www.farainsabina.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bb:21:3f:88:27:dd:28:ac:08:d7:26:fa:fb:53:6e:01:26 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.farainsabina.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bb:21:3f:88:27:dd:28:ac:08:d7:26:fa:fb:53:6e:01:26Serial Number (int): 325013854809625272316766074180819454132518
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:10:46:1c:bc:40:e8:93:a5:23:9f:87:b7:74:a1:11:86:6d:07:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 48:41:85:e6:95:01:99:b0:6b:ac:1e:7a:c7:59:11:5f:7a:9e:db:8f
Fingerprint (sha256): 8d:f3:32:7c:0a:2d:81:55:ed:7a:ee:c5:67:e3:ca:16:a9:f0:90:6b:91:4b:29:5b:6e:f4:98:83:1c:3f:31:60
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.farainsabina.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.farainsabina.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.farainsabina.org
Other certificates including the domain name farainsabina.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.farainsabina.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISA7shP4gn3SisCNcm+vtTbgEmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkwODQ5MzJaFw0x OTEyMjgwODQ5MzJaMB8xHTAbBgNVBAMTFHd3dy5mYXJhaW5zYWJpbmEub3JnMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6M/kipxqOPmr0Mqi1U9vqKps GAu6Dd5ZbEfWMJ+LTCcb3ntRmc9Q+smo8KQIPRY9CnvC0m7uZcoH/95bTpjFpmUY 2UN+bvWuMnPuTLLF3uO0E7LhxfXCVMyloOe/NvJNG8vhhO730tpNeA4l6YqXlMBw +nyTOM2ieuasfm5mIpYw4xDmdd9EoK0nOJXxDkcXCIfvQpk7Gx1y5PVp5c0aMjuw Xtpi4qji1NNUOMfkHfwa9XKW93vwkPzhor7MchEAOLBH7ME6ufXSAVwbn7Z55Vh9 IdTiD/SUEQGAbFEqYyPPSQzk9np40iphvN1Md69qoHzZbfkgavaOSGPYaTBS8zAp VEOF++8A2vwIHcn6vuaBcou/z1z+7U6ZhJceBvWOwZ5YmWSk/CfLIGHpPVkl+9xD cZ1DHDH3sTLUbiqAuT7LEFzDcUjEbBG5r8SCNnBbjylrhvX56apyCdXIF6bAQumP 7ETa70CFjHDBMH45c27J1OONPlo0hm7/RXa2VpCHSIspUPg7YLprJ89FT1hUME5F cIRY6mc2k0dBlWd8k1kftA1DQspMwkFaSP02gfoCjjmlbsa3U7K5QmM+9YsbkGL0 vk4Pm9MNlChGWieTdWeCaDGgBy1NN7LO86xHZ/7O/cdnZ7O53/qOhy3wUo15T/KS ZOuajge5tEbxlMbT3sECAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUBRBGHLxA6JOlI5+Ht3ShEYZtBwYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghR3d3cuZmFyYWlu c2FiaW5hLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ e8xWAAABbXxs37MAAAQDAEYwRAIgTlTbKv0fwRI1ZLfvplgIwxZR07/4Eas7eEr/ P4cb4tICIFc8kGjjYC4GdkOFIN8b6UxmM/70waw75ON6NOozuGgaAHYAKTxRllTI OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtfGzfrQAABAMARzBFAiEA4AVQ UIZUfS6xTR83HdQ7HVNwjS50gI16afcqAAGhOk8CIB2KEetSTlNR3lxWdDfmzHaa xpDkp9dxbmGRq39GhEMCMA0GCSqGSIb3DQEBCwUAA4IBAQB9YHpWRkr2ausIczTQ 5cxARpd73Jc6bjIAZJNvlBUxOa8xF5FxvxtUmjb0LHumXa1vGEnd1+lbNIjhPG8n UYaU8WIOrlmDmZMdah6h1aHTJXoTgUBywW3IOON4nldxI4pwKUBXqi/WSUIrHohP CALkDhgXXnpGNrgQQ9Hcr2kWNll9igSfOTYeN5wIQlzcl8+xazbTn59c+if0kqjb 7HQnINFzdRZRdMwpxuJBK0APq+kH1ab8TmXC0YH4m4Br/o1PzEXuupGJd2nZJAwj Ha5AQb/vbiIulr/SwMREZwfPLapH0dRru9mqF+v7hY4s3gW6s3ZzKXEHAptyTobN YGgb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6M/kipxqOPmr0Mqi1U9v qKpsGAu6Dd5ZbEfWMJ+LTCcb3ntRmc9Q+smo8KQIPRY9CnvC0m7uZcoH/95bTpjF pmUY2UN+bvWuMnPuTLLF3uO0E7LhxfXCVMyloOe/NvJNG8vhhO730tpNeA4l6YqX lMBw+nyTOM2ieuasfm5mIpYw4xDmdd9EoK0nOJXxDkcXCIfvQpk7Gx1y5PVp5c0a MjuwXtpi4qji1NNUOMfkHfwa9XKW93vwkPzhor7MchEAOLBH7ME6ufXSAVwbn7Z5 5Vh9IdTiD/SUEQGAbFEqYyPPSQzk9np40iphvN1Md69qoHzZbfkgavaOSGPYaTBS 8zApVEOF++8A2vwIHcn6vuaBcou/z1z+7U6ZhJceBvWOwZ5YmWSk/CfLIGHpPVkl +9xDcZ1DHDH3sTLUbiqAuT7LEFzDcUjEbBG5r8SCNnBbjylrhvX56apyCdXIF6bA QumP7ETa70CFjHDBMH45c27J1OONPlo0hm7/RXa2VpCHSIspUPg7YLprJ89FT1hU ME5FcIRY6mc2k0dBlWd8k1kftA1DQspMwkFaSP02gfoCjjmlbsa3U7K5QmM+9Ysb kGL0vk4Pm9MNlChGWieTdWeCaDGgBy1NN7LO86xHZ/7O/cdnZ7O53/qOhy3wUo15 T/KSZOuajge5tEbxlMbT3sECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325013854809625272316766074180819454132518 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:49:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:49:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.farainsabina.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 949790425279388607048431472247591318789333926659969575116621135850715767000906462390567346707608787024263355635569860455868056014826928512967412838780901217560034360585224407447477902865718500338747568039977010960468548416894909470974300918396069511200171164135493120719623577726015048465211378182601155147478784526362655849346946262954139557619953194840311096734371718072935933314117251239989693509677535135122718799443132599362948300380835917913477189464425997901063813872423497833134411158621900149200440399789598193205316924655794203233877038144323152476949553249835547452673766578357598353509330142338558514864161405559350451869147335490910371404072974169786561044021585870169463400174023394365615992846484289234815740304905705483423432924354857420671467704208019735683338493167176007116574208030066544721777572232189433775107866934252558198662904605513114128211098009542934922187113581242409923882825960863864705958763067194475566810310471627876264297694557959867450787376766227596937624669222608314361679097197158050390821992496351577327198956526556400047931843761349510006787934278259732539609110225760655304428979520565586796368280586162890596892429714127511843940279767904447776083523958684400857748180544956896574969208513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0510461cbc40e893a5239f87b774a111866d0706 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farainsabina.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7c6cdfb3000004030046304402204e54db2afd1fc1123564b7efa65808c31651d3bff811ab3b784aff3f871be2d20220573c9068e3602e0676438520df1be94c6633fef4c1ac3be4e37a34ea33b8681a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c6cdfad0000040300473045022100e005505086547d2eb14d1f371dd43b1d53708d2e74808d7a69f72a0001a13a4f02201d8a11eb524e5351de5c567437e6cc769ac690e4a7d7716e6191ab7f46844302 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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