app.cafsa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:c9:8e:8e:bc:6d:39:98:33:35:31:c4:5f:d4:27:60:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.cafsa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:c9:8e:8e:bc:6d:39:98:33:35:31:c4:5f:d4:27:60:12
Serial Number (int): 311966563127917174333233519676163673776146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:18:06:b7:15:fd:4b:a0:cf:5a:c1:05:cd:9f:b9:71:62:8d:28:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:f0:ab:51:1a:cc:07:5b:58:73:4b:1b:a6:97:fd:6c:48:53:28:f0
Fingerprint (sha256): 68:db:e7:68:32:9e:b9:42:59:2c:60:e1:c5:1a:60:40:7a:53:99:79:d1:39:3a:96:11:71:89:ec:0d:27:53:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.cafsa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.cafsa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.cafsa.org

Other certificates including the domain name cafsa.org

(limited to 100 certificates)
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
cafsa.org.knechted.digital
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
cafsa.org
app.cafsa.org
app.cafsa.org
cafsa.org
app.cafsa.org
cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org
app.cafsa.org

Certificate

The complete raw certificate details for app.cafsa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8dO31Qq1chjFtPRVqUwB
sjK6ZemlXaKb1utr6ND3JAbWUGDcA2UlScBxpZ66DWtNWih4SbwYmS/nuLH6J8QX
LoUKi6hZ/x3Dq2CjL1PlXzXbBPuwHzAfAK0xeS/3N/4hA3B5llUs6Nq4Ii5A9G6t
D3Ak2PFLI9stG9ddgTQIooz5FDTG/yOR/pvQ4AGAl410QjYTf4F0z1Ev+viW2Zk6
7X/ltWYAnWuEa+cVatZd+Rb+3r5ZHhH62dP8DRDdPmQoExvyiQAUwzYLXmHCb3C2
/CWqciOas0+/SJnSt9x6z8Pw8gMZH9Z++FJ8Z3fWKbLAOaqU2O4qSm07pdlfbY9S
dHIQTzdAwN0G/O8Ts3dCvZdrcRsbXEcSYhljHvyJ4rmCAJjGbgx6MI/1HgfBpsIi
LxQkQtp44lAbCkHWpR0x5VOr6Gt61+EkEbeJ989hnzMvnN27VzeK3HF5jP2ENlaK
rlBCWlSPksCJ1lAzxdO4EjHBAWsFZ6t42AbnDhTzCmovzZrzV3bZp1pHErstLq2J
0yPTUH72L4RciH+Z19GUNDhUsXiFnDVwrsDUbI2b3kwTjxJi14/D7sVVtW7g1Zw4
bNVWuNk76iogv+MZsBHU1IzxgkTOhitPeQSMl5zXFiNI3t4CnuLe7m4C+XVPl5W9
nANWzInooGTFfH445jX4l40CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311966563127917174333233519676163673776146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 08:47:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 08:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.cafsa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 986568183159888596229469789246670330404975525857434873385011173831840295385877800435395280925035379792448199569987052188827744076659256699785670984574794822544300235117169509616876989764929168023461022913658225167127206279622122962447354845785591327960175841698699077412789294331776762965030678866705973881717451895701483085566953236589918890736011327864334501239401391705792257247444985601724139752725718979397018655864172107818044422405186993408057373600631888984459130329248382123552255330765422678918754162321026083928524850475824141749165635494295280734683142390412226879471563257150403761197692656096612930331591327071668216266110320963709677994690367273001753601256970198357696137724598589473473557034615488803712018525696991287148228743517705664373618645293403336350637232000796015312866186548086874413652523152591871497125833482712087557828099643411026238553841947443072367649078137758398058534045523751194979380828009175559357605599206654075389128295368130554652171171700717478617614400750670494262162500042648735502128834149324163673086502983453238138175041361420434794890518449151498761636836900232001673839923911535351089247750583988127498426651346690399777449928653363125412195474145533401753160235150238051429212788621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							741806b715fd4ba0cf5ac105cd9fb971628d28d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cafsa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164c6895a2b0000040300463044022078709bba0637213b77780fe035723bb4ee73426a4352044817f8c88022b6a970022006f8f7cd47dac3b1a68ca61c388a79965f0ac0c2c33b9ace0682d0ed2fec5adc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164c6895a3f000004030047304502202fd625bf7a299cd4e8edf9c55a5978466ad00272e0f0a43bbad3d39fa80aeec60221009c68e1cef4907aef345dc65a454cff575b63b8f1ed1aa92f85910bca93630f81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00203dab9488a65436263fe9046f9e8639c2e2ad65cc4b4e8a9fe330dce041d67950fcb3b7b71b8b02730ed1e133119f2fb5a20c49a3be1e69be1663f98632290b43be5e6f6d0e546d41d8b8ba2a5dfa3b5ee651106f53f6c4c007f52d66e085388c9360f616dd0ea179aedbb9ed3486f582966f97b113247db9d309ac276c75b55f43eb24561124c1da7ef3bcb402e3e0c186dac0d3f9a850bf78acfe8c4183cc27814da0255038f9d9d3a28db36c4a7542448781cc8337f1d6f2e932805c0569f9c25a6a4d8eaaf96b1fdbc6388118bb39fead066de6039623354afb228123e5be5e69b3dac87b169a4b5e1ab25c5ee7af1b4050722058fcc50d8ddc8c7a8ab3