westafrica.ohchr.org

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:91:1f:6d:fc:b0:69:d4:7f:3a:93:32:da:80:0c:43:09 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=westafrica.ohchr.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:91:1f:6d:fc:b0:69:d4:7f:3a:93:32:da:80:0c:43:09
Serial Number (int): 329586232430862601067829113653976562942729
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:b0:75:df:90:c0:4e:28:fe:75:0b:eb:03:f3:d2:4c:f0:6e:b7:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:79:4b:85:35:7c:2b:ae:fb:15:dc:db:59:32:3f:ca:fc:2c:f8:a2
Fingerprint (sha256): b3:96:3c:f4:df:27:5c:5c:51:65:3d:eb:04:06:03:68:2c:fa:9f:56:21:b7:aa:34:00:5a:48:41:54:01:46:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate westafrica.ohchr.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for westafrica.ohchr.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

westafrica.ohchr.org
www.westafrica.ohchr.org

Other certificates including the domain name ohchr.org

(limited to 100 certificates)
*.prod.ohchr.un-icc.cloud
sm.ohchr.org
*.test.ohchr.un-icc.cloud
cambodia.ohchr.org
romena.ohchr.org
sm.ohchr.org
cambodia.ohchr.org
sm.ohchr.org
sm.ohchr.org
sm.ohchr.org
bangkok.ohchr.org
*.prod.ohchr.un-icc.cloud
digitalhub.ohchr.org
cambodia.ohchr.org
sm.ohchr.org
bangkok.ohchr.org
sm.ohchr.org
cambodia.ohchr.org
romena.ohchr.org
europe.ohchr.org
dreamlighthelper.com
digitalhub.ohchr.org
webmail2.ohchr.org
auth.kindo.staging.boik.dev
www.westafrica.ohchr.org
webmail.ohchr.org
testrightsview.ohchr.org
webmail.ohchr.org
sm.ohchr.org
remote.ohchr.org
cambodia.ohchr.org
digitalhub.ohchr.org
cambodia.ohchr.org
*.prod.ohchr.un-icc.cloud
seoul.ohchr.org
*.ohchr.org
sm.ohchr.org
seoul.ohchr.org
westafrica.ohchr.org
searchlibrary.ohchr.org
sm.ohchr.org
waps.ohchr.org
fifa.shapegames.dev
seoul.ohchr.org
ngopub.ohchr.org
cambodia.ohchr.org
sm.ohchr.org
seoul.ohchr.org
*.in.ohchr.org
login.ohchr.org
sm.ohchr.org
sanctionsplatform.ohchr.org
www.westafrica.ohchr.org
webmail.ohchr.org
romena.ohchr.org
westafrica.ohchr.org
cambodia.ohchr.org
www.westafrica.ohchr.org
extranet.ohchr.org
rightsview.ohchr.org
webmail.ohchr.org
sm.ohchr.org
*.ohchr.org
spdb.ohchr.org
easset.ohchr.org
grants.ohchr.org
esurvey.ohchr.org
www.fotoramausa.com
pms.ohchr.org
testrightsview.ohchr.org
rightsviewtest.ohchr.org
grants.ohchr.org
www.digitalbharati.org
*.ohchr.org
sm.ohchr.org
digitalhub.ohchr.org
sm.ohchr.org
ngopub.ohchr.org
sm.ohchr.org
uganda.ohchr.org
*.ohchr.org
cambodia.ohchr.org
rightsviewtest.ohchr.org
rightsview.ohchr.org
fieldsmail.ohchr.org
*.prod.ohchr.un-icc.cloud
sm.ohchr.org
cambodia.ohchr.org
share.ohchr.org
CSWEB.OHCHR.ORG
romena.ohchr.org
sni.cloudflaressl.com
westafrica.ohchr.org
esurvey.ohchr.org
sm.ohchr.org
searchlibrary.ohchr.org
romena.ohchr.org
sm.ohchr.org
sm.ohchr.org
cambodia.ohchr.org

Certificate

The complete raw certificate details for westafrica.ohchr.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxulaABR0gp49lNPydCQs
GVbX6oALslDxc/STwu+rSDdlD8ylAVGyZUy0JcWCowGNVZZn9BK3UZT2EP33lzD/
ZN7HRwmUgKN4SLBRkdAojNHtGUVC67uIWY+ICWVKfgVmwOwV0I2a+c5tDv8KEo+V
Q47NX3QVAfm9hFqlLVVXk406fjQcdEOj4s6rv2q3bHcbzU7kRMBdXumtud6q9ufw
yrITHAYNfZSeb32G2mFtCDMDMkbcX0wglYPQjnKXbrvH88USb315m7DIxlckJeiD
dv9XqKSRErxokxa8abeZEBgqUfdCqmnbXUWBS+aqTkqMl+3eGByXxBzkEKm8jAoZ
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329586232430862601067829113653976562942729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 16:43:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 16:43:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'westafrica.ohchr.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25110254328065128931977603240892267820087679043147810979709224616036650122893161379570493847723180208318498166994287672182201042855780343383008949538454497059343394163905146556637990164588324157685604289847799035396202221121607317114915369407458097781059525929232169035318774003395929852604671739838747928940725260634726043726757504764244994160309300284937914628201492611626722189004378188631470852540837618867891589952821285487303258731993498413249231485149093808398677137285069613889648653364077288666538608416092781542440161625034400573751010242709613448976169286192343796737138801261122914656874978223039636445509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7b075df90c04e28fe750beb03f3d24cf06eb74e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westafrica.ohchr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westafrica.ohchr.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188f3a77276000004030047304502203e9b6c6c6821599fb44d2c6d950a541485d86664c551495ef65efb90a6c75a79022100e610f4d461836a67d24856523148895d483967df6d766d0dd055a3391eb0b91f007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188f3a772650000040300483046022100eb9f56405b6cb9630d9f596c149d3e4982cfd4a6bc44098d60e1bf0a0f7536b7022100f03915456b88720d1afbfe596f7219c8ca319d430b6761a6254bf57529990c78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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