www.emina.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:aa:2e:80:6a:2c:62:94:15:a2:f0:b5:b0:29:3d:40:ce:14 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.emina.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:aa:2e:80:6a:2c:62:94:15:a2:f0:b5:b0:29:3d:40:ce:14Serial Number (int): 319246671427096243008599313017113625546260
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ec:35:01:0a:30:d9:6c:d5:25:49:ac:24:d5:60:ee:8f:4b:49:a0:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 96:53:41:c9:90:e9:73:1b:9e:b0:1a:69:5e:66:8a:5e:ca:0f:66:63
Fingerprint (sha256): c0:91:24:30:56:43:97:1c:50:c9:b7:3c:81:96:9a:86:26:fc:e7:75:cd:28:4d:0c:d9:2b:f7:4f:90:dd:78:c9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.emina.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.emina.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.emina.org
Other certificates including the domain name emina.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.emina.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA6ougGosYpQVovC1sCk9QM4UMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzAxMDM2MzZaFw0y MDA2MjgxMDM2MzZaMBgxFjAUBgNVBAMTDXd3dy5lbWluYS5vcmcwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCvH27NMLGY3ze+GA5qNZveI1X6j4Egy1G6 lzHoSeTllShuZS1YIuNLmU10W5ppGQA1qCqgMRcnRLUTn4ILKpzHhJJmdbxyCqqD 7fleIpCiaQSRKuvM2Z3c5vwQtZ6E6+yK/cJCxEKLRpKiGfGobV1hKl6LOKvz1g4C deanQvBCR1LnHkOM1doTcwfuIPuMJIybyzDBNQ8qqoS+pFWZ56VnCkyGGWmeJ2+N /HUBFFLELDD9NtAnugUYTnaEZgSFXLW+NGkdVMmWmFMLusvOlpkvQOLcYI5H2dLQ vXND3caqy9/7JJpudukpr9kglFc4ZQuJeF55emdJIFYM904VAq3fx+pTLPSxSPIm 460HdN0kEqfSxtRtZIrDl1B4DIvauwRyNgdttr0avwSlgZbe5F9VVCqJgsAT5oBM XPxbrefv2Nni9bpvr0iOFO+FW8MSZPtUcyZiHOJWI2ykzEwypmjszw7sFXTIOy6P 9CgdwFlR9DrT/vvYbKlr2JtPpLN4V9z398x/Mp/b9pG5G4zrh0fogKTXT0kJ7viO VSMxuGDnHoQisx+NomuevgZ5PcOdaCzxXokTJSZVvMH6X1QNje6awS6AWZtvnYue 9/iOByyNzwHJBM7JC5UXbTUv2lPHqFb5vggvFkw+M/SqtqcdTCk96ifTSzB1waUu Z8iFHxkTkwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTsNQEK MNls1SVJrCTVYO6PS0mgjjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5lbWluYS5vcmcwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXErOqYxAAAE AwBHMEUCIQCgt7VJc9umApDykX/NfuNAYrl3c6YD+jXZkWPTIErUwwIgd34tPMK7 shoxkdVEJcp7eMjLTvfjErRetYhxrQHbCMEAdQAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAXErOqZoAAAEAwBGMEQCIGGwjTcv9LhcPkPqCki/7TtU lGH7S8/P0KnrIdhxSYPfAiAOJLVmzXDMGcPkOcHk2w91vwbI0H2I7Lyl1MnRZxKs XzANBgkqhkiG9w0BAQsFAAOCAQEAkOW2WICTkqoIwHLxdnRgcKNnyNtmsVJ15Mf7 VNmDj2Z1Wiw5ZSEJCVzhNAXwjgHdui45pK2z430yX67vyvdxbI21JYzYBUhrINi3 BxNybcP7ThOLFXtlSKUot/SRyrIMPwRRvEOHQisZLLpDP9BzxoLhkKGYZ+gdAUDJ T6trDwGtXRpZoTJArYE0g/1sZDGRVTF7e2eLDq+oPTG+tRib15v/3IR9APUXQlFS F0+hZ8TPwWwOfml3R4gkevP4nYEndaBlW4U/u41NxVvDigGBTnWHWAH+kG18PG2e UNzOewVvRYV8CTqlw25Q6BlN0LQfZPutVujIbP2BjDPqZf8G+Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArx9uzTCxmN83vhgOajWb 3iNV+o+BIMtRupcx6Enk5ZUobmUtWCLjS5lNdFuaaRkANagqoDEXJ0S1E5+CCyqc x4SSZnW8cgqqg+35XiKQomkEkSrrzNmd3Ob8ELWehOvsiv3CQsRCi0aSohnxqG1d YSpeizir89YOAnXmp0LwQkdS5x5DjNXaE3MH7iD7jCSMm8swwTUPKqqEvqRVmeel ZwpMhhlpnidvjfx1ARRSxCww/TbQJ7oFGE52hGYEhVy1vjRpHVTJlphTC7rLzpaZ L0Di3GCOR9nS0L1zQ93Gqsvf+ySabnbpKa/ZIJRXOGULiXheeXpnSSBWDPdOFQKt 38fqUyz0sUjyJuOtB3TdJBKn0sbUbWSKw5dQeAyL2rsEcjYHbba9Gr8EpYGW3uRf VVQqiYLAE+aATFz8W63n79jZ4vW6b69IjhTvhVvDEmT7VHMmYhziViNspMxMMqZo 7M8O7BV0yDsuj/QoHcBZUfQ60/772Gypa9ibT6SzeFfc9/fMfzKf2/aRuRuM64dH 6ICk109JCe74jlUjMbhg5x6EIrMfjaJrnr4GeT3DnWgs8V6JEyUmVbzB+l9UDY3u msEugFmbb52Lnvf4jgcsjc8ByQTOyQuVF201L9pTx6hW+b4ILxZMPjP0qranHUwp Peon00swdcGlLmfIhR8ZE5MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319246671427096243008599313017113625546260 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 10:36:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 10:36:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emina.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714438628744723582251075603810503265717061401100860621154363737445172373059258020918499154804486809523519952205575477337968603445771808986592670827376529943423222435725941648823334145860590803458600705708474993064583760960823266057456618229514189245413284889826217235617467681062733665462297405287655310163793859451342896813066824000826790160361130009194694895893931617767997988633704763722595199717629691428199518367750159125254850799962815682787845840248024231235883824283865195337746438402160758618627375286312281405510189483820381001634520028047467425630386021167232486240432741005140455140822419144365695559791382505979232619481419892419702321322832658121532271959217910823827792876194864481476155361330293846885660797531601289484760445544743820014539575332931291641768594886307710848615418613331051821857156552445488802636767611851244089980909385477274750890857013788654572976276878309088376395600377831641244821779855981871031232987911317543923670389723782800036194674075048976362931891829475502652149293488565358947998272974803580045881402643561806766998406031091863629732787431186560145215829589132526619600453287106936271718497674432379730533675468072770571641676235857779389792308170765583177967423861990078780027109446547 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec35010a30d96cd52549ac24d560ee8f4b49a08e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emina.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001712b3aa6310000040300473045022100a0b7b54973dba60290f2917fcd7ee34062b97773a603fa35d99163d3204ad4c30220777e2d3cc2bbb21a3191d54425ca7b78c8cb4ef7e312b45eb58871ad01db08c100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712b3aa6680000040300463044022061b08d372ff4b85c3e43ea0a48bfed3b549461fb4bcfcfd0a9eb21d8714983df02200e24b566cd70cc19c3e439c1e4db0f75bf06c8d07d88ecbca5d4c9d16712ac5f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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