ostatus.ikeji.ma

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:f8:1e:89:95:39:c5:f5:26:bb:4a:f2:56:19:25:e6:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ostatus.ikeji.ma

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:f8:1e:89:95:39:c5:f5:26:bb:4a:f2:56:19:25:e6:af
Serial Number (int): 284465583481357024049771572847991075497647
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:12:11:af:47:d1:72:87:51:45:83:58:89:f3:fb:29:1e:00:26:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:45:84:16:48:9f:90:c5:32:a2:22:0f:25:f7:3f:a8:fc:d6:ed:6c
Fingerprint (sha256): ab:d1:a2:d2:9b:82:2c:4c:10:66:96:73:42:b5:da:38:c6:bb:19:51:b4:e0:23:3b:b8:9f:09:d4:2c:f3:84:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ostatus.ikeji.ma

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ostatus.ikeji.ma

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ostatus.ikeji.ma

Other certificates including the domain name ikeji.ma

(limited to 100 certificates)
www.scape-california.com
ostatus.ikeji.ma
ostatus.ikeji.ma
pass.ikeji.ma
uprooters.my
piedparker.app
minieboard.com
kronym.io
registry.ikeji.ma
pass.ikeji.ma
quotes.ikeji.ma
test.ikeji.ma
pass.ikeji.ma
ostatus.ikeji.ma
pass.ikeji.ma
ostatus.ikeji.ma
mitchellbryce.skhomebuyersguide.ca
ikeji.ma
local.ikeji.ma
dev.oneclickbid.com
scubadivi.ng
ikeji.ma
hb.shullabs.in
www.btalieb.club
uat.agartha.presar.app
scubadivi.ng
ostatus.ikeji.ma
www.zkadvantage.com
pass.ikeji.ma
test.ikeji.ma
ostatus.ikeji.ma
firebase.d4ni.nl
minieboard.com
ostatus.ikeji.ma
pass.ikeji.ma
ostatus.ikeji.ma
www.crchat.org
pass.ikeji.ma
www.seasider.com.au
us.first.api.uveye.app
prometheus.ikeji.ma
ostatus.ikeji.ma
ostatus.ikeji.ma
ostatus.ikeji.ma
registry.ikeji.ma
www.kenzsoft.com
ostatus.ikeji.ma
ostatus.ikeji.ma
intermittent.com.br
pass.ikeji.ma
ikeji.ma
rudrnshdigitals.com
blackbox.svc.ikeji.ma
www.dowinapp.es
pass.ikeji.ma
ostatus.ikeji.ma
ostatus.ikeji.ma
test.ikeji.ma
ostatus.ikeji.ma

Certificate

The complete raw certificate details for ostatus.ikeji.ma in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284465583481357024049771572847991075497647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 03:34:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 03:34:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ostatus.ikeji.ma'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908986454010093159615115572530174036330416435511352280385348509849750864713703061732486487297942386031045296264186698365480581170088755416814946619554986240523165336035413399842345370163925778732410005763097365270076859672304741510172644692195168173548173183041190474081375056856519833782908857322050926973262723184604195544468506703108175890019748019968089535628885822595614347069168488725428820041268983206335351739571054283532738857775625909459543948750560666603173705408160592257643309739941262783861024194268523415383243231560492370291527450277311794370060758702521058966211285412063399959367866329680297405919581394716334026310959330080490428925502500240155163021169637521012439349601761060947298668174591335796891304827785255020743862150893316280009417204269551857819965038037605815272935161385612303952526982862406226664434050620568201039924413295438439511531977583313880094153468902790881797219263971572464319003799528995921527814059077079010052262755529104676833860694745630277632796935503654838344280253107488170504783392511110186129322721339156915596873261889767454918938764140263060663692898822210857432297311611234376282588831390056342298008292860306822222931844024547050068621319970307308433460338432595560420319301499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:15|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostatus.ikeji.ma'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00593bb3306ca5270354f4b7008ea4f82c0e6f3d3183e8205e8bfbedd9bf658e0e43c606001b8d7f4880b17d0a479d06ff752ce5d5ae374b2c620e35330c2781c4c75b8095e112f987e0102c83ff8e6854abd190fcdc08c2b5250b4b68b2c26ade7d47c331b193160f2444fe18f4c23379d38b9b20950c7ddb623b1c8c2643e16bdda5de05e0e5bb33edac96ac382ede39833875f44393a9808b584c0f8df6c4a5a91f1febbe9106ae513155ab1bde7e9d88b3eacaa8a29158fde8c0efb7f7501a7a5b1205931db98aa799029d3bf1a50f2ee8f840830629e3f8881b75439b8b7464a2b6c1d637ab3652d5443dc048e90170f07dd2db1ddfcf8deb081dc6c1336c