emina.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f9:43:35:21:d5:a6:3a:9e:9b:01:21:c6:34:f9:c0:07:2e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=emina.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f9:43:35:21:d5:a6:3a:9e:9b:01:21:c6:34:f9:c0:07:2eSerial Number (int): 433268787244052316612589282466597789763374
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: df:b1:48:dc:0e:24:f1:d1:df:fe:15:8b:c8:5e:ad:85:70:2e:51:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 99:03:cf:6c:2a:2c:c5:b2:b3:96:09:f1:b7:38:05:1f:3a:4f:95:e6
Fingerprint (sha256): b1:da:dd:8a:cd:88:59:37:70:27:b1:1d:a0:41:b1:0e:e8:34:ec:f2:e3:94:ba:75:8c:d9:aa:64:fc:4b:e9:2d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate emina.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for emina.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
emina.org
Other certificates including the domain name emina.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for emina.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISBPlDNSHVpjqemwEhxjT5wAcuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDMwMzAxMDNaFw0y MDAzMDIwMzAxMDNaMBQxEjAQBgNVBAMTCWVtaW5hLm9yZzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANRN5mXnc5iNvquNIIUGpE5m2QDDf1sukZ1xyEiE 4XfRggFugVqSA+niTbbnjJcTCcABWn99U28+sI7ELIzVUIuv01keHlDzoOVc5e5M UAaPcGcWSkkDhjnCrb/ZNZmKIRS3NRwXK8aDJia1EDkyND94FBJ/vxkemsvncYSf axCYsvfnYVt4yQQ0TP8rnhbRQ+3RTEeQNLdcsZAcMHbrgLQlnY3DpA2jXXitXy6N bgp8UzRNoQM7uo8wMsV15P26EM7gHM1+kOFUfBvEfZDC4DQBlYGbauoIkwAG8+oh vGhzZ1ILMiM5cwkZH50GNC7Q/IoRuwGo4Ema5Z4Eolo4YUH7YzOGOYDtd4sFMUcC 8nbTuliU6aked/tEPNkh3dVkxZAbMLjmEtWtGpEfD8+MQD0EW4Dy9psJ8G7KslcY e84oqRfD1wi9z4QxligB9RAkL5LfTCPNBl+DjgeaC+5QIcJgz+mOe4p2nkxAG2Hd 6zNItE1X/O7sonUn4eh+sFiLBn/imYKAJq5x9jLZrwboFHvgRpIU3aXHVfR5ZOwH tpCcxt7hZP9XvSdSYcJUX3yQ/5Xb6YlODIgQgFahMcQl+nqHYtCER1YTChdY+foR Twy7gOG0A/eVF+uUayVgSnkXTmNN5hb+q2x5qccEnoFMIuY9Ri6lmZvRtAX1rZKs oUZRAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFN+xSNwOJPHR 3/4Vi8herYVwLlGVMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZW1pbmEub3JnMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFuyessbQAABAMARzBFAiEA icAZXiZ7Axujs6qZtFg5rkf3OYLxbzhX9zPzdm/9xDsCICJqyvODRfAJi+Vvvzj+ fh4T8BU3Twe1AhPExwuLb5UgAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFuyessbgAABAMARzBFAiEAiNSP/a7EaKw80n/deKIRaGb3O9sZBSAn fHjIScxK9+oCIF0aSPIxpOSHVSmc6nKz+wCTnyv7W+3SKA2L+0c3IkqUMA0GCSqG SIb3DQEBCwUAA4IBAQCRsUdBurj0oViyS9hli9WcZOCfpQtTJ327+TPnmqB2XvdL 7Iy1k/gkUO7k+hiBE/BodfJmFu7q3lQtMi6GqdiZhHbDvH2rRGbnFi6wAP2PH7z8 rzVR4L3d03kJ8pwe8nbtWD26eq8RH0DJfMTur3vFB1F+l5f8v9MDRRRzhxKjdBwc qBoVA69NXEwiIahJCpB1hSEN5be6RgsoSfmBNAzoEr/ahd87M0ETXkfhx3IK0LWo IGLeKUYFzEXSLL97jCT7b1APphdj39MCYveXHMaJjCrdfy6GIegQXv66+sFlmYhL 440vgjSGLLkNqpq42RYUEvzSRk6UVu2K1KpfNd8N -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1E3mZedzmI2+q40ghQak TmbZAMN/Wy6RnXHISIThd9GCAW6BWpID6eJNtueMlxMJwAFaf31Tbz6wjsQsjNVQ i6/TWR4eUPOg5Vzl7kxQBo9wZxZKSQOGOcKtv9k1mYohFLc1HBcrxoMmJrUQOTI0 P3gUEn+/GR6ay+dxhJ9rEJiy9+dhW3jJBDRM/yueFtFD7dFMR5A0t1yxkBwwduuA tCWdjcOkDaNdeK1fLo1uCnxTNE2hAzu6jzAyxXXk/boQzuAczX6Q4VR8G8R9kMLg NAGVgZtq6giTAAbz6iG8aHNnUgsyIzlzCRkfnQY0LtD8ihG7AajgSZrlngSiWjhh QftjM4Y5gO13iwUxRwLydtO6WJTpqR53+0Q82SHd1WTFkBswuOYS1a0akR8Pz4xA PQRbgPL2mwnwbsqyVxh7ziipF8PXCL3PhDGWKAH1ECQvkt9MI80GX4OOB5oL7lAh wmDP6Y57inaeTEAbYd3rM0i0TVf87uyidSfh6H6wWIsGf+KZgoAmrnH2MtmvBugU e+BGkhTdpcdV9Hlk7Ae2kJzG3uFk/1e9J1JhwlRffJD/ldvpiU4MiBCAVqExxCX6 eodi0IRHVhMKF1j5+hFPDLuA4bQD95UX65RrJWBKeRdOY03mFv6rbHmpxwSegUwi 5j1GLqWZm9G0BfWtkqyhRlECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 433268787244052316612589282466597789763374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 03:01:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 03:01:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emina.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866125965240693692401623982701165952931762621743268587713947638162173213256757151935261145228778723989876842163144633556060089006576723518378241259174725210614988308523601318565660913269438480592411322061075083468225871109398593110332358663806862104056733483059783603320076583020157429150934829365600931341815402294229872999969519137734598411645607958110331039652366012463765986776028028522443954721689587234188726955458161167023289839872969739249755312320104847631998189457491779719321600723296013742252830296575729512145631262297136513031863696869866319240560297708431085043832041051798626424096725092274616681479282129751879216513761962244576491324244189058547515176883461524230261781764404064075357741172000425410502130614226581206042372862913523090529292987098965913535330452015848786396077357523877544876138309182473082502177207012666698926859525273128027852418402415192458954385444780844784624524549110703087685053562656302200468640275912098464813555238507048927864993767768259719656460455320976309214145642761776569202272275069426159463412539219444622962396723197326107861179197207267038592693168434016582691827426938948320428368818977403360813357658363448348364729568756313677114009979041681693966344445261897993720745248337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dfb148dc0e24f1d1dffe158bc85ead85702e5195 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emina.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec9eb2c6d000004030047304502210089c0195e267b031ba3b3aa99b45839ae47f73982f16f3857f733f3766ffdc43b0220226acaf38345f0098be56fbf38fe7e1e13f015374f07b50213c4c70b8b6f952000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec9eb2c6e000004030047304502210088d48ffdaec468ac3cd27fdd78a2116866f73bdb190520277c78c849cc4af7ea02205d1a48f231a4e48755299cea72b3fb00939f2bfb5bedd2280d8bfb4737224a94 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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