gofr.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:91:65:e1:cd:ff:dd:78:53:51:80:a5:1a:e0:ec:73:71:5c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gofr.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:91:65:e1:cd:ff:dd:78:53:51:80:a5:1a:e0:ec:73:71:5cSerial Number (int): 310813225471349955822899308664308509143388
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 15:1a:a6:a3:b7:44:a1:9d:33:71:91:b8:53:9f:53:8e:ff:69:37:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a1:30:92:79:8b:8d:56:cd:45:bf:0f:7c:bb:e7:45:1f:37:81:22:60
Fingerprint (sha256): 6c:64:e5:ed:54:a0:d3:15:03:80:f1:58:6c:91:18:9a:26:3c:8e:39:4a:50:02:1e:ae:b1:f9:be:5b:b8:33:f3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gofr.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gofr.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gofr.org
Other certificates including the domain name gofr.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for gofr.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISA5Fl4c3/3XhTUYClGuDsc3FcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTUwMTI2MzRaFw0y MDAyMTMwMTI2MzRaMBMxETAPBgNVBAMTCGdvZnIub3JnMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA7hY/7Gwx0twKrHckz+SoDTLyAlX5pGTkksnH3DTe TAPeLzaqnL6/2vsfr75xPK0Y+xaOR09JBDP/QBW8skZ2dHLSRm5EOoDd/rzY8SEw 79tzOLGr842YV91mfiKF0v+2cK0SNdj+G9L7IFIpVQNHnzjN/pHZtvP3exDa9sUS gPfDQ9UeJ70zGxs2SXj6uWjlUGhEwLi5qYIH4c9HSfNpF/FAYO8MwW59HcHDBaAd t0o9ewie8NoRWjo+9Bg8xtYbSD3Ep/AAFTkP0mUTGTSTWoiz18pU2sTlPRkMp91b 8Jm8wevAbN4pKO3I5qIgHc2nVBuDggWpKaPYZ/XmhLbeCQR4vAyKd1lzs9FRvrZg SbLybCe6LzUwAMByX8gIUv9emE4hQyZtalddWZxgJlbShOep/dz/ZPXJuw3cYFa9 pc1aZSxFJpT5F8XGqVbNwGPVzVnJcGCsoVADZlAujzvtUvdmZkseNv9XLUp36+LC 6mKYmzrgAg5ma7L9Gr7cj01dmXtmorvXnDDbH8lNjCvio1UMrYACshYRXdyADjUx 2v+8IFmJ5XZJ3fXKlxEV6o/aGtfddoG2YqTTbNI6Y0zyyAJrwep0pkjVKQ0BcxCU BRPiMSXyCiIuskxrImLS8u4iTE1LnFoUJlrQU8oLxAzqWlvg58mxBcihQuyw6p5M BFECAwEAAaOCAlswggJXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUFRqmo7dEoZ0z cZG4U59Tjv9pNw8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghnb2ZyLm9yZzBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AF6nc/nf VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbmziNNwAAAQDAEYwRAIgFCva LhO4DUzOBJJ0Q/tgTkHdHYKxahZY5VGN/oE8FsECIHCjdDIwoNGBumVfzatt+1it rti8FR2uEytNSCWRHqwRAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFubOI2ogAABAMARjBEAiAh/ffmzhiHhxEULlY1qpOR9FK7oGdQWZq/ZB2h nVUdkAIgXNML69UGsjMjgNQ9NHujlCmxjq9raaxGjaSEna8ia1MwDQYJKoZIhvcN AQELBQADggEBAElHXdyeRXX11NKWlqv46OKacyuIz8R/vDI75PnbKkLqJzp27bnF eOMPCFDmXzuuBflvWBIZ3WzVNGA7Qrv0m+xiaCBnH/dghhLs4/MP9HmQApfxqrZE Pd4K1NTg5otbtY1xwABtc4OECTAgzbdLxEc5qiJ0dKkofekZS+Qu+bbBg3BQ0cfS zLHGJyOfuqaJ497+lV7ASiPFWZlTZe8VrUn3FaBSIUr5hBH86xCzCctoyVh2TQ/t +zPzPv5MeaEgYrc0pq4FkFV3HfrrvYpVt+iiZ9AgWuVVMkDaq7z6iROtlcV9OVbX Zss4c5KFft/Rh+TAV+qpO8k9PQ55biaQalE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7hY/7Gwx0twKrHckz+So DTLyAlX5pGTkksnH3DTeTAPeLzaqnL6/2vsfr75xPK0Y+xaOR09JBDP/QBW8skZ2 dHLSRm5EOoDd/rzY8SEw79tzOLGr842YV91mfiKF0v+2cK0SNdj+G9L7IFIpVQNH nzjN/pHZtvP3exDa9sUSgPfDQ9UeJ70zGxs2SXj6uWjlUGhEwLi5qYIH4c9HSfNp F/FAYO8MwW59HcHDBaAdt0o9ewie8NoRWjo+9Bg8xtYbSD3Ep/AAFTkP0mUTGTST Woiz18pU2sTlPRkMp91b8Jm8wevAbN4pKO3I5qIgHc2nVBuDggWpKaPYZ/XmhLbe CQR4vAyKd1lzs9FRvrZgSbLybCe6LzUwAMByX8gIUv9emE4hQyZtalddWZxgJlbS hOep/dz/ZPXJuw3cYFa9pc1aZSxFJpT5F8XGqVbNwGPVzVnJcGCsoVADZlAujzvt UvdmZkseNv9XLUp36+LC6mKYmzrgAg5ma7L9Gr7cj01dmXtmorvXnDDbH8lNjCvi o1UMrYACshYRXdyADjUx2v+8IFmJ5XZJ3fXKlxEV6o/aGtfddoG2YqTTbNI6Y0zy yAJrwep0pkjVKQ0BcxCUBRPiMSXyCiIuskxrImLS8u4iTE1LnFoUJlrQU8oLxAzq Wlvg58mxBcihQuyw6p5MBFECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310813225471349955822899308664308509143388 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 01:26:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 01:26:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gofr.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971309861867751578078696790694353954922040019221812479444745994441834769205545873257775096845238402386872216877393834130983561477053550037580190183729481229902727163189922631286347436059009283538534093108544347483555126748548935632867651334625537195793393003285307148146905811583626326458031420793250655600157248811466456314666277139102708586587697090414729301269717888654461992316661739926065370283356962827510256444290504323188637659645950392163547315579282265953338166234170202716647048910982745522515859912723757573065007188920145844214962330406518942374677952403469066088923366545844508260692052575951350335026522032159607568212462275014717649573785749257320610298190817747113414440268382617070707167778274040839763475033463114354637392415824401167489483293933700266722729968160724038425335610134246006006324762535929149970372708327583467663123944653763712350726798068877040623191035337977151969932150876943245358097009964194067416166670589898933866473197946033652570191675649431253637808955067804223295050335847330693132966393143486860447086020261308192372144820050884406494671171807560137238806822275319369894600481464830244220386892071589572129794486541194904194223858915345500614661313620523027026280791380896461932972475473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 151aa6a3b744a19d337191b8539f538eff69370f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofr.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e6ce234dc00000403004630440220142bda2e13b80d4cce04927443fb604e41dd1d82b16a1658e5518dfe813c16c1022070a3743230a0d181ba655fcdab6dfb58adaed8bc151dae132b4d4825911eac11007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e6ce236a20000040300463044022021fdf7e6ce18878711142e5635aa9391f452bba06750599abf641da19d551d9002205cd30bebd506b2332380d43d347ba39429b18eaf6b69ac468da4849daf226b53 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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