www.ganydar.org

Issued by R11

About this certificate

This digital certificate with serial number 03:77:b7:62:fc:1a:a7:8b:45:15:6d:71:63:17:0c:f5:67:6e was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ganydar.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:77:b7:62:fc:1a:a7:8b:45:15:6d:71:63:17:0c:f5:67:6e
Serial Number (int): 302074222140472197819021735281648335153006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:aa:91:4f:1d:4a:3e:ed:08:40:ab:be:b3:c3:8e:9d:b3:34:3e:e4
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 76:80:40:9e:77:9b:a5:91:b8:2b:1e:7a:52:99:99:3c:50:0f:c7:f7
Fingerprint (sha256): af:d1:48:20:53:78:84:48:6a:97:6b:d7:a7:ce:4f:82:45:74:ee:89:f5:e6:16:07:89:ba:4f:3a:84:da:0f:49

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate www.ganydar.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ganydar.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ganydar.com
ganydar.lat
ganydar.net
ganydar.org
www.ganydar.com
www.ganydar.lat
www.ganydar.net
www.ganydar.org

Other certificates including the domain name ganydar.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ganydar.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXGYbxmh5+XhcweV9uyG
+8bI8LguuqA0+HjjvR7wSrTREkLYcJQ3vC/fpNBfK0SR+7x8KIMtpk54lksZUbEE
TgSNwDsIbFC0Fymvp03bDcHQ62s4o5+0dP4p4TI1UH0CueNUs8QnBPYJV63ntjdq
8TL00D8edCReiGWD5a8TYvEh9nh4jKB+Jm3sLqb2PkSbpNHpsESaUglTmqLqeqKE
ezpPAsAozD0RfN4UBw6jyvup1Cc5XKfMdBiVHpM57yI6jZiKIC7y89pKKYNvlWV/
x/OjI3tOfsEU9/pBoc828PxPiQWl5EAmc31GWevIIJ5cNWmIfQ/1eNJOC1YQ6Y3d
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302074222140472197819021735281648335153006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 19:38:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 19:38:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ganydar.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25429915299977211831901295174259135811072416739211623431860795179349709302671980132351143811426769241199407552743377356902928736239003929348702569194472121617498766015928736030230135121049189433971350712053975676141926608928113802310933032414833025735344872012576633391239434115573067377544702054388789252420913865502183790441322580674176475602615389013797793310778697924346409466581166165889527216373779815517590381842749653962090345057463990132631668130364459476215688421718108520694623748678435229514277215684367149773518431360727046441341774521906201393430258296882277688980696120541481108705112815583247687605513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaaa914f1d4a3eed0840abbeb3c38e9db3343ee4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganydar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganydar.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganydar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganydar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ganydar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ganydar.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ganydar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ganydar.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001900e2c8fa40000040300473045022100fe663de53bd01fc4025257a0b1d15a4d7dc5bcf4c2a18fbccfea7df17a4a367302203321f7741bc58e0145ba7fcffd339ab4873e8bc96286e81ba2c3d7cb7bdca16a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001900e2c8fa10000040300473045022013c47e2e4c278fe26125adec0528ffcc8e82be536ea3a78415ff195871a8e71d0221008e528402bf87755de4e3bd6fa274d8faa142d5fb295d448df33caaa2f1669bfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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