www.ginnifer.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:68:44:ee:58:d7:5e:b9:c9:4c:cd:5b:6f:3e:cd:0b:4f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ginnifer.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:68:44:ee:58:d7:5e:b9:c9:4c:cd:5b:6f:3e:cd:0b:4f
Serial Number (int): 264878279086490353957408765232281581062991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:fe:3f:f4:8b:e6:c3:70:42:af:ae:71:3f:f9:ac:cf:86:42:44:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:1a:8a:9c:7e:ff:65:42:9a:9c:7c:98:05:80:e0:e3:87:74:bc:ff
Fingerprint (sha256): 8f:19:44:a8:c2:98:06:ae:69:a3:8f:f9:71:91:3f:72:48:1c:07:5c:b1:16:e6:da:1f:1b:64:c5:19:82:e6:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ginnifer.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ginnifer.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ginnifer.org

Other certificates including the domain name ginnifer.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ginnifer.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264878279086490353957408765232281581062991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 23:18:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 23:18:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ginnifer.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921056924962114204368540902324791600500926065496094509983208902042891749156621998305045699956601925738115588029729926916139302749984398196264196341128246035523370481321066627108154464265790499461439467217769696319228324552822932973583757669990748820387851361621156180035996742564846944643335525778551766335646371797837780073970713961793159729049192150646823289658833121461399976794488824992760880762212675425938380179634140409452448437192088973592243637588572587965044944207224323228571509848700016802989655830334528010939047777845553016804619393301098615109936201151805313854064233302609088042543946360459211574413423245496419660691866863391597489647840230603961607540611366621132037198433619009064196935982548758491806295092048598592190880530911190466663432829462050954774278650533050624607700995197619594756680315986936728932431170629909538058273879848812707380641568450685119878834970412217664472126886510998592446633111935899092563692997515090365636540134947245003101459963011570252266098821246463142735371184274498130750780524998126835794057026890928192367706418143181504327111665030931055318097646159853993207338214949989005333074683547372620733742807266551471562088893315187899421296088200614221971180967151145268125265804687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1fe3ff48be6c37042afae713ff9accf8642444f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginnifer.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd5964f2c000004030046304402201d9edfbe094a3b7a069264f1f2483e6bded94aeca8c488c451033d65409e8bb5022053b2587ad5146f07341d21daadc930eaf35f0e6b21b504719a853d6e1408a78200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd59651420000040300473045022010d4167a8cf269480b6b0044a66b8d643217eead09025a53e783bc28de60072a022100e990d4c778ff28412cc64a3dec41fb9088f10ccbbfe488590529b1d20f1007a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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