ndjamena.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:a1:0e:d8:56:27:cd:44:b4:ce:d1:4c:e9:54:d8:2f:dc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:a1:0e:d8:56:27:cd:44:b4:ce:d1:4c:e9:54:d8:2f:dc
Serial Number (int): 328586566866009422619900644143232781397980
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:62:49:89:a6:fa:b2:09:8e:6d:b0:6e:be:66:3b:52:82:d8:34:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:4b:a4:9a:d9:35:91:db:b5:15:0a:f6:d8:77:9d:49:97:3b:fc:ef
Fingerprint (sha256): 85:64:8f:94:fe:e2:96:29:a7:7a:c4:4e:99:23:b3:cf:5e:e9:60:2d:fa:86:4b:58:e0:ea:b4:9c:f1:a4:a6:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328586566866009422619900644143232781397980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 10:14:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 10:14:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774193666576846190082044117990111239344549489852810510186961116248000319843960995791582235153428407031462088324761857356612310743872993980093230189368331227255272135714951638993583316663892615175542585673010534598355807491386985785567546076856517798288055433335080261146353336053047091901809247016179983215718237304119494307641577228259543836653445975683020940495868862712772532298681380344382546558413505149883366204610297402915542203293339619141359750268811989271267663011159766025046381013991865822931525208063505984121634217212408473943412478145973062218772634398364007566129767994983339184629493424775738682064886961330553710107147241003213762989057328352102465975545428306036909868344076576533320998182155408366159443183461711834941225438458929896464694575490809861715233239209802675981669509190496924228465063025893715015468488269669300449603409898823940305170308846207973229511692019078083293634678325297236355508201129043091209415428242448756673499691728669439898307367637621635195298030935762055856911546688737372050393574439811553543216530206499697336613361951364371352124252605409272492215650693561868152039450737679990684725349819344126896613522497006018138120894697225807817934754535549049725701420071095887324413701819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af624989a6fab2098e6db06ebe663b5282d83479
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c384a02680000040300483046022100c9fe09f6a803acd9d9b43940188860dab41bb7827439a524e27b1d10de55ec0b022100af0db60cc94c62a29a5baa7271edcb40587cb2f52c40feebbd748929f8a126a3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c384a0478000004030046304402204ae6de1ced0fdc421ff85669c7699c0be323bb6213005848617e576e2779e810022061e2edd2efad7094f4aaaff3f4d996b07d976979008020559e21e9117e5bd674
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00355146fea4542e90bddb137d11ced4af0114476166cc38c6b80747007fa5ceb3e202d7ec25eb5a88ccf0010d8dec073ade844936e9aa887b5f27573a4e4f8e51fea6f0225372701ad7881a2d2413d4a8441f939aece23f58820b462885f919e5321822e50f86811ea663a7e4cd3b5a493a887350335a76dbd8723e6bdc3fdb4d374eb2e67548885f4a5002ed316d48f9f71bcfbd03f985a3c9159435a4ba7020cba1881fc038fc532f445b422d23b299a7fb2e4b03935479a7cee0cb7c0f942c916c114599d4eb28b22b054a2f8844db356f6c9128666297df84c70b5fcaf89158b7fe6b2f27aa0e4d5b5cd91547aa88c68b2f426e66a97013239bd71539d4e8