novelamap.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:9c:a6:65:76:94:ab:2d:b3:75:8e:78:33:b7:4e:b6:6e was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=novelamap.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:9c:a6:65:76:94:ab:2d:b3:75:8e:78:33:b7:4e:b6:6e
Serial Number (int): 290469082530099776860905417688004065932910
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:58:10:c4:86:52:e1:78:a3:d0:2d:25:55:1c:87:ce:6f:d2:fb:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:ee:9d:f4:6c:3e:bb:8f:f9:ac:ca:65:3d:c1:20:2b:35:8d:c2:4d
Fingerprint (sha256): 9b:c0:fe:7a:d8:4e:2e:45:ee:50:33:eb:c5:68:6b:fa:bd:1b:0c:cb:6a:04:35:4b:44:5a:77:6e:3b:c9:c4:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate novelamap.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novelamap.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.novelamap.org
mail.novelamap.org
novelamap.org
nuage.novelamap.org
pop.novelamap.org
smtp.novelamap.org
webmail.novelamap.org
www.novelamap.org

Other certificates including the domain name novelamap.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for novelamap.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290469082530099776860905417688004065932910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 22:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 22:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novelamap.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816645547835473074198454383618006690072724837996912698451399764468021167245411471626626877656283745034815788423135213700998032945463734206573042032883197307202788059881228134871357335828108586001162275667842805620829250721542651992571181057156725364050908167805258780209862243718536902442758780184486430165995020977255011450854326644811267626100483352288398861458736400451259374875125390906782703351715636403054868021172592840407801335231455107674983648446834258658870983325364935086066087472703068387403664889959806375340039810275135666844809048498034437250223868017509723920517785667969948736522967678066963451429554038645820370048513847230132820841960791669296491359769637805450803427456625495023361043975513815188441606325490111519535707083218072927348037385532864658744009428463949614913915883658494623021903830478772678713207615188100176549161629203495872680677038719720534709673070581615036293378052727288848110856861115553324804938943856715085508239600491152446294796104180894547407043272682802818884176741698887795199282769671226198508482248552304670093018307553767192802670044875344715867689505593842828285555359192659345249804118046409103274336077031662796830640852826774466184309621814003115658443893825312826974703043761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd5810c48652e178a3d02d25551c87ce6fd2fb26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuage.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.novelamap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novelamap.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089851a3ae62a5e852459ba858bc837c5c014f6afdfccdc6c765cf0d46abedb77859f6924b85b70b167798a13726c0246afa555bd48163c9c29bb9b6805ba6b75655060c8e719b17ef0304d580096bc14a5a37c042bb26c96f133ebb30975398f228d70c726528d435e9db80f12eb933ab04b9bf72e4c8977373c3ce2131577222a7ab19ea1683a6e850bd5122a16cdfa24fc4ab420cc3cef8a104ffd5bb526aa0b479460de6f66bd6b81a771e34c764d53a1d34dbf1b771ec8d5d65c8064d9493f1290ee8aa18390aef5078ccb04c28cf01c34374047925d8b091214aa4d847bf2a96e341b68655d09ec546cc1efc17abf0852271db7d43a8ae8c9a6366d22e8