menastay.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:41:22:dd:98:c3:95:11:4f:e8:88:fc:8d:c9:80:ce:25:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=menastay.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:22:dd:98:c3:95:11:4f:e8:88:fc:8d:c9:80:ce:25:0e
Serial Number (int): 370613841924786295689093813999775565882638
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 74:3f:7e:03:a6:21:8d:45:55:58:ae:fb:1b:47:52:cc:3a:b9:2a:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:2c:7d:0e:c8:8b:67:41:4f:9f:a7:61:a1:23:21:77:96:10:f4:02
Fingerprint (sha256): 5c:ea:1b:80:94:fd:98:61:90:f8:f0:f1:90:06:e8:40:53:e1:85:04:21:2a:8b:5a:be:09:8b:c0:2d:52:a6:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate menastay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for menastay.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

menastay.com

Other certificates including the domain name menastay.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for menastay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370613841924786295689093813999775565882638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 10:24:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 10:24:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'menastay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889028901656012291028601149308984553764583391556649299347974687154247549289854693422933876131100484125241179438962422679956489813374784570928829294252205593747735021153093777171585826658422152066512705315517208483815188322086847170895657261200652982125156638640943953612877601828680373711734979889634078864990802601738967828704327543056262586606424794814375051684254397377297115230052844890161815660651587244263709778022967670277133475997395451097492726328487954757889827761787940012667443158394365395414880330781968317208400975530502882160121768055798651518941228524810449831962276437985424522494398286385270305086347230355867793550637696046969561645405673291010573397182553999815172817880384158028352630594912896758752256679042551066028831216324608697605220211409867365403463232976816127887637500632976280791882465564061066242952999814835768933136448304486868577430354378093917588531762903544337694903502134327291502504407507739523233452476020524807041361148811687419916376546429258420069130885910284742899749513602721086481702120796026330930188160946483642320867204420402576954096535972078800449634606195291688565244049675173845633982212726778812101694069753856777039058907579263301858876980371545493961545757677638586253894809191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							743f7e03a6218d455558aefb1b4752cc3ab92a69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menastay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd976a2f50000040300463044022048c4fb4b298ea113e3acdb315c3d992051e5a863454387b9ad84dd8fc69ec60d022053052ca89a6d914f493e20dc0940bb8611fb970fd1528eab36634f757010245c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd976a3280000040300473045022042916c4949ff4b9d164e59534dada0239c211a72239ed5b8378f6bcf4fbf8965022100eea1b18b0266ba1971445e9b207ba1a85b23f6df625037f87b639869c0472e69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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