ndufoundation.org
Issued by R3
About this certificate
This digital certificate with serial number 03:a7:7f:a1:4c:a6:f8:7a:26:a5:2f:10:e4:05:6c:cd:9e:c7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ndufoundation.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a7:7f:a1:4c:a6:f8:7a:26:a5:2f:10:e4:05:6c:cd:9e:c7Serial Number (int): 318333662541028276570139784260030294761159
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:14:7f:46:ff:01:77:36:b2:48:17:71:c4:e0:0d:a2:c4:c2:83:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b1:70:16:c1:52:4d:0e:a6:a4:1e:05:58:cb:c5:25:6c:db:e2:d1:54
Fingerprint (sha256): 93:79:b9:93:28:17:cf:93:16:b7:ab:a9:ca:ca:75:fe:f2:00:f9:c7:af:2f:70:cb:3c:81:9f:c5:1b:86:c4:ad
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ndufoundation.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ndufoundation.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ndufoundation.org
www.ndufoundation.org
www.ndufoundation.org
Other certificates including the domain name ndufoundation.org
(limited to 100 certificates)
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
www.ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
ndufoundation.org
Certificate
The complete raw certificate details for ndufoundation.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISA6d/oUym+HompS8Q5AVszZ7HMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MTAxMzU4MDZaFw0yMzA5MDgxMzU4MDVaMBwxGjAYBgNVBAMT EW5kdWZvdW5kYXRpb24ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAXI84jud9tkrMlTVasJ/fM0ISmP6bLDcvlRFaygTtoDKtJjcut1xCcODjsM waET/D9bbkhnhLp61T2uC1wuGhfX7eoZRRtVt5BWmWVBfIdLo7E3IvpFmvSNTljU pS9gQ8eMtI3awMeg2+rFy1PSsUfn9fra7yeAUBQXznj+UfqZhztDMuJOr8d3k2ah 7KlpWaBqM4CxFYymYkIp8DpCFCh5+AjpuHXrdCG9/Ld530JKz2GoSCHKzMUta5i8 9oQx3mGKsiGxhVBIshVik222NS0s03xvupTtt6ENbzRDi6ifpOF1jHd+ysK5Vylg fCqIkh3P+GMgw7pFdVmL74orQwIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRiFH9G/wF3NrJIF3HE4A2ixMKDuTAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzAzBgNVHREELDAqghFuZHVmb3VuZGF0aW9uLm9yZ4IVd3d3Lm5kdWZvdW5k YXRpb24ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS 61IAAAGIpdCGMAAABAMASDBGAiEA+eMq4VEMaTJSQ61KSgxb50e+W9SUzRztKW0f OCQnybQCIQC4iHTMcjrDqfINIqIvY0lcmflAp9OKqF89Au9LwzcuaAB2ALc++yTf nE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiKXQhiYAAAQDAEcwRQIgH/tr B2FOltPdqp6bGInopUigWTM2rucT33PdONp0OagCIQC7g17lBiODQyF7KeITTAS0 mZUlhPQKQ0msIWpvwvDfoTANBgkqhkiG9w0BAQsFAAOCAQEAl6BYxe1SIzdJ6MQ+ NHUcL4wPwfO6gtfLENRzEFOuthb59LQ28L+jmMckYtW2GLrXhNx+mWcvBDTHuNCN HnfHA+BBVo/pMR0ODdKu4EeMLommfcdOuvAC5niNDFDa8tOAfzVmsqo9rzTZPJxQ Ko07k2hdP1TnmFLETaTapAUdvvCBT/6Geoq8CyF0BUgmEcPo7/S7IRXSmaWB8fWG lJAViuJI4kRnjT8NVekzrI2OAIAd3lvzn1mpZLt0a1qp6hRPV9hW0DRU1/OddkCk CB9blruERYEXc0PKAMggrKc4nNg4ALTD76HR4dewYo30BqBM2JRq76lO7XKGQnUp WJ40SQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAXI84jud9tkrMlTVasJ /fM0ISmP6bLDcvlRFaygTtoDKtJjcut1xCcODjsMwaET/D9bbkhnhLp61T2uC1wu GhfX7eoZRRtVt5BWmWVBfIdLo7E3IvpFmvSNTljUpS9gQ8eMtI3awMeg2+rFy1PS sUfn9fra7yeAUBQXznj+UfqZhztDMuJOr8d3k2ah7KlpWaBqM4CxFYymYkIp8DpC FCh5+AjpuHXrdCG9/Ld530JKz2GoSCHKzMUta5i89oQx3mGKsiGxhVBIshVik222 NS0s03xvupTtt6ENbzRDi6ifpOF1jHd+ysK5VylgfCqIkh3P+GMgw7pFdVmL74or QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318333662541028276570139784260030294761159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-10 13:58:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 13:58:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndufoundation.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25250513666290326672299709211062423830744266035827878567655379032864161200875182872471414431410385136637593153342895333179168296175148395512060466908710916743521308361722651579346306148807668501007449762457286447922695102388361867503936474785460314874591284643353595435963221451758776454691057543937562258858172981234049867832730031262262312478952675785768155443528891774678805068517141312343174085148144620216615126324790451507470755084127651961999193548958764779889700284077213991121599107399731089683225135232921033023293060841596459209635191225031535058509208517910233828900098472020433543673510043198215414229827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62147f46ff017736b2481771c4e00da2c4c283b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndufoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndufoundation.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188a5d086300000040300483046022100f9e32ae1510c69325243ad4a4a0c5be747be5bd494cd1ced296d1f382427c9b4022100b88874cc723ac3a9f20d22a22f63495c99f940a7d38aa85f3d02ef4bc3372e68007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188a5d08626000004030047304502201ffb6b07614e96d3ddaa9e9b1889e8a548a0593336aee713df73dd38da7439a8022100bb835ee506238343217b29e2134c04b499952584f40a4349ac216a6fc2f0dfa1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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