ndjamena.org
Issued by R3
About this certificate
This digital certificate with serial number 04:9d:4e:c1:14:32:55:04:c7:a3:da:85:02:88:86:ef:e8:ec was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ndjamena.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9d:4e:c1:14:32:55:04:c7:a3:da:85:02:88:86:ef:e8:ecSerial Number (int): 401978157640229158213122428230923820460268
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 01:78:0c:3a:39:fa:72:47:64:db:3e:b1:89:dc:71:36:72:26:f8:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9c:5a:f9:ad:2d:22:3a:da:d7:ea:df:c0:d3:21:f6:ff:79:80:31:f7
Fingerprint (sha256): 8e:b0:f4:88:92:8e:19:17:7f:00:ca:4f:1e:7b:14:40:06:9b:bc:97:1b:1a:ff:5e:45:42:53:83:7d:0b:fb:7f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ndjamena.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ndjamena.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ndjamena.org
Other certificates including the domain name ndjamena.org
(limited to 100 certificates)
www.ndjamena.org
ndjamena.org
dubaiwedding.ae
ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
ndjamena.org
businesslendingloans.website
charleston.wedding
the-palm-club.com
69490.com
ndjamena.org
www.ndjamena.org
ndjamena.org
www.69242.com
www.majuro.net
ndjamena.org
dubaiwedding.ae
ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
ndjamena.org
www.ndjamena.org
ndjamena.org
ndjamena.org
businesslendingloans.website
charleston.wedding
the-palm-club.com
69490.com
ndjamena.org
www.ndjamena.org
ndjamena.org
www.69242.com
www.majuro.net
Certificate
The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISBJ1OwRQyVQTHo9qFAoiG7+jsMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDgxODI5MjBaFw0yNDAzMDcxODI5MTlaMBcxFTATBgNVBAMT DG5kamFtZW5hLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOWf +/zb1UYsdv7F/yYLuW465NiDv0gXN4hs5KEjnTYsEU3lpuFb0lGTybl4pkiYaEkI MNoFU33x4r/aQdpE2pCAwxkC7uaaYcDn+/rU+NvSKQXEGfUtcd4bNfQjGRjetS83 g/on96GOOZWx4BDNVKsLb+EBBaqssPlK8vWKoDqbZbq0EI5I331JApSh+iI8y+tW Z+Vk9Ho+V4pM0MHJ1L8KzuxVzWc1a0p+VNPmL7rTJVPBtjCMwbfKuCiOLRHTIL/L FlnksRIJYwX9FsAV4bvRxcls9RmPsKXkV3mc15g+hM+M1b4Zon7sm3yzCzIB3OEU yKNg2+ZSN7BpWgj5l5L1efA5dW8I6MJMGi709d6wDvFfS2bVTkvOu43+hA2rJ3KZ 7EQL0megN8mFjNyDfxqgqzeqE4d+BQXwNaI0A/WqJPmMkJhe4ZoE41IUOyeEjXRG 8rYAOHyDn5poET1P1hCo3zyCMNy/xCsCTgAz/ghlMtHTvzLKPmqzI3Wvayk41bm7 rxJQrPdDybjLZKpFgBPC+jNNmpU6TLyA+MuY+WP+LJx/U8od0NWaviGc0CA3Q6cX nEISPR1mD5ZNHuDJOT7Yda5ovWvU7xHJVQWR/xY6tuHUb956tqG7JxXYECSxuLhK iPxEUQHIFhbByroqyZjK6xxceilOtV+jO6Yt8U25AgMBAAGjggINMIICCTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFAF4DDo5+nJHZNs+sYnccTZyJvgrMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDG5kamFtZW5hLm9yZzATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+LbmA ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjErn5AAAAAQDAEcwRQIhAJQJ/rLY /TCm5oymoMYsbReKvcvlw4hQ6/aVKnEx4EGRAiB1d2hGo5vjFUlLqoL5ktMX2xg5 u840fH4iQqH710YA/wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABjErn5AIAAAQDAEYwRAIgOAJAyuTHcX4QKkLxw5FdORJxDdECQJhItdpKFKJX iXwCIFDC0yNlUy+6I6tClQ9c2pDDE3Npay+1iUNROw+aOGFOMA0GCSqGSIb3DQEB CwUAA4IBAQBet2z1Gu4jqCqOQm2yc42IaH/oXnbnuweoNqAS7irLXgsgpwH65RmP k2GBC7YYusEv864WAGsSpg/Msen/0vIKBkQoRHzKziuYM6qCYXn7C53fQC56G27f yAIsKf6saSh/yTsbhBGrNDYFWlxlCNqlEoysb8AV06Yjo1AwYGCp2mNaUlRPYN3i R7OlEHYNxSKEUGchcAEKJ3JT5Lb73u1vODLysmr6AhqRCTK/38ESYov96p5h7jst QwrC/JqlMscUP8cr+2Wy3uZsdXlFxg0qYx853GzD7slPaIx0hhq1lKnq6kA+KAe/ AA0F9RRf8oX8cR1vFFwCu51TbNj7D6zG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5Z/7/NvVRix2/sX/Jgu5 bjrk2IO/SBc3iGzkoSOdNiwRTeWm4VvSUZPJuXimSJhoSQgw2gVTffHiv9pB2kTa kIDDGQLu5pphwOf7+tT429IpBcQZ9S1x3hs19CMZGN61LzeD+if3oY45lbHgEM1U qwtv4QEFqqyw+Ury9YqgOptlurQQjkjffUkClKH6IjzL61Zn5WT0ej5XikzQwcnU vwrO7FXNZzVrSn5U0+YvutMlU8G2MIzBt8q4KI4tEdMgv8sWWeSxEgljBf0WwBXh u9HFyWz1GY+wpeRXeZzXmD6Ez4zVvhmifuybfLMLMgHc4RTIo2Db5lI3sGlaCPmX kvV58Dl1bwjowkwaLvT13rAO8V9LZtVOS867jf6EDasncpnsRAvSZ6A3yYWM3IN/ GqCrN6oTh34FBfA1ojQD9aok+YyQmF7hmgTjUhQ7J4SNdEbytgA4fIOfmmgRPU/W EKjfPIIw3L/EKwJOADP+CGUy0dO/Mso+arMjda9rKTjVubuvElCs90PJuMtkqkWA E8L6M02alTpMvID4y5j5Y/4snH9Tyh3Q1Zq+IZzQIDdDpxecQhI9HWYPlk0e4Mk5 Pth1rmi9a9TvEclVBZH/Fjq24dRv3nq2obsnFdgQJLG4uEqI/ERRAcgWFsHKuirJ mMrrHFx6KU61X6M7pi3xTbkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401978157640229158213122428230923820460268 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 18:29:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 18:29:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936788019353557602867327454493739262350653165369193137228290708405542189822487025132576988328838339245852249664683439275238978284351014061422377762379143088502525077313789805580693584754626462454956620016553549979300778341710191655951874905718595942090637569764896125877123284260471350828915251938689885854999396113621632300627323833843463197662896593042655425948224261862904422839353812778116321345168061811352023861714982148423479753630597049748439703477100362176629555844507166632149132102777437369646476558433236797313150577278260617216878531789994296432072402154119499249188852386810355175484050277964483131307997425739652158681451570604109448662121275148066767347126395427467434010121319749149610012025576488228859430374748990674128302308756372846647661907835413450829371997618998980100405330131958333049228244177383649673806130536936277494023938732181545131275174712450443682588608090288370849227929155631570700046763728557801856898409967194310870842583455224974510969284196105257309730373241353867099810290120551973811149236581976798097545626281283519308781842121730297329925668795650231556523211158582179720339639940177549354460384720952700310052473349069808221907394467669028689969016543629922549786698533777110317074042297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 01780c3a39fa724764db3eb189dc71367226f82b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c4ae7e40000000403004730450221009409feb2d8fd30a6e68ca6a0c62c6d178abdcbe5c38850ebf6952a7131e04191022075776846a39be315494baa82f992d317db1839bbce347c7e2242a1fbd74600ff00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4ae7e40200000403004630440220380240cae4c7717e102a42f1c3915d3912710dd102409848b5da4a14a257897c022050c2d32365532fba23ab42950f5cda90c31373696b2fb58943513b0f9a38614e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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