gofr.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:65:e1:cd:ff:dd:78:53:51:80:a5:1a:e0:ec:73:71:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gofr.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:65:e1:cd:ff:dd:78:53:51:80:a5:1a:e0:ec:73:71:5c
Serial Number (int): 310813225471349955822899308664308509143388
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:1a:a6:a3:b7:44:a1:9d:33:71:91:b8:53:9f:53:8e:ff:69:37:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:30:92:79:8b:8d:56:cd:45:bf:0f:7c:bb:e7:45:1f:37:81:22:60
Fingerprint (sha256): 6c:64:e5:ed:54:a0:d3:15:03:80:f1:58:6c:91:18:9a:26:3c:8e:39:4a:50:02:1e:ae:b1:f9:be:5b:b8:33:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gofr.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gofr.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gofr.org

Other certificates including the domain name gofr.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for gofr.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgISA5Fl4c3/3XhTUYClGuDsc3FcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTUwMTI2MzRaFw0y
MDAyMTMwMTI2MzRaMBMxETAPBgNVBAMTCGdvZnIub3JnMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA7hY/7Gwx0twKrHckz+SoDTLyAlX5pGTkksnH3DTe
TAPeLzaqnL6/2vsfr75xPK0Y+xaOR09JBDP/QBW8skZ2dHLSRm5EOoDd/rzY8SEw
79tzOLGr842YV91mfiKF0v+2cK0SNdj+G9L7IFIpVQNHnzjN/pHZtvP3exDa9sUS
gPfDQ9UeJ70zGxs2SXj6uWjlUGhEwLi5qYIH4c9HSfNpF/FAYO8MwW59HcHDBaAd
t0o9ewie8NoRWjo+9Bg8xtYbSD3Ep/AAFTkP0mUTGTSTWoiz18pU2sTlPRkMp91b
8Jm8wevAbN4pKO3I5qIgHc2nVBuDggWpKaPYZ/XmhLbeCQR4vAyKd1lzs9FRvrZg
SbLybCe6LzUwAMByX8gIUv9emE4hQyZtalddWZxgJlbShOep/dz/ZPXJuw3cYFa9
pc1aZSxFJpT5F8XGqVbNwGPVzVnJcGCsoVADZlAujzvtUvdmZkseNv9XLUp36+LC
6mKYmzrgAg5ma7L9Gr7cj01dmXtmorvXnDDbH8lNjCvio1UMrYACshYRXdyADjUx
2v+8IFmJ5XZJ3fXKlxEV6o/aGtfddoG2YqTTbNI6Y0zyyAJrwep0pkjVKQ0BcxCU
BRPiMSXyCiIuskxrImLS8u4iTE1LnFoUJlrQU8oLxAzqWlvg58mxBcihQuyw6p5M
BFECAwEAAaOCAlswggJXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUFRqmo7dEoZ0z
cZG4U59Tjv9pNw8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghnb2ZyLm9yZzBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AF6nc/nf
VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbmziNNwAAAQDAEYwRAIgFCva
LhO4DUzOBJJ0Q/tgTkHdHYKxahZY5VGN/oE8FsECIHCjdDIwoNGBumVfzatt+1it
rti8FR2uEytNSCWRHqwRAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFubOI2ogAABAMARjBEAiAh/ffmzhiHhxEULlY1qpOR9FK7oGdQWZq/ZB2h
nVUdkAIgXNML69UGsjMjgNQ9NHujlCmxjq9raaxGjaSEna8ia1MwDQYJKoZIhvcN
AQELBQADggEBAElHXdyeRXX11NKWlqv46OKacyuIz8R/vDI75PnbKkLqJzp27bnF
eOMPCFDmXzuuBflvWBIZ3WzVNGA7Qrv0m+xiaCBnH/dghhLs4/MP9HmQApfxqrZE
Pd4K1NTg5otbtY1xwABtc4OECTAgzbdLxEc5qiJ0dKkofekZS+Qu+bbBg3BQ0cfS
zLHGJyOfuqaJ497+lV7ASiPFWZlTZe8VrUn3FaBSIUr5hBH86xCzCctoyVh2TQ/t
+zPzPv5MeaEgYrc0pq4FkFV3HfrrvYpVt+iiZ9AgWuVVMkDaq7z6iROtlcV9OVbX
Zss4c5KFft/Rh+TAV+qpO8k9PQ55biaQalE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7hY/7Gwx0twKrHckz+So
DTLyAlX5pGTkksnH3DTeTAPeLzaqnL6/2vsfr75xPK0Y+xaOR09JBDP/QBW8skZ2
dHLSRm5EOoDd/rzY8SEw79tzOLGr842YV91mfiKF0v+2cK0SNdj+G9L7IFIpVQNH
nzjN/pHZtvP3exDa9sUSgPfDQ9UeJ70zGxs2SXj6uWjlUGhEwLi5qYIH4c9HSfNp
F/FAYO8MwW59HcHDBaAdt0o9ewie8NoRWjo+9Bg8xtYbSD3Ep/AAFTkP0mUTGTST
Woiz18pU2sTlPRkMp91b8Jm8wevAbN4pKO3I5qIgHc2nVBuDggWpKaPYZ/XmhLbe
CQR4vAyKd1lzs9FRvrZgSbLybCe6LzUwAMByX8gIUv9emE4hQyZtalddWZxgJlbS
hOep/dz/ZPXJuw3cYFa9pc1aZSxFJpT5F8XGqVbNwGPVzVnJcGCsoVADZlAujzvt
UvdmZkseNv9XLUp36+LC6mKYmzrgAg5ma7L9Gr7cj01dmXtmorvXnDDbH8lNjCvi
o1UMrYACshYRXdyADjUx2v+8IFmJ5XZJ3fXKlxEV6o/aGtfddoG2YqTTbNI6Y0zy
yAJrwep0pkjVKQ0BcxCUBRPiMSXyCiIuskxrImLS8u4iTE1LnFoUJlrQU8oLxAzq
Wlvg58mxBcihQuyw6p5MBFECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310813225471349955822899308664308509143388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 01:26:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 01:26:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gofr.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971309861867751578078696790694353954922040019221812479444745994441834769205545873257775096845238402386872216877393834130983561477053550037580190183729481229902727163189922631286347436059009283538534093108544347483555126748548935632867651334625537195793393003285307148146905811583626326458031420793250655600157248811466456314666277139102708586587697090414729301269717888654461992316661739926065370283356962827510256444290504323188637659645950392163547315579282265953338166234170202716647048910982745522515859912723757573065007188920145844214962330406518942374677952403469066088923366545844508260692052575951350335026522032159607568212462275014717649573785749257320610298190817747113414440268382617070707167778274040839763475033463114354637392415824401167489483293933700266722729968160724038425335610134246006006324762535929149970372708327583467663123944653763712350726798068877040623191035337977151969932150876943245358097009964194067416166670589898933866473197946033652570191675649431253637808955067804223295050335847330693132966393143486860447086020261308192372144820050884406494671171807560137238806822275319369894600481464830244220386892071589572129794486541194904194223858915345500614661313620523027026280791380896461932972475473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							151aa6a3b744a19d337191b8539f538eff69370f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofr.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e6ce234dc00000403004630440220142bda2e13b80d4cce04927443fb604e41dd1d82b16a1658e5518dfe813c16c1022070a3743230a0d181ba655fcdab6dfb58adaed8bc151dae132b4d4825911eac11007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e6ce236a20000040300463044022021fdf7e6ce18878711142e5635aa9391f452bba06750599abf641da19d551d9002205cd30bebd506b2332380d43d347ba39429b18eaf6b69ac468da4849daf226b53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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