tantawy.tk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4b:e7:48:60:bc:e0:5b:db:ac:7a:5d:f3:94:92:1c:02:1a was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tantawy.tk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4b:e7:48:60:bc:e0:5b:db:ac:7a:5d:f3:94:92:1c:02:1aSerial Number (int): 287165462788826906968926367285407939035674
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:8b:0a:d5:b8:3e:79:63:ef:7d:02:71:72:5d:77:26:c5:b4:ca:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a2:e6:c7:bb:92:6b:41:ec:21:94:2b:7f:f1:6d:52:10:68:7f:68:e7
Fingerprint (sha256): b6:ef:ae:7e:77:70:ef:71:37:b5:97:72:fb:5e:ce:63:2f:c6:a4:81:11:0e:52:24:0b:68:50:2c:eb:42:83:fb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tantawy.tk
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tantawy.tk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
divxfilmi.sos.u-host.in
divxfilmi.tk
ipv6.divxfilmi.tk
ipv6.tantawy.tk
mail.divxfilmi.tk
mail.tantawy.tk
tantawy.sos.u-host.in
tantawy.tk
www.divxfilmi.sos.u-host.in
www.divxfilmi.tk
www.tantawy.sos.u-host.in
www.tantawy.tk
divxfilmi.tk
ipv6.divxfilmi.tk
ipv6.tantawy.tk
mail.divxfilmi.tk
mail.tantawy.tk
tantawy.sos.u-host.in
tantawy.tk
www.divxfilmi.sos.u-host.in
www.divxfilmi.tk
www.tantawy.sos.u-host.in
www.tantawy.tk
Other certificates including the domain name tantawy.tk
(limited to 100 certificates)
Certificate
The complete raw certificate details for tantawy.tk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgISA0vnSGC84FvbrHpd85SSHAIaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTEyMTI2MzBaFw0y MDA0MTAyMTI2MzBaMBUxEzARBgNVBAMTCnRhbnRhd3kudGswggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCp62zuFU0grjmx7sV181C5TQMKYp4sAAQeq3GO UZvPtwtVLmSyRJCXtMySTEsO+2aUN05yYQCJX+ABFf5NAXQCRXzwprVvbCU4QBii Vq6Ufzn/GSYaqV+pVLE7aasNq+EKtSWrteYC0uGv4cWMaIE71UZ//Z//e4y6AEC6 R92M5o71O7dOusVpyXI8vjb4gkYUxjbAu7T41gSGXay/63rSGstAYocLf9zPb8Jc IH4Rnr7aM5FJSogCYVoNOqvHQ3v4GNfJ9Gx9z0A0eL2mIfijjKKGF+HlkaR3XXup /mLrpCSHwl4O5twP+ECu/7JxkRHL97fxzZTI7l4JM9lS2XHfAgMBAAGjggNDMIID PzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBKLCtW4Pnlj730CcXJddybFtMowMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gfcGA1UdEQSB7zCB7IIXZGl2eGZpbG1pLnNvcy51LWhvc3QuaW6CDGRpdnhmaWxt aS50a4IRaXB2Ni5kaXZ4ZmlsbWkudGuCD2lwdjYudGFudGF3eS50a4IRbWFpbC5k aXZ4ZmlsbWkudGuCD21haWwudGFudGF3eS50a4IVdGFudGF3eS5zb3MudS1ob3N0 Lmluggp0YW50YXd5LnRrght3d3cuZGl2eGZpbG1pLnNvcy51LWhvc3QuaW6CEHd3 dy5kaXZ4ZmlsbWkudGuCGXd3dy50YW50YXd5LnNvcy51LWhvc3QuaW6CDnd3dy50 YW50YXd5LnRrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqO snMAAAFvlrdCxAAABAMARzBFAiEAkR2R8PdTWCOralnJrlGTqSZ4i/hgl3ATRoM9 I1LAn0oCIH8zGRVj4poOF8JTRKPRHRbXmkJpEo3TTpNr2D8mAa/6AHcAB7dcG+V9 aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvlrdDGAAABAMASDBGAiEAlGpS T+BZzI99IX7rR/M3mSaN9fKx7JR5k7TowuH59GsCIQDV6TVQxOHIwB3IZVCVnzbc IGIFySQ9J9Q+OQerwxay7zANBgkqhkiG9w0BAQsFAAOCAQEAXznYI/dBy14rR5AK Ghld9JYfKeJDV/s2XGIDy5mbsd9/xP3gam+W21DwYBRpbbMIAecyuWzB97lpwr9f VINKzfael0VrLUXD5J5ET7a7V7rLdCvT/6vXI9VeQKyL/F0x4p7BZsAGRRa6s2MT P2B2kSZlyeewwAfic9dRJYbrkF0xpN8ikwzW7SRGQA6al6Yu5IYnzveJSxYcBpF8 98uXBjsVe+4IEvLxL28ad/y1D+kSYICRZoo51wS5wVT9++sEj8xAt+3tVgqWn6rn Dl3BWm8YXizse+CM/vcdJT4wPDh1/U9t8XzdW6APS+LjNZY72U8EW43gFAdRGhYL taUkNw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqets7hVNIK45se7FdfNQ uU0DCmKeLAAEHqtxjlGbz7cLVS5kskSQl7TMkkxLDvtmlDdOcmEAiV/gARX+TQF0 AkV88Ka1b2wlOEAYolaulH85/xkmGqlfqVSxO2mrDavhCrUlq7XmAtLhr+HFjGiB O9VGf/2f/3uMugBAukfdjOaO9Tu3TrrFaclyPL42+IJGFMY2wLu0+NYEhl2sv+t6 0hrLQGKHC3/cz2/CXCB+EZ6+2jORSUqIAmFaDTqrx0N7+BjXyfRsfc9ANHi9piH4 o4yihhfh5ZGkd117qf5i66Qkh8JeDubcD/hArv+ycZERy/e38c2UyO5eCTPZUtlx 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287165462788826906968926367285407939035674 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 21:26:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 21:26:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tantawy.tk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21450366184022513497564844755584960450124185241488205658158246053569520561002963470273914074129774361383494812048355682031598181138779203368184997383272475375028082812641316087725030276893704956964187225245153879876032913795378704118059076097040471281553859790473084840733795367597334246887748276052379069961031692638198416717004017605207197254881620268514340354701286665197560575421827112047192382414254354775539243828926665218928916028839804319643764765100836860594245493718339975631560781029102552318414851453799608592267527720822800773489025460075599616723551017188123775502177612989072615541220946911911017542111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 128b0ad5b83e7963ef7d0271725d7726c5b4ca30 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divxfilmi.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divxfilmi.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.divxfilmi.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.tantawy.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.divxfilmi.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tantawy.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tantawy.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tantawy.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divxfilmi.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divxfilmi.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tantawy.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tantawy.tk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f96b742c40000040300473045022100911d91f0f7535823ab6a59c9ae5193a926788bf86097701346833d2352c09f4a02207f33191563e29a0e17c25344a3d11d16d79a4269128dd34e936bd83f2601affa00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f96b743180000040300483046022100946a524fe059cc8f7d217eeb47f33799268df5f2b1ec947993b4e8c2e1f9f46b022100d5e93550c4e1c8c01dc86550959f36dc206205c9243d27d43e3907abc316b2ef . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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