ndjamena.org

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:4e:c1:14:32:55:04:c7:a3:da:85:02:88:86:ef:e8:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:4e:c1:14:32:55:04:c7:a3:da:85:02:88:86:ef:e8:ec
Serial Number (int): 401978157640229158213122428230923820460268
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:78:0c:3a:39:fa:72:47:64:db:3e:b1:89:dc:71:36:72:26:f8:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:5a:f9:ad:2d:22:3a:da:d7:ea:df:c0:d3:21:f6:ff:79:80:31:f7
Fingerprint (sha256): 8e:b0:f4:88:92:8e:19:17:7f:00:ca:4f:1e:7b:14:40:06:9b:bc:97:1b:1a:ff:5e:45:42:53:83:7d:0b:fb:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401978157640229158213122428230923820460268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 18:29:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 18:29:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936788019353557602867327454493739262350653165369193137228290708405542189822487025132576988328838339245852249664683439275238978284351014061422377762379143088502525077313789805580693584754626462454956620016553549979300778341710191655951874905718595942090637569764896125877123284260471350828915251938689885854999396113621632300627323833843463197662896593042655425948224261862904422839353812778116321345168061811352023861714982148423479753630597049748439703477100362176629555844507166632149132102777437369646476558433236797313150577278260617216878531789994296432072402154119499249188852386810355175484050277964483131307997425739652158681451570604109448662121275148066767347126395427467434010121319749149610012025576488228859430374748990674128302308756372846647661907835413450829371997618998980100405330131958333049228244177383649673806130536936277494023938732181545131275174712450443682588608090288370849227929155631570700046763728557801856898409967194310870842583455224974510969284196105257309730373241353867099810290120551973811149236581976798097545626281283519308781842121730297329925668795650231556523211158582179720339639940177549354460384720952700310052473349069808221907394467669028689969016543629922549786698533777110317074042297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01780c3a39fa724764db3eb189dc71367226f82b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c4ae7e40000000403004730450221009409feb2d8fd30a6e68ca6a0c62c6d178abdcbe5c38850ebf6952a7131e04191022075776846a39be315494baa82f992d317db1839bbce347c7e2242a1fbd74600ff00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4ae7e40200000403004630440220380240cae4c7717e102a42f1c3915d3912710dd102409848b5da4a14a257897c022050c2d32365532fba23ab42950f5cda90c31373696b2fb58943513b0f9a38614e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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