nema.khankhulgun.mn

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:e6:62:bf:02:e2:3d:5a:01:aa:7e:5a:bb:7a:dc:c1:d5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nema.khankhulgun.mn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:e6:62:bf:02:e2:3d:5a:01:aa:7e:5a:bb:7a:dc:c1:d5
Serial Number (int): 322553636632420100367927140536349338943957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:3a:8d:89:dc:40:8b:f3:99:0d:30:25:50:50:ca:ae:ea:69:7e:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:32:e4:46:92:84:c2:5a:e5:7c:ab:bc:5f:52:66:1c:72:eb:bd:a5
Fingerprint (sha256): 88:5c:c1:31:1b:1d:45:34:12:5f:4b:7b:df:fe:41:fe:09:2e:a3:3a:3e:b4:86:9a:cb:5b:73:cf:29:fb:a5:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nema.khankhulgun.mn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nema.khankhulgun.mn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nema.khankhulgun.mn

Other certificates including the domain name khankhulgun.mn

(limited to 100 certificates)

Certificate

The complete raw certificate details for nema.khankhulgun.mn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322553636632420100367927140536349338943957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-08 18:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 18:04:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nema.khankhulgun.mn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799437728724930744720697771392933609592368036714370083500430489788993059310415423563704516835970184805744737229239869543255531990705559684713297851264480525823552247002853045066097183489497959839446258834268336036247298822748092117071025200068702931809480864174048898592490811643845125359346450879375861119954583375821202891604394817590598402106595717871738341281009548474507645391057464548840168511567928015769626672920339431332368187823217866981663080087884425902363904789593825707782960494191303615523977692802595068568310061243448493499499356168345682887192493139057302255733757750605621719359171037947344475395906379804030650310594338151559189756128736625944428689598945425637649436953213153295586320622004954353640407882223842623477449951956133571979807108341683020916623829706200366611177239610021745562604412686734993102929510070478401264738147481245346806625560949970364500415871117416579639176443389497023508442627351585307310811274712703540998392464541694999996686388739211069337003158863422699489736314234557492761566877318448520581029030597707345047592434184068973070340986422510722556413639923789345747751261704947304784540986765790921590251656999108031549057180748531291430171679362438643513473465142212993633221041157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c3a8d89dc408bf3990d30255050caaeea697eb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nema.khankhulgun.mn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018762418b030000040300473045022100ab6c9ea347c10701c14ee1b580a4b68d922bdb99a852f2ca05cf025cc67b7f2f02204373f81008e17997734b08c060564d3226c9e78bd8aa071dbf23654dea9a5508007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018762418afa0000040300473045022100a58084a46ee37d0a1dfd3eab09d45f316d62875886667a24dbf7618fb4d926f702200e07b4fda71a2d922468c022f34de29a69accdfdea0cb74ac67ef2885e4a5e7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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