nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d2:73:98:46:fd:10:be:2b:bb:9c:ed:ff:53:f2:49:14:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:73:98:46:fd:10:be:2b:bb:9c:ed:ff:53:f2:49:14:5f
Serial Number (int): 420062092668894405567299023286447093912671
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:e9:21:9b:31:04:b0:63:bf:8d:7a:29:12:0c:3b:a5:49:ee:14:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:7e:01:38:cd:f7:e1:08:8f:e0:7c:1f:e8:9d:47:0b:ac:59:3c:af
Fingerprint (sha256): a7:cd:ec:06:73:a4:4e:5e:c9:9d:37:1e:c8:c1:d3:44:93:8b:e0:3d:ce:58:7d:61:46:39:25:2e:52:52:1c:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuZar3cZTJtvgFiCpDeco
FVrw3V9bqzbfRi5Oo6HwfO0ZyU6v1rHVPBPjaUbXSGA3QsXrM1KB3tGFPHKApIbP
RxN6+xIYYj28EUkzkOQ9Nlnp7KHpQ1bZ9lqqUI9S8NVj5q9KHsh9sJCMQjZz5wnb
RxK9+tAdy5nQvJ9bkRiJEQaYVBMlK7Duac/rIySm09oWCMNZ4kwYZHVwJ7s3xC4s
g4hbWJISpjpYDSyNhNB7qGxcff/21DHv+oLhe68xiKTDfm00Cv6dfjyQrbROgOgC
HAA8+YZa+bupAv+a0AiEsidodXvqigLAjj/6AP7Qkz1Cf/h3gxn8ja63bTaUpu/A
tTtYtfHc2SinfK4sAycJ+UbR+rOAz2tsJFHxEOBRHJis8Z4lay6tvTAgtDVc/QUU
mlCOJWVgwAjSfjzh9EBm/4I7coMfOygaTOfvJoFywXqrSC2daysIZiKDVJQn5zOP
plQ6VTgUaOCMyEWhmJxltna2rub2dNWTwRht0VvoYVOEC33png+6oJftZ7JQwnW+
AKlM+lN98Abc9JXFQLg8DMgdeklKUA+dCf1wPtOjmrrbO5XlWcIpElREwoayBK6u
73TsWmVtDjQ0bmrEw0w9ylD13ZOnwJGjnlx/XuR9WrHzTqKa1W/2B25meVZNlFcT
scKVnb/gmTeeXI9UimAhST8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420062092668894405567299023286447093912671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 05:29:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 05:29:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757135267781075166277440141177860392856321608970441690606598458976070077632399188093827843414568497187591588935884705978761130879745324861488223575183500717636786659738206536934363304595106710338917351558511564393504630846162807294563951649649354303577039596494973552979349614033082490076522034264808255511038827761775052620649340283435849791958284052953959992891592287473186515940776806301126519066193972774107703812745576125238113866895896310195445199984139154345013723543436853910400039908474318799741215701955335895333535421860407260031065292168185102046526298530565253434200440721018168407854014434615828673835455727980131581892963643608052901720359687684947942965927526230005823854876483080281983875937230014117815635342554772919598881342977725997371425451875261848642016980151591040752329420965297271951170195868079410139751610721349787951559243428029128815023680245667806221515293980747142194797862355050788643583502868795378562867530439236821644099681818078817167507533109562527017731394447269175907508965275024331925895109759654569238596868245663083880081094911321328852080139419086663615864380955295442772444576531437710127270056837124727841158150187924329999926628367988491265722397080928918702487229699595842037945026879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3e9219b3104b063bf8d7a29120c3ba549ee14e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700ee4051d000004030047304502206ed11319cf03fa2795d211773ae98eebd02d2dedaa19705f57a88a080fb4bda8022100cfdf0711fd2832f3db3bfc70dee3a3a22e9c5e44a4c93c9c859d9db5f5d82b9800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700ee405450000040300483046022100c483e7907d757882707fafae1eac9fe0b211a8eb934bf711678ca36f98ced151022100b6746faa9899b7e0c15a6eb93ed3cdbf6c40f368fee9e0c08b8f0dc33cc17412
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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