santelena.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:89:f7:34:2a:70:37:d3:82:0e:dc:3d:2d:09:ed:b9:ca:88 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=santelena.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:89:f7:34:2a:70:37:d3:82:0e:dc:3d:2d:09:ed:b9:ca:88Serial Number (int): 308284132238596862394035587017514199665288
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d1:ef:ac:e5:4a:65:b9:08:bb:d6:c0:45:c2:1b:b1:01:57:84:c9:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0a:69:d2:cb:0f:f4:ae:80:7f:ec:75:82:fe:45:b8:26:f6:ba:ce:35
Fingerprint (sha256): 60:c7:39:14:14:58:f9:60:98:32:2a:19:7c:d8:f6:f6:55:f6:19:38:c2:e3:88:66:ed:b8:8c:26:63:b5:a1:33
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate santelena.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for santelena.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
santelena.org
Other certificates including the domain name santelena.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for santelena.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISA4n3NCpwN9OCDtw9LQntucqIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjQyMjE0NDZaFw0x OTA5MjIyMjE0NDZaMBgxFjAUBgNVBAMTDXNhbnRlbGVuYS5vcmcwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDJwEIKDLIOYPBc7FWpDxW1u97b3KOhpyZX I1KHWcTLrgX2gaTBl06b5Ghdl4SjsyM/Wlw9cZ7P2DGLNeqB+g+PmGT8EM5E+oly miCVIVHq35zKfyr3FB7MJ4q0mPdZE4zCISgFgZuYQsAirgZJWRDGkY+q34aCYHBE QaBdvBvrAqzYz53/CE5EIy9/87OiqozyP88JwiFyDRBoOKXA73PAORzuf2AzDzVW 2GmsmA5zFyPU+Ynw+Uhqil5ioKtm9r6NHQ2BmoXkXRjXtzY3jCfuHujkZgEhEqcJ 6dSVLJar4+INLtCWe6cj87p9ZVFZArMcVsz1ixXbHa/bGr9hNXlZqGMfoQxniCyW Iq6okTl5zpaYMzc8V27yL4V/hPRPluo9ns/nZZzkYWpAC31BxF6xZDWe8iTAB76L 1FF6rbXxeSTnF/91TSRLEf3japYbcz0vXRuCAeiu6Ma5sDl7FK5DW4lLM/nMR95A ycCZNfKtIRcAH1oQjd9pKa5fx/rmOowOcn/nMWiwvTWQjoVtMno6cElRcgimwWXI 8hKSQwDiINv/dnZLKVBUSBKAExZurPLk1WCb0tsIKypDGuptoxD5p+L00WPYnHJS wEcuTw3wsgDGEIWsIw+Dib4C/mhrwaHYJ6+4vUlL9G024BFQV4A7uGdy38yoPzRO manUZLEBzQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTR76zl SmW5CLvWwEXCG7EBV4TJPzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXNhbnRlbGVuYS5vcmcwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWuLxTfoAAAE AwBIMEYCIQD0ofRkv340N/hdqSHN+z+jM8ZQtjjOTDh9uficMGKQOwIhAKNoIZly XXTIZcUjOkyQtu608VW0oKGXxi55fKalbSCBAHYAKTxRllTIOWW6qlD8WAfUt2+/ WHopctykwwz05UVH9HgAAAFri8U3tAAABAMARzBFAiEA0Z/Ynkk+e5PYJWT7RIJI XeKCNVliqBTluH8pARSIN20CICu5kpi11KNHs9YrtFfmN095rs6q0tstJXtoHddG Y9y9MA0GCSqGSIb3DQEBCwUAA4IBAQBU0+INwRmRV/QYqZwmh0l4WMzhna3XMgu5 YegqAn0Mj9YpAujJuMKIyUUIiBqK2ST6vAOHmbTIES8FzTDfhuSEA6I+0v0q2qMf LhQk5e80Utk/2rAclAP9Gh6hG1rQi8Q42AHrSbjNGlVfZP9AeEJCxneE07mV9q1m AzCxa7i9gCeqUwgNvf2sIVJZ/CMxhgXWwGtfF7GZ7hJgBWmODwQqQMEnKYcMdqcn iESfbnhGIjUazacv4vTRkM30Y6v5YJfSIF3J12NVSp2+IShQWiCChi+nAyqLZzZ1 i2375CjdGbdp1oxHcGi8W7EfXihC4zkOBde0sOav4Uxe6oVMBbD2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAycBCCgyyDmDwXOxVqQ8V tbve29yjoacmVyNSh1nEy64F9oGkwZdOm+RoXZeEo7MjP1pcPXGez9gxizXqgfoP j5hk/BDORPqJcpoglSFR6t+cyn8q9xQezCeKtJj3WROMwiEoBYGbmELAIq4GSVkQ xpGPqt+GgmBwREGgXbwb6wKs2M+d/whORCMvf/OzoqqM8j/PCcIhcg0QaDilwO9z wDkc7n9gMw81VthprJgOcxcj1PmJ8PlIaopeYqCrZva+jR0NgZqF5F0Y17c2N4wn 7h7o5GYBIRKnCenUlSyWq+PiDS7QlnunI/O6fWVRWQKzHFbM9YsV2x2v2xq/YTV5 WahjH6EMZ4gsliKuqJE5ec6WmDM3PFdu8i+Ff4T0T5bqPZ7P52Wc5GFqQAt9QcRe sWQ1nvIkwAe+i9RReq218Xkk5xf/dU0kSxH942qWG3M9L10bggHorujGubA5exSu Q1uJSzP5zEfeQMnAmTXyrSEXAB9aEI3faSmuX8f65jqMDnJ/5zFosL01kI6FbTJ6 OnBJUXIIpsFlyPISkkMA4iDb/3Z2SylQVEgSgBMWbqzy5NVgm9LbCCsqQxrqbaMQ +afi9NFj2JxyUsBHLk8N8LIAxhCFrCMPg4m+Av5oa8Gh2CevuL1JS/RtNuARUFeA O7hnct/MqD80Tpmp1GSxAc0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308284132238596862394035587017514199665288 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 22:14:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 22:14:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santelena.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823072301695043772875464285603310747410965593856864206627044180777642912294369965115422284657079672219439310264099194797236903265770389560244054888675798775383293926134203346691996330217817323012695081585242949947985470103329289813890574769563286085865061416875140493851062679369083949062262228450029203710633910815065833457708966282578524559512971983610513489895226620528301521545177938315359600923862634883466680851551381980869453507495696770441375541110995168260730317424551467590467479146695515502045478041481881827941091707636763609585207837506791893231091413181756783507791518340503824261038579813126161884766416094195520971608646840484808145188155810544114414246089816359404622459066142979162003732534162379340483852130030107706203803011830122733006823071444323754512512788116273192388108192478115022904934936957915220065922418401831587273705337470740218245034357498303251902715853509701676046832035593551749016876702429584671179723968019290361426545815581852808272390099811513931416303589712530868213072796416317593811694215563739591257826492805177078809097379545292760380360860078444349176019685920735326402765208700846961966165842360743056109695610808460462972943728201187355043938518666708118412970828441834981989565923789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d1eface54a65b908bbd6c045c21bb1015784c93f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santelena.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b8bc537e80000040300483046022100f4a1f464bf7e3437f85da921cdfb3fa333c650b638ce4c387db9f89c3062903b022100a3682199725d74c865c5233a4c90b6eeb4f155b4a0a197c62e797ca6a56d2081007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8bc537b40000040300473045022100d19fd89e493e7b93d82564fb4482485de282355962a814e5b87f29011488376d02202bb99298b5d4a347b3d62bb457e6374f79aeceaad2db2d257b681dd74663dcbd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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