www.ndjamena.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:51:e8:3d:8b:85:a5:63:c5:89:f4:8f:52:76:71:2b:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:51:e8:3d:8b:85:a5:63:c5:89:f4:8f:52:76:71:2b:eb
Serial Number (int): 289689167578529452535506163580182503435243
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:c2:2a:f4:88:a5:f2:79:cd:63:c3:9f:e9:3b:c0:66:eb:17:44:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:e7:72:84:4b:b5:4a:a6:e3:5d:37:5d:6f:a4:fe:69:4c:8f:e6:33
Fingerprint (sha256): 7f:4e:ee:01:36:93:70:9e:ec:30:2f:2a:68:19:ac:2b:fa:d2:25:65:3b:57:6d:ae:21:71:44:cb:1b:a6:ac:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289689167578529452535506163580182503435243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 22:52:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 22:52:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767506083120988280777594228611096446697765126313191703712328402394614271596742586621847014302489142676079810762418807185674923126305428386910036086217292120590543588175330162261510845175304282591575778205303707043673569614926526710325648044299699346330537227857082930652428556809798630800269668003666269506073270460172435342891280085690252210617826538904938857489945576636662922141477676702703137356718375816912010416634724462436650698968745802913149095624377820205703287742107699177787330006932024393166963460025972750029911771532766609421508282625564437569156727960657224490329063561953827478731370014645964505782127681709269560451521345585578952453399401938811469224806057244653981538192020995739130228505579270704486480919969559030906593912869969491272618188433139957923147804732566332005354344771628967948369529489198183311037899135403400569338217576252116984899365071810954829330615501496912799185284691984694922720406325267108334947049122166131517751543047802773152069508341419387945388328362426096551472315644767461978315676577365770594700815194796202058568642112367580656463164252541383306467136054318626904817157694216937453140782868741724698404117742948746257001343868050604048021048761587786409916472238018807157862478189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac22af488a5f279cd63c39fe93bc066eb174430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7f70a1600000040300483046022100866477e5c19bccf95658f6914d651e4704df3a45b763f357ab9e5721fa8f19ff022100ee7e55651fac0c21ae352e18e44514ef035ce99895c9374a911b87562365dbef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7f70a133000004030046304402200e425718ef14a58fa4603c73c9a796e6a38e83a82d2290d3616601dc6799bcad02201a21ab971ca7abb21b07ea7792df27c2537ead8c2b03ac5fea7b715d884dc57b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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