www.farainsabina.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:21:3f:88:27:dd:28:ac:08:d7:26:fa:fb:53:6e:01:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.farainsabina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:21:3f:88:27:dd:28:ac:08:d7:26:fa:fb:53:6e:01:26
Serial Number (int): 325013854809625272316766074180819454132518
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:10:46:1c:bc:40:e8:93:a5:23:9f:87:b7:74:a1:11:86:6d:07:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:41:85:e6:95:01:99:b0:6b:ac:1e:7a:c7:59:11:5f:7a:9e:db:8f
Fingerprint (sha256): 8d:f3:32:7c:0a:2d:81:55:ed:7a:ee:c5:67:e3:ca:16:a9:f0:90:6b:91:4b:29:5b:6e:f4:98:83:1c:3f:31:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.farainsabina.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.farainsabina.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.farainsabina.org

Other certificates including the domain name farainsabina.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.farainsabina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISA7shP4gn3SisCNcm+vtTbgEmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkwODQ5MzJaFw0x
OTEyMjgwODQ5MzJaMB8xHTAbBgNVBAMTFHd3dy5mYXJhaW5zYWJpbmEub3JnMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6M/kipxqOPmr0Mqi1U9vqKps
GAu6Dd5ZbEfWMJ+LTCcb3ntRmc9Q+smo8KQIPRY9CnvC0m7uZcoH/95bTpjFpmUY
2UN+bvWuMnPuTLLF3uO0E7LhxfXCVMyloOe/NvJNG8vhhO730tpNeA4l6YqXlMBw
+nyTOM2ieuasfm5mIpYw4xDmdd9EoK0nOJXxDkcXCIfvQpk7Gx1y5PVp5c0aMjuw
Xtpi4qji1NNUOMfkHfwa9XKW93vwkPzhor7MchEAOLBH7ME6ufXSAVwbn7Z55Vh9
IdTiD/SUEQGAbFEqYyPPSQzk9np40iphvN1Md69qoHzZbfkgavaOSGPYaTBS8zAp
VEOF++8A2vwIHcn6vuaBcou/z1z+7U6ZhJceBvWOwZ5YmWSk/CfLIGHpPVkl+9xD
cZ1DHDH3sTLUbiqAuT7LEFzDcUjEbBG5r8SCNnBbjylrhvX56apyCdXIF6bAQumP
7ETa70CFjHDBMH45c27J1OONPlo0hm7/RXa2VpCHSIspUPg7YLprJ89FT1hUME5F
cIRY6mc2k0dBlWd8k1kftA1DQspMwkFaSP02gfoCjjmlbsa3U7K5QmM+9YsbkGL0
vk4Pm9MNlChGWieTdWeCaDGgBy1NN7LO86xHZ/7O/cdnZ7O53/qOhy3wUo15T/KS
ZOuajge5tEbxlMbT3sECAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUBRBGHLxA6JOlI5+Ht3ShEYZtBwYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghR3d3cuZmFyYWlu
c2FiaW5hLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABbXxs37MAAAQDAEYwRAIgTlTbKv0fwRI1ZLfvplgIwxZR07/4Eas7eEr/
P4cb4tICIFc8kGjjYC4GdkOFIN8b6UxmM/70waw75ON6NOozuGgaAHYAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtfGzfrQAABAMARzBFAiEA4AVQ
UIZUfS6xTR83HdQ7HVNwjS50gI16afcqAAGhOk8CIB2KEetSTlNR3lxWdDfmzHaa
xpDkp9dxbmGRq39GhEMCMA0GCSqGSIb3DQEBCwUAA4IBAQB9YHpWRkr2ausIczTQ
5cxARpd73Jc6bjIAZJNvlBUxOa8xF5FxvxtUmjb0LHumXa1vGEnd1+lbNIjhPG8n
UYaU8WIOrlmDmZMdah6h1aHTJXoTgUBywW3IOON4nldxI4pwKUBXqi/WSUIrHohP
CALkDhgXXnpGNrgQQ9Hcr2kWNll9igSfOTYeN5wIQlzcl8+xazbTn59c+if0kqjb
7HQnINFzdRZRdMwpxuJBK0APq+kH1ab8TmXC0YH4m4Br/o1PzEXuupGJd2nZJAwj
Ha5AQb/vbiIulr/SwMREZwfPLapH0dRru9mqF+v7hY4s3gW6s3ZzKXEHAptyTobN
YGgb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325013854809625272316766074180819454132518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:49:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:49:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.farainsabina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 949790425279388607048431472247591318789333926659969575116621135850715767000906462390567346707608787024263355635569860455868056014826928512967412838780901217560034360585224407447477902865718500338747568039977010960468548416894909470974300918396069511200171164135493120719623577726015048465211378182601155147478784526362655849346946262954139557619953194840311096734371718072935933314117251239989693509677535135122718799443132599362948300380835917913477189464425997901063813872423497833134411158621900149200440399789598193205316924655794203233877038144323152476949553249835547452673766578357598353509330142338558514864161405559350451869147335490910371404072974169786561044021585870169463400174023394365615992846484289234815740304905705483423432924354857420671467704208019735683338493167176007116574208030066544721777572232189433775107866934252558198662904605513114128211098009542934922187113581242409923882825960863864705958763067194475566810310471627876264297694557959867450787376766227596937624669222608314361679097197158050390821992496351577327198956526556400047931843761349510006787934278259732539609110225760655304428979520565586796368280586162890596892429714127511843940279767904447776083523958684400857748180544956896574969208513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0510461cbc40e893a5239f87b774a111866d0706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farainsabina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7c6cdfb3000004030046304402204e54db2afd1fc1123564b7efa65808c31651d3bff811ab3b784aff3f871be2d20220573c9068e3602e0676438520df1be94c6633fef4c1ac3be4e37a34ea33b8681a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c6cdfad0000040300473045022100e005505086547d2eb14d1f371dd43b1d53708d2e74808d7a69f72a0001a13a4f02201d8a11eb524e5351de5c567437e6cc769ac690e4a7d7716e6191ab7f46844302
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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