roomag.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:24:82:58:c2:c2:88:3c:8f:cd:00:c0:9e:6f:4e:07:3c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roomag.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:24:82:58:c2:c2:88:3c:8f:cd:00:c0:9e:6f:4e:07:3c
Serial Number (int): 335226660423846766451365967065674245080892
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:37:2e:83:fe:48:9a:7c:9f:4d:5b:e2:0b:65:bc:b5:c8:c0:70:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:05:26:9c:60:e5:10:7f:1d:5e:3c:9b:2a:5b:75:78:13:a2:62:34
Fingerprint (sha256): 92:e1:1c:28:50:25:36:c1:ea:03:c9:87:f7:9f:24:d1:b9:9b:7c:2e:a3:7e:ee:19:1e:5e:fd:97:34:82:96:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate roomag.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roomag.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roomag.org
www.roomag.org

Other certificates including the domain name roomag.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for roomag.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335226660423846766451365967065674245080892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-22 17:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-20 17:25:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roomag.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817642080967201135893078815926071950655876623710164733801180750722049495359577613245897811528322033912476794221706461772280558857523690813031400537453905924232721900838784155329031780640514876773539875255266885830826010909058616820826130982450027686851958263324641067075178637872350899030325530800537812853995194593612206060222143791159155512809937528709530915077120210408497038035836690882570890912550354806866063284531800208232978593799580400737609220765335302388376695816501707432547597615951694227010597874480928968160882532302677464381304158965073175162786685287652326333134813404024448923045390776352859274315227756178606769002495307191228692549284772644787002794843222759916663487704205698186328522409451662873083438910766654918675463742880063473585667099694558641941400978210527177131943214375167453768686647373803735523450470910889537511134853228441623006993901205283848211342422971351008822913116231640483523963077023314293076097052783233291472614488382042352460400724363027622626287060476970432160509835487976053974867270313651909395692007028191634372984937116017301274915704497842258163588103275976304325864879115426024190627783605096006747245759559959534880774055232489117986163066149562718989100400371357644945144232667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef372e83fe489a7c9f4d5be20b65bcb5c8c070b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomag.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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