXJPffQAABAMARzBFAiEArUXTrKOEroGe 6zyMdMA/NhrnHqgGW88pxtfzX0vnrGwCIHm6euSMiFhW07BEulFpABbMej+S7WAX +BQnXOs5GDSuMA0GCSqGSIb3DQEBCwUAA4IBAQBnExyzJyVSLuhIxwn8+JrM5OhM 6KG4SyRf05xDvvJJUhyWSF53o8Le9FM/M6gcmXYMR7BJsaIO3Jdqew9ql6yzQGrC NLZFlqsaY+Rype8mlusCiElTegMF/5uNOkN1x0o9tsn7psFAkfcvS6Dkb6YKmHoS NvWsnoPq2gvxCG8ws5aVwz5Lc72CAmXtpVRZMcKUEqQcRDKpyaJNlD9Qw44YCUy0 8PjiNGV6OEASZ+MCI9/phiaqzBkxE1lBNzcBXBwyVqIeuxh/q80d2GHvSEy3iZ3s SZus7KbdvHYENRoy9HcepUww0oDU7BAHI8o7pQZLk+B7OTI1qYcuOunpZVCV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoZVnjh02FWAcrO+FomNs 0Wu9NFvznKdJX+cBm7KZ/l4HeoCcHj5vDypvt042/NHhGq/FNUSRBnOUoOD/yD0E Dep4rOevsAmq5xdFSIkGLVQD73ASrudlDLzimWEgN8cGHo/fFp8YRfemvMPNQXJd dJxFFkBwL09tYp/bNPAzybRg3Dib8wRgL6D5ETZxIQFI05WBFZYpUTHEleJuqggT x6ogDTPJDwA/gu5DQmel4AZUWV0Gh56qmdk696Y1QKDaKIYl0RgdIt4fG0JxGhBe /SJst4KVoZS4lMTWN98uP4xn7GTh1L/qQDdrPt4lLszfmCAb0viLjyFg94RTmIWx sVPfIjH2PM/SZknDKqBrVGLizqLMbjbMcZnA1Z8gJ09F0eYSJloD1hvI9n/VtCLP OISzQ5KQaNvobZd7C3R1BW0EFnmG8dneBPB6q6/jKC2WkpZBZdYLNO7uO3TIW9OH X/vCRWwOiF29NFR4ty6xKxJLSm99zkdZ410n3YpnEQgJQTyoFdYqVny1nMELonYw fArPF3P144sOUJjWVRIBBtgyR8T8epwTXOkSjq3QlqqnU7H/+P1RTDlJqwf2YxCI sMMgh5b0znEffiDCSklzF3SNbKY1fIXv4IkIlbnkPAppa0K5Rmnkho2WEcF0GdSQ xu4xPjMoFZMC2EGqmhJH80UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340640361893838773738912682593678914806176 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 21:27:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 21:27:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaana.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659203621639099764496676274851311564298204312279058507856991183500684892672942913985575066851207816708094090966960893335778030936227661760660721284411675851399366700003932308920788654987365229463765917447220449442005901269606638155108841131315277189680976624064617445849951427442778114559725083414382623097628865510147634808760720680478616720813743147788487675389470550474636787157984340524439547174638639781108924979924195238010756725562664336370715262129576434305399330574794522553392502906084209443842641931624053838838765109240374793087500591637684375871879646317470178412240370934771714770775858061602607354056128664334818880335848518159042941662172045288554544092671393192548743805358964952382531235013880377342354023164292648032556118213069067409789628200732888208409302571177630198796250600442543837221572183531145897050609574476535562473613579266654443468845367695645071239681423585688873877007397053046989674110215985258956231552443879713937920621087682569674575761335165145281768233824141593445021892881421720779411864054310113145039203675266615509204193838047611544599246980565689534186056615277705426432426824652744808954670762736018896368404194523442529438249835918143289809638942416026224574142547563668593619468022597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 77e976cddbd55dbc07368a2711ab29cbed870de4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaana.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaana.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5c93df27000004030047304502206914b234f0595b6d6762a800cc68f578abf7e9017b6afed854ef4c6eeb07403b022100e5f276acf1f14607c1cc85752f668c1a38a387f45b36a8835f51b19f15e67b8800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5c93df7d0000040300473045022100ad45d3aca384ae819eeb3c8c74c03f361ae71ea8065bcf29c6d7f35f4be7ac6c022079ba7ae48c885856d3b044ba51690016cc7a3f92ed6017f814275ceb391834ae . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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