globaleaks.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:2e:70:87:b2:1f:7d:9c:37:ef:8a:d0:74:09:84:f5:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=globaleaks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:2e:70:87:b2:1f:7d:9c:37:ef:8a:d0:74:09:84:f5:c5
Serial Number (int): 315843765279922811434127082176787046004165
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:f3:9c:a3:c3:5d:5f:d5:d1:a2:96:f2:1b:67:d6:43:b6:94:11:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:f3:ed:9c:66:09:75:e4:53:0e:cc:5f:52:01:46:49:b0:a1:7d:26
Fingerprint (sha256): 5e:5b:72:b4:3f:c7:af:00:47:53:c1:9d:f7:ee:ac:47:46:26:0a:4f:b9:04:43:87:8e:7d:71:c2:7c:7e:b5:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate globaleaks.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globaleaks.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globaleaks.com

Other certificates including the domain name globaleaks.com

(limited to 100 certificates)
ordinedivendita.com
globaleaks.com
11840.com
globaleaks.com
globaleaks.com
globaleaks.com
www.globaleaks.com
www.globaleaks.com
www.globaleaks.com
globaleaks.com
bsadomains.com
globaleaks.com
www.globaleaks.com
globaleaks.com
www.globaleaks.com

Certificate

The complete raw certificate details for globaleaks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA6AucIeyH32cN++K0HQJhPXFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxMDIyMDZaFw0y
MDA1MDMxMDIyMDZaMBkxFzAVBgNVBAMTDmdsb2JhbGVha3MuY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu5VFFJVD227pKEpVI8BB86YWXTMW6ebK
wEzxER1r+l+7ecDOHygbssLYBBYVDCiBbm8F8ghqyV7DPzULSzNKxvSzK9OdFGIP
jX0bWaOErJOQ53JrmdBMxVcvmvhsFS9LWyjz/LoqIBgWQvV0TR7deykRdRvtiKVm
/TncE/9b2euRYuJiq0u0BgosOKdPhZhhTvo3qyUM2gGpyenAYrEQAABIh+2kmCqu
gonK0QMXAPtvRG7zEljPJvRFENHwTDecoSphZRFIWhoZxhQdb3EhsG0FmtQ6b7t4
TIdNnL2kRgCp8wXW1+Nq372c6OxBfINrhW2sVIjPSZrSWvL6QN3xu85CmJq8v1R6
O8H6pELsFy8sJ4zzNb2zvz5iTxQn2k3FrKzes50pM6bxwu6Thtfxfal/oWWPUiOu
3ixFM1YoornsJ7F0IVPflQuejmGAZ3f+i4ju/+cCyCPK5UKRfGm66dnVyYWOlwRF
SiQsr7LN4Z80w7w44h8wB1hoF3b8L5fx4O9CkE82xarY8JQAGUNnO93TDhhEm1VP
VZiaFgSg8yaOTaOamRJ1lTrzdxIuMXiLCc77SOgsAdaUIzVnIA3yzfsIX5kvTd9Q
7paRuaVg/kRutw+gnxDOmeNkw9RgmV/LUbFx1ZLQTPAu/NMFbkBCYJmW+9MDNng5
SyK3g+g6eYECAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUf/Oc
o8NdX9XRopbyG2fWQ7aUEeUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5nbG9iYWxlYWtzLmNvbTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcArJQJ8A
AAQDAEcwRQIgJ+pQNkOH7fsKnhPZ2wsBFaAM6slUXDE49h5Wb7F9kcECIQDtgNaf
9ZSkJHx950PsdaFrxZGP7MDFEANSTpUvQlmvcAB3AAe3XBvlfWj/8bDGHSMVx7rm
V3xXlLdq7rxhOhpp06IcAAABcArJQM0AAAQDAEgwRgIhANyUstDH/MOu/e1a9jaD
7gO4lxeguDHt6BsaeVHbHIgyAiEAmeCHF6l/EEoCdb8cASBCSQNEDfIb5Jx0KQTL
D29/CGUwDQYJKoZIhvcNAQELBQADggEBABOwWBPqCMMOg3srTA78zJCCR1CWCwti
ckUYyMxqZqgCE16ITVvSjFOfTmKWFIxN2pzk9xMlZPbW2FTWoz//2wQuwX8oTisc
DQXDEctpqQf6aGY23eXDbaiAd2Hrk1r8vOz3YwNfdqFGmg9LuELVmKIhbRjyoHqQ
rXajDvnNrAQA2BOE2lrZ6nA102r4w7BGXC5d6sbZayin4np56nZkSqJcRw+pAg3a
Uv24lflPEFJpkJtvbamhcqm3Dg/0Lr8g4jlnqSIuYNzGkcM6f81jRhGrTa5wkZZD
kWBwKCSfhPhz/aSLBC4mSfpapaG15b/GWi68vRvTCzAvZcSvEibjW3w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315843765279922811434127082176787046004165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 10:22:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 10:22:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globaleaks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765272221340876725425485345141738630620477200103759785593448954024602429835122177849334473539676310867564681422513789325018364732265657742019645997537551232943156343012518249456225596545070891812411372363073897841056142783058467371270666184526336757887912681447836610355654741630773680727374505505069847216369681416960300635849794021867378521374319077834551139993480919912000818420243410216416579788848763245714833942101470125791906989196947852265383927188823337095704482810744839969124971360798969797778555133527899676704066104695979920094467464821685556630715781719106337003448392382191944119212718201745684750831119962587815944857555871583574615990609263896077958988794926970004511539956922523126160493687308438110407804360137698949154697386366212936221811857352579566756911761495376371957501686848952717684251837134399559003083839317492911824971220228229504868989014185565539497908269335248428064356722214387421622046328430200027976154769113914121496306857238447253812532534830586135626227410914124488216968395282828364802114922807198407215522416579741393085593969480751657393193187162072662638306369079503744940245937601999160083737726234821315198756924930853738622572426981443685237669989518675197381169254503306265859980949889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ff39ca3c35d5fd5d1a296f21b67d643b69411e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaleaks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700ac9409f0000040300473045022027ea50364387edfb0a9e13d9db0b0115a00ceac9545c3138f61e566fb17d91c1022100ed80d69ff594a4247c7de743ec75a16bc5918fecc0c51003524e952f4259af7000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700ac940cd0000040300483046022100dc94b2d0c7fcc3aefded5af63683ee03b89717a0b831ede81b1a7951db1c883202210099e08717a97f104a0275bf1c0120424903440df21be49c742904cb0f6f7f0865
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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