loredana.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6d:80:92:f9:98:ef:8d:13:40:7b:fe:b6:be:75:db:bb:ae was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=loredana.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6d:80:92:f9:98:ef:8d:13:40:7b:fe:b6:be:75:db:bb:aeSerial Number (int): 298598540110901657252181455059944335981486
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:2c:40:a7:d5:9a:77:27:ac:66:48:f9:0b:28:81:c3:98:a8:f5:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a6:37:db:57:fe:74:93:bd:1c:4c:dc:ef:08:fd:75:c1:e4:ea:8a:6c
Fingerprint (sha256): 89:c6:c5:7c:9e:68:de:d1:a5:7b:b2:53:54:3b:a8:35:4c:2f:e7:b5:3d:58:fa:26:f4:4d:77:09:04:a3:95:49
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate loredana.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for loredana.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
loredana.org
Other certificates including the domain name loredana.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for loredana.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISA22AkvmY740TQHv+tr5127uuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjMwNDE2MjdaFw0x OTA2MjEwNDE2MjdaMBcxFTATBgNVBAMTDGxvcmVkYW5hLm9yZzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKX8GzZghYll8il8rtWuOqSUIN4IKJRE7AGk mUJVdo3Jz8fjMMqjk0JiW10q3xFZKD0rF8Rnu09Nx/YqvS+M3a0G/tLJqTArNLnF YuzBkynqIjsrXT/FL0mORhE96Vm0a+c+5tRdcVhC1zcohJtHe/MtjQB3edmveq33 b6XHwkWSHeIfAm5oIl8ArH8OTgvHHoWID0dCqnN/YrU8E/y2Lxjy/uilRwzGyo/g u5WHElWW2ogkqnzgpfqr9nViad+wk8Dfp8WFjtoexVZ6+/DruK47k3pP4NLXOrD2 M8DI5a4roWWQJvJBbMFkyB3psUTx9zo3mD4eICl8yycdeEGcrebKE+zquvvwU093 iWNP98p7tt4z1GcQT8dqjmxv6uk7bY2IvBLha+Tkjx0LfUqj+tjDhGDRqUkkvq2u /jmzBV0Xyua3CAAC9xAWqAYnXqwIoVBTwHYSbtQ3RGcpRqtjWyiHp977kaZ+jFWj rVTGQNGdIJp53pD1FuB/47qKTPdH1HtQmcOF15N0f3X1oZsaK6/IlcIrqtOq+zYa LTpmTHHi3U5FSp4GjHnklH3uyLJn/dTJSo9yFIMgp7Y/9qeCC0R7HIkQPgdZrEes xKVBihQZSq1ApoYvqfNzU99LkWFg4YV3/HbUP/fk4ZfbHs58o9JX4YSLmWPbWVd9 yaN7tnItAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPssQKfV mncnrGZI+QsogcOYqPWQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbG9yZWRhbmEub3JnMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFpqPqRSwAABAMA RjBEAiB8leKaa/Qq1GvfAoFl8tiDRFzRdzAJ5iEnqvUQjfPDuAIgVJlILOYc5UhN RnzVpmjEwhecu8Mid5f1QMpO1VriwYUAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWmo+pFRAAAEAwBGMEQCIEguBSNWbmgBjzBcnX0IA3ZVNGKJ M2Xe/NlXwQ390E21AiBtt4mR5ZAwpB2swkA6MrmJ0JF+6K5LVp1thMbbq43KizAN BgkqhkiG9w0BAQsFAAOCAQEAFdHhmMwTLLk3kgFzQxNlFvJ239nyR6b/KK4hyOl/ Fdb8hhKMzZc/eLHV5Q2XjVuqij3IBRhYP6dOaSgX1qtmpZ1TVX4nBF9BJndPCrP5 tPuz1yOn5DHgi61CeGQv5WsP8kLoysThMjROSmM+IQdTeYJFqQEjeibOVLU/BUPK DrVt8XagIv186Ko3kJrLgGRPp6InkHg2vBdOpM3q3UB2QSrSmX2e2v4B3d4xi9VC v8pIkO4DWNOiRvsOKW81N0u7CbBQkfrwHvP3xAksGuV1JLJupAnGpej54PHCyXkT 4vicNdZmWbd7lgs1605+agT1Be9oaSct9NyRmHH2SY16cQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApfwbNmCFiWXyKXyu1a46 pJQg3ggolETsAaSZQlV2jcnPx+MwyqOTQmJbXSrfEVkoPSsXxGe7T03H9iq9L4zd rQb+0smpMCs0ucVi7MGTKeoiOytdP8UvSY5GET3pWbRr5z7m1F1xWELXNyiEm0d7 8y2NAHd52a96rfdvpcfCRZId4h8CbmgiXwCsfw5OC8cehYgPR0Kqc39itTwT/LYv GPL+6KVHDMbKj+C7lYcSVZbaiCSqfOCl+qv2dWJp37CTwN+nxYWO2h7FVnr78Ou4 rjuTek/g0tc6sPYzwMjlriuhZZAm8kFswWTIHemxRPH3OjeYPh4gKXzLJx14QZyt 5soT7Oq6+/BTT3eJY0/3ynu23jPUZxBPx2qObG/q6TttjYi8EuFr5OSPHQt9SqP6 2MOEYNGpSSS+ra7+ObMFXRfK5rcIAAL3EBaoBiderAihUFPAdhJu1DdEZylGq2Nb KIen3vuRpn6MVaOtVMZA0Z0gmnnekPUW4H/juopM90fUe1CZw4XXk3R/dfWhmxor r8iVwiuq06r7NhotOmZMceLdTkVKngaMeeSUfe7Ismf91MlKj3IUgyCntj/2p4IL RHsciRA+B1msR6zEpUGKFBlKrUCmhi+p83NT30uRYWDhhXf8dtQ/9+Thl9seznyj 0lfhhIuZY9tZV33Jo3u2ci0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298598540110901657252181455059944335981486 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 04:16:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 04:16:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loredana.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677158864836974275570344111413814910531518769390360622354719777038648408054005471420349678606360904378964139236138974891399476859467761301449306434541985639977588348109570427327383893077775590553874945319319191975739834135782540934011620162330595084549164428941446369811519970278958831315350713242676816989533501385474527315708208081408927407002114432041959640325810325593529417540738900181781486370313818189906397406463130014428073733277220519440689576060474299570648252963328968535645435018631345296347876521487407689122294173073230055988762563751581993848828298911541716943254395990740633700946410490181720891938475412873765838718272669838919209307161415800669390520837444175667697856864085172819469277337896609812068758406532201239987992098762143997240955099379478254003452050350561845826946675488296509132540627127336803923800110167255003133059453373325126683182434803795910657586863883696251440992323169645380607345850244057809969073624664950305559996494470317664752267764019986905838527798348117334953804101146832843423027101791816561404400928107320605371620040282401093392877308432909751018969008936098483215514970239045887777152331289830167576101637743519877764929952798490171191887070529499952822878111445952328058650653229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb2c40a7d59a7727ac6648f90b2881c398a8f590 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loredana.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a8fa914b000004030046304402207c95e29a6bf42ad46bdf028165f2d883445cd1773009e62127aaf5108df3c3b802205499482ce61ce5484d467cd5a668c4c2179cbbc3227797f540ca4ed55ae2c185007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a8fa915100000403004630440220482e0523566e68018f305c9d7d080376553462893365defcd957c10dfdd04db502206db78991e59030a41dacc2403a32b989d0917ee8ae4b569d6d84c6dbab8dca8b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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