www.sanarica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2b:43:b9:a5:02:2b:ec:9c:3e:cb:45:b9:bd:55:9d:95:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sanarica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:43:b9:a5:02:2b:ec:9c:3e:cb:45:b9:bd:55:9d:95:9c
Serial Number (int): 363171307702047393649333951639300891055516
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6b:24:41:92:4f:c6:9e:f7:46:53:54:85:26:0c:29:d8:ad:0a:b8:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:82:8d:83:f6:60:3d:e4:1f:e5:49:09:9b:9c:d5:b6:04:70:c8:55
Fingerprint (sha256): 5d:b0:f0:58:9d:ff:83:ac:c6:90:cd:25:6d:42:1f:f5:78:da:30:14:1a:bc:4b:b0:0c:7c:30:1e:0b:2f:f6:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sanarica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sanarica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sanarica.org

Other certificates including the domain name sanarica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sanarica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363171307702047393649333951639300891055516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 16:33:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 16:33:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanarica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852337338012903549134457296068026638335888521940156984234262057943432546551854971988781199043189281239652239874252459141074513048970987765485928008468605825192600470511622470708267469534118404071213773434267392267629544388466088349142872308299633777617277009545903816650540048823533936863843728387497193948002327531150544913671826561111701068663807755634436417098865457547693882663336143212555977999993731013559207221832225780181531230253557836495756239068416290350773624212665530893358350072602261635409476130321477236307603973277337821467217852520127461208913745044303864489408675169857571668041672185548263767615878561593457178116232283343826865139547723613621507967301407410486633880430109553552422396636876523520037026729239881918628641609786608405523350191529054612695623073619592823215142114098191626744764827507449873821434864884563412099180664621305524659116834154226743589995670962445054882753444552267650847136419009301128939282181132090940197477721032215046311318757823779475686403249049030502249631366599837499074958541032653270505051229038682639205149211793650640494527541731979554048712926899754243058955499137466811601266921834131576689337465667579225321453830063123651074235812699153697727244401170232557639595417507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b2441924fc69ef746535485260c29d8ad0ab884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanarica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed1f99a550000040300473045022100ec94e82e06b33e329c972a2a001bc480a2c3b5c64f7ce4680f8a704f60f04328022035bed89aa919280208152afdf765f14769dd0c951481c463e52b1099ff0454d100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed1f99a67000004030047304502203f675fe011245bc93773777b43e2bcb89483590fb2cc5b585275648ab7bb09fc022100f935f51c624a98c2fc6c575772a4ab7e73995b1027a11006dcc73f798ea77173
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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