www.santantimo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:0b:72:5d:94:5f:d0:59:ed:22:f8:ef:c2:73:ab:ca:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.santantimo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:0b:72:5d:94:5f:d0:59:ed:22:f8:ef:c2:73:ab:ca:93
Serial Number (int): 327366852305757823045602961067419246512787
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:43:0c:e6:9f:10:bb:02:06:9d:1d:2f:88:80:2c:ab:58:52:26:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:04:39:61:6f:f5:8f:d1:75:68:dd:7d:ea:da:d4:d0:df:35:bc:8c
Fingerprint (sha256): b1:b9:c3:81:33:83:a0:c4:70:5b:d7:e4:e8:ba:c0:5d:3e:47:aa:25:34:5d:a9:16:53:99:bf:34:6b:77:15:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.santantimo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.santantimo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.santantimo.org

Other certificates including the domain name santantimo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.santantimo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327366852305757823045602961067419246512787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 06:46:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 06:46:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santantimo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776787994499343397015937740712972411054225376837607774653821939304987580065901881158548087585859816610149670911681460630685960745723819866943434018650839106492675034423270296016221775953565513281236214003350106022504451429905181121776796130671917727502236544167851054276789233968640421147452389700951647739048121970723370526965978218740852771666065984020589309491625108555269692262075659856765347220661645192400197831802501316919175609941039022524823735829968079261308219566999488316419974241437829137690957896741069260524819299707516933647656509238215054648078155210335174250204884896215962536809573213164506412556984791657477191578469811828794596285031415678868036676877583127986145416939604073326566805552380511582966799198268816390173239620515249268037539860988668868643590968657650185242815504442966081814985489668126860233194891798756720484853739681462199878973701229748064832722121424249020934698034375379584037743122544182319164608911706710357385485675054472615898360410704777816455094803198914236578689755644732317781506834044389103980521150867407186510242849514758714524466901986648733036842524792556851674038566534912094136746567266996311571773853789871012969054308790765845694705724216222348644882494636228711054752100641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53430ce69f10bb02069d1d2f88802cab58522620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santantimo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017004dd9804000004030046304402204d4f08593cdf30477b1d6eb6cd0d5d64d0cf3f691cfa340b9252664dd5fc3160022051e9d53e84a25941eaa1b2b2146c6582e69b4cafa4540634767b9c8ec2ac82d1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017004dd97f70000040300483046022100ee71ebce7891dcce3ae4227266f0d7e2b7445c99b8e0f0bcab4d748d252b250c02210094bc35b43bc4acd0deef9828197968187567a13f54ea2cf7a564f0b35d9893e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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