maggy.org

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:c7:76:de:72:d4:59:98:f9:5e:b0:85:c8:7c:0c:83:06 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=maggy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:dd:c7:76:de:72:d4:59:98:f9:5e:b0:85:c8:7c:0c:83:06
Serial Number (int): 336804394458791307409822318183172734223110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:a3:f0:b2:c1:b0:f5:88:b1:5b:ea:ce:58:88:1b:5c:aa:97:3b:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:0c:7a:b7:6c:67:cd:1b:6d:b1:28:94:e2:24:f8:5a:03:a6:53:57
Fingerprint (sha256): aa:1e:f8:9c:3b:52:ec:f4:fa:d9:cb:df:9a:70:68:b8:53:70:73:90:76:fa:ca:12:2a:a3:af:c5:ea:43:69:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate maggy.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maggy.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maggy.org

Other certificates including the domain name maggy.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for maggy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISA93Hdt5y1FmY+V6whch8DIMGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA2MDIxNDI2MzJaFw0yNDA4MzExNDI2MzFaMBQxEjAQBgNVBAMT
CW1hZ2d5Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMrJOgTW
SOxqinwUuY+UO4TpyucZtOLWj0sN0FEXPd75QOapS8IY931awTnEs3zpjoFOlP5J
w2sz+deXDnTZECSXr9sagnVYDBKmQEiUNSegdTdN+0CABV0OcxebTbiHo6fbwc6d
/5+AFEI1XNCX5mBpzOl/fHWyQ05uYOnw1Ir7VaZyDnRx/nSsnHzOCkf81oqoeFFx
FSX6cdem86DUFscZxso0TcccKiaXpgTIv4GK93Hrlyq0peojtOdDQQqg9d8dQlyF
dTRw2xUA+ALqd81pluSMElJQEpaDX267mcImvEb3nC4MzYKR84vKMdwJwX9zHOMW
Dyl5S0J0ldrM4QmxlvrkEBUSyLo+tFMJaLODI7dkktVdcQdGuFQBuhZ1V6UOHC5C
qG7Egm2/gWBRARQ1NlYGlRlUa8I70e5rLNmvSZMYCsHNazAk7rcTgRQ8qF0yav2b
nbb43/J4oT2QDRiuv0wWdwZtA01QaCKlFSkOOXbuRBCKE/H1+KcGmUlr3cTg7n29
26JSfh/i64J9023jOVeeYDCmrUVBhkrdwQqdxsA7x7xGkgDsv28qYUT/5BMthSsM
Q2S5lEmlc3Fpw31Ni6PT5m6Tz7sCbL5yF+xFLoE0PUUmGmSH5UykmoDvq4EILlAv
DMoCyO7R/LP6BRLGkm45+ow/t5uJDk9MOe/vAgMBAAGjggIKMIICBjAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFP2j8LLBsPWIsVvqzliIG1yqlzvxMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMBQGA1UdEQQNMAuCCW1hZ2d5Lm9yZzATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqd
MOscUgHLVt0sgdm7v6s52IRzAAABj9mPN1cAAAQDAEcwRQIhAMQhAAJGIp/MqLUD
KwHroiWkz6fCU92yDWwDZcLvYxHAAiBvzO9OK7PbLMI0nE70XW3UkNRkpqxvZquL
AdXobLV4cAB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj9mP
N14AAAQDAEYwRAIgXWJ4eWIyE3wmkh8ByIe+aOa2yxUlU+1skSG6k6TFJYgCIGj9
1cDskFLJ6goD5p28GL0aNI2U3TvBkKhy53yO8AZKMA0GCSqGSIb3DQEBCwUAA4IB
AQC35fRvf0B0dKAwRnVRMg4/Ko9Ky2FV5M694FTMvqz9s+XmBo71rrRAIU9/3KYk
NYoLKXbzCqRThzW5ehxf98rmY490iGCUoRI/IogkkBn4dEDfz9zGQm2NJFl0sUWe
skJdu4jyqrY/ApW3sBFY5TiX4SxxkSNUguGlpMrQDB0LQPG4vIA1jh6bO38y7dou
UrVK1c6tDNkXIbrLo/KXakFdaze35utVOAaZspoV0TMKJbSVt3TlnlZh8ASk9VwJ
zGnLqdmFqr1Tvauz1qKciywnRtESNZI7nMgRaxfQKEA3m+4wfqz3zyEaG+ylsTNB
7yMifU4dSSkI/l4lN1lJ6Cjd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAysk6BNZI7GqKfBS5j5Q7
hOnK5xm04taPSw3QURc93vlA5qlLwhj3fVrBOcSzfOmOgU6U/knDazP515cOdNkQ
JJev2xqCdVgMEqZASJQ1J6B1N037QIAFXQ5zF5tNuIejp9vBzp3/n4AUQjVc0Jfm
YGnM6X98dbJDTm5g6fDUivtVpnIOdHH+dKycfM4KR/zWiqh4UXEVJfpx16bzoNQW
xxnGyjRNxxwqJpemBMi/gYr3ceuXKrSl6iO050NBCqD13x1CXIV1NHDbFQD4Aup3
zWmW5IwSUlASloNfbruZwia8RvecLgzNgpHzi8ox3AnBf3Mc4xYPKXlLQnSV2szh
CbGW+uQQFRLIuj60Uwlos4Mjt2SS1V1xB0a4VAG6FnVXpQ4cLkKobsSCbb+BYFEB
FDU2VgaVGVRrwjvR7mss2a9JkxgKwc1rMCTutxOBFDyoXTJq/Zudtvjf8nihPZAN
GK6/TBZ3Bm0DTVBoIqUVKQ45du5EEIoT8fX4pwaZSWvdxODufb3bolJ+H+Lrgn3T
beM5V55gMKatRUGGSt3BCp3GwDvHvEaSAOy/byphRP/kEy2FKwxDZLmUSaVzcWnD
fU2Lo9PmbpPPuwJsvnIX7EUugTQ9RSYaZIflTKSagO+rgQguUC8MygLI7tH8s/oF
EsaSbjn6jD+3m4kOT0w57+8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336804394458791307409822318183172734223110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 14:26:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 14:26:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maggy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827294871478892424919469027931170763250249204935178663911537938820031780065537796237930983548722070624429849625614187737766437897170502168435126840188258622866431901675219945071407657230455853321031872452766988432030103291088971498821600653581840515234759555198125748564385294408919824297251562826429877791333241931368755027546730174487089177066124276164448253873619361654620791594497814240661910734973831008778361606392614658567467816438183015266823128556042518918326789040654539643056935376243278463654916689846589176466926139211499809305605793759803082138866340286576057145790492711794335281448395490587295295345027552218945564743238571729589352385067660513404283964203623065722344134369925129192718036392146232842393015744625038048336120622488809465221395726335840243359347462354830559831943185391247343449362094859050331950144539211845858455573765674636883819660012324537563038844060997016685279072634869505956966284363849395029051341472634696749600220090816230818561230985142473067585615763289125941713174807196313964886497476014029213637637978443013715135179385882022354967405723168521399463689899721583488576762516968894931189376547118605089132833296458527282175724266518601207540627310417498137760819508813221943241856380911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fda3f0b2c1b0f588b15beace58881b5caa973bf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fd98f37570000040300473045022100c421000246229fcca8b5032b01eba225a4cfa7c253ddb20d6c0365c2ef6311c002206fccef4e2bb3db2cc2349c4ef45d6dd490d464a6ac6f66ab8b01d5e86cb578700075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd98f375e000004030046304402205d6278796232137c26921f01c887be68e6b6cb152553ed6c9121ba93a4c52588022068fdd5c0ec9052c9ea0a03e69dbc18bd1a348d94dd3bc190a872e77c8ef0064a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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