roomag.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:75:c7:b6:ed:22:94:43:20:fc:a0:62:9a:58:16:f1:cb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roomag.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:75:c7:b6:ed:22:94:43:20:fc:a0:62:9a:58:16:f1:cb
Serial Number (int): 316619157889240778717613155592624710021579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:95:53:4a:2e:3a:ce:cd:d2:6c:dc:e3:ef:98:a2:81:0e:42:1f:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:2a:4e:2f:88:ee:5d:d3:0a:78:b4:dc:93:9b:6a:4b:ba:61:bd:b8
Fingerprint (sha256): 6d:64:3e:43:0a:1d:a3:47:b2:99:5f:f6:f4:26:a3:b3:3c:fd:e5:8c:28:e2:30:57:8a:86:45:93:3e:fc:4b:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roomag.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roomag.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roomag.org
www.roomag.org

Other certificates including the domain name roomag.org

(limited to 100 certificates)
roomag.org
roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
roomag.org
angad.roomag.org
roomag.org
roomag.org
roomag.org
roomag.org
nanak.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org
ramdas.roomag.org
ramdas.roomag.org
nanak.roomag.org
nanak.roomag.org
ramdas.roomag.org
ramdas.roomag.org
ramdas.roomag.org
roomag.org

Certificate

The complete raw certificate details for roomag.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316619157889240778717613155592624710021579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 14:08:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 14:08:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roomag.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734381026527349025227393825337775549455613470785584339837549339929394565505871374844711823033829430398883057440690073486321401679090979139657190642559669569066412063793002990976092394900968004974097123808910193040928768006930676462436481659550785358845181931326939630524395813589476194131236384403765149703182325129006084902836623837415528594057533425049872006413803369552452487519430660127408001355524080558516981138704188906519591565949765424124866521414776001625615797005981789069364322210688430866100943387613762412407745625222000600872999220752245953526902979695971870190465062553806620180594732904570179110950567259640312768929847370797255607936120172943388508532072829230755946937445288290477837156427116735604005350868013988008056723284273952740549187972743484208820057675401532821759241262654581615784274325548149305783801964068606242693154614953468262572878555293344476472145816494176963422556916070050700081086857430508676806779123613303605714125195032793913532765954882936178561197662823683275550845374186659900167465523171936499664861816595494304188678652532968566567546215282249613653078370189627370815324781584875957707576616468246428251864988262066355758951153816651641641668965346244579644002037977699293528490635849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a095534a2e3acecdd26cdce3ef98a2810e421f45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomag.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162ceffdbba0000040300483046022100d1f108823948cafdf8841d2999b774868af5218e5d89c9a0e0ad6b06404f0095022100d5dd860969053427f17810c657a344569a34036ce978eacfb20b211cbd3d7bb8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162ceffdbd90000040300473045022076534c53e1b5fce3e3cdd5520bfa000bf8ae601455a5f9aa3516b79acd95ca92022100e0ada825f2dd6651a636887cd69be1c7786a29ddbcfb00c24fd2913e9cda0ae7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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