www.emina.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:0f:c8:8e:ff:c3:cb:e3:45:ae:ec:26:7e:35:d6:4c:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.emina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:0f:c8:8e:ff:c3:cb:e3:45:ae:ec:26:7e:35:d6:4c:89
Serial Number (int): 289260991662472115869281451311436253252745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:4b:2a:d0:7b:47:be:13:6b:b3:d1:e0:c8:61:d0:d6:98:6b:7c:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:7e:d0:f7:57:4b:a8:ff:65:cd:33:ed:35:ba:ed:04:d2:33:80:b3
Fingerprint (sha256): af:9b:a4:53:92:6d:62:bc:2f:ee:c8:44:2c:13:b3:52:80:ec:7e:2b:a7:a8:f3:52:ea:bb:1e:d2:91:74:56:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.emina.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.emina.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.emina.org

Other certificates including the domain name emina.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.emina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289260991662472115869281451311436253252745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 18:13:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 18:13:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675432680414289691261720100968655468036064781268910305736564854437365760116821207982845080430839290830311408842612174293201832761112451646692660858028033646252102198415872355999748624040202111237254977820297432848721790320514307271002690667312100841633165410844761993337478307157597938541361938420948118133512348000337771907135963454273568220882991479401841110952332290023121334945496331501556645194557768543889024083031578900816593669381500793715129497222156992349359960592100756229798101022138771051551932019098409337401806140319685160016912906215528695625720365400747266377156089574520307764333708070709470497580337971513691304315710957139549598110283434785054935051871362388661763541785023720770799668235318666973166206279744514460815746323738695148606816007688707101104986555468727645534784230248055209708373257337951888910963047981896665099245129251583321203042142184735103940305606548694266814145281246716874389920001734276144027906261049370395286861426834364125132209817594451906137782231246110892146160591567674346731727864939161118622934768432889382177235416271361312864681230139804983134971942641816880521498255076255893567603759987691867596118733217787896042007342114134752533018802770289360818307293213371759488747149371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854b2ad07b47be136bb3d1e0c861d0d6986b7c34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016adbd00cea0000040300463044022038a6fee2964aedcf7862765dc8c951783016be7a63aa61656b0ae1273cf85721022029186e4adecde07863e93077ecb7cd2d23dbe41b50d8522fca8b26ea56d1937500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016adbd00ef8000004030046304402204fcd28cefcf03ee1b872e5322778bd94d886724869ce8e6b1294437419a4d2130220634254738123b59c1f4847cb669d10a9dc1a67f8e2b1d864ad171b2400fc6c02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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