www.emina.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:2e:80:6a:2c:62:94:15:a2:f0:b5:b0:29:3d:40:ce:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.emina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:2e:80:6a:2c:62:94:15:a2:f0:b5:b0:29:3d:40:ce:14
Serial Number (int): 319246671427096243008599313017113625546260
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:35:01:0a:30:d9:6c:d5:25:49:ac:24:d5:60:ee:8f:4b:49:a0:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:53:41:c9:90:e9:73:1b:9e:b0:1a:69:5e:66:8a:5e:ca:0f:66:63
Fingerprint (sha256): c0:91:24:30:56:43:97:1c:50:c9:b7:3c:81:96:9a:86:26:fc:e7:75:cd:28:4d:0c:d9:2b:f7:4f:90:dd:78:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.emina.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.emina.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.emina.org

Other certificates including the domain name emina.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.emina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319246671427096243008599313017113625546260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 10:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 10:36:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714438628744723582251075603810503265717061401100860621154363737445172373059258020918499154804486809523519952205575477337968603445771808986592670827376529943423222435725941648823334145860590803458600705708474993064583760960823266057456618229514189245413284889826217235617467681062733665462297405287655310163793859451342896813066824000826790160361130009194694895893931617767997988633704763722595199717629691428199518367750159125254850799962815682787845840248024231235883824283865195337746438402160758618627375286312281405510189483820381001634520028047467425630386021167232486240432741005140455140822419144365695559791382505979232619481419892419702321322832658121532271959217910823827792876194864481476155361330293846885660797531601289484760445544743820014539575332931291641768594886307710848615418613331051821857156552445488802636767611851244089980909385477274750890857013788654572976276878309088376395600377831641244821779855981871031232987911317543923670389723782800036194674075048976362931891829475502652149293488565358947998272974803580045881402643561806766998406031091863629732787431186560145215829589132526619600453287106936271718497674432379730533675468072770571641676235857779389792308170765583177967423861990078780027109446547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec35010a30d96cd52549ac24d560ee8f4b49a08e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001712b3aa6310000040300473045022100a0b7b54973dba60290f2917fcd7ee34062b97773a603fa35d99163d3204ad4c30220777e2d3cc2bbb21a3191d54425ca7b78c8cb4ef7e312b45eb58871ad01db08c100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712b3aa6680000040300463044022061b08d372ff4b85c3e43ea0a48bfed3b549461fb4bcfcfd0a9eb21d8714983df02200e24b566cd70cc19c3e439c1e4db0f75bf06c8d07d88ecbca5d4c9d16712ac5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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