palagonia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1b:14:d4:8b:f8:dc:59:9d:46:2c:39:9b:4c:4e:65:e9:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=palagonia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:14:d4:8b:f8:dc:59:9d:46:2c:39:9b:4c:4e:65:e9:3f
Serial Number (int): 357664455799727747051306419930855964535103
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:59:c2:d6:ad:ec:aa:f1:62:ca:a3:63:d6:32:53:50:cb:9b:b6:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:98:a1:6a:1f:bb:50:d5:1c:0f:4e:7e:45:c7:68:5f:ed:fe:6e:08
Fingerprint (sha256): a0:1e:a0:29:2e:53:1a:0d:0a:4f:9f:14:62:6d:5e:3d:56:45:98:9b:51:ab:3b:1e:84:37:2b:e1:12:f3:64:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate palagonia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for palagonia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

palagonia.org

Other certificates including the domain name palagonia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for palagonia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357664455799727747051306419930855964535103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 10:01:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 10:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'palagonia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824559885825687892375953389225412263198425652875778377779177937428834930423692189572292114058078891072754086737756682506789486077135848271793485143220722929751961165145188445685263039067651382437268788911959093060820779995366071136961009573904289909783108733338547541873115800821317959701685146560098532971045505379108245173305122218411797540012781626032132856227193809678173209024812526900530348915607352554586296829739640477231690029230781682090175042507739739821036801505878394172072595516055038171835920568202843247900422964682745658683490697654632248041460423127741787005168673934534954665890120156383565503567023679397747344071588126491578565725013129871206551970830306251438910079575527387367770483163307816980170518576480924620006253492032092938871754387986069151997762042197389523038709022228114406136595252580354081015098563814161587865760607940417061054324232263300803607809869733426577558451880825781139294674496776058125841182398123853415243150894459983457042512757227512040118875579892210389399422315076459117234413896030984557274470417233377304315625935532565135042995079682863827123530941704088026938274385365031929671641958730701806124897439120965510360095334689762488741893090893717552720692664763538969315582429313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0959c2d6adecaaf162caa363d6325350cb9bb668
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palagonia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700069a85f0000040300473045022001c4830663d0ac90738794b0707543ce1a05e391a829521a1e5ccd1806ae617b022100c75894ad9d22b118bfc541513181e8883a18fb0f4fb1f8a357a06f7898ec0d2f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700069a830000004030047304502207e3e76293c28c30571d5fd44df1c889554f577fe8782b4d595fe8125d5ae9946022100819af95d2301498d028dde24c9af0b0a7002e78f9a07f2474a3d7118bb17eeca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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