www.nordafrica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:81:e1:0b:c6:0a:8b:99:c6:a7:c9:cc:83:e4:52:07:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nordafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:81:e1:0b:c6:0a:8b:99:c6:a7:c9:cc:83:e4:52:07:7a
Serial Number (int): 267294296949983063737536548322663988332410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:b9:e3:1c:ab:19:b5:37:32:45:cf:01:b2:9b:0b:c9:86:25:5b:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:0f:69:22:1a:8c:03:b7:86:b5:f1:46:03:85:60:a4:fa:25:7c:e0
Fingerprint (sha256): be:a8:aa:82:54:16:5e:ae:75:14:27:40:9a:7e:26:25:30:39:bd:55:f1:d6:b0:b5:b4:56:4d:7a:d6:e8:98:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nordafrica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nordafrica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nordafrica.org

Other certificates including the domain name nordafrica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nordafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267294296949983063737536548322663988332410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 01:12:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 01:12:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nordafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849743000974406646030229031784079808927208201577117521685500272400075183967222317196774762081723754116206582119617343990907120438063009621084824460878516377178671553041933955648577531419247742417752537009144169114918467429218583278284823291228415448419539265985683498200856270167502213343528013322685708742576078132312523699139280926842541576231478416373867076348880369643187195746787408128715077279868128200240198478580685506393463194716837037889527951682289818298131738335262814007959459400556511777526335062184752237798975763733902787760870163604609504764093755278596987596903992717366533084671001681599097372441708288489932754086122390101596444433927808189928282923420476918056648740598658674640734613382323069243824517094705670907125502520057355967650062553198049558329759129370817263916366254194947906360347695005679019406271941158024146936123492971736320660037718215552807218279323470148899092907863045971420395884607092840004846826195668439735023862717662122657832121349622182602893774286621172917011388690976370305406169854654913528420574518728600788346504316780431000035312151904498603065756016876242600479648222683040209138373069455450691570500853195593098018422971599863515586906371593900245926617143592384370794943537971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb9e31cab19b5373245cf01b29b0bc986255b89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordafrica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7ff0e84b00000403004630440220093a8c5150b647b6f272c0b0058de0ef71336ec2fe27425ef7ad83f11353609f02206d953af2e47a433ef9b021b1fb5cb5cd00e4d63fac4ecfd9508c494ef40a4885007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7ff0ea1b0000040300473045022100bb1a31b61977ec9fb7b330d63871994da44dc579384d14bb2198e56e552d80f1022002dd6a35816f56f205ece7db1ae8f0e836483ac4705cfd61a7ce96f38ad8ca53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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