www.loredana.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:07:3a:46:cb:42:b0:f1:ec:a3:60:b7:09:9c:88:92:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.loredana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:07:3a:46:cb:42:b0:f1:ec:a3:60:b7:09:9c:88:92:49
Serial Number (int): 287207924866332981764261527831346829365833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:1c:aa:05:20:cd:04:6b:9b:19:72:a5:aa:ed:04:87:70:8e:1e:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:6c:39:77:02:74:44:18:1d:fa:b5:74:99:70:60:68:89:2a:5e:e8
Fingerprint (sha256): cd:95:03:c3:9b:59:4c:ab:38:11:4c:a9:87:49:b7:ab:9c:ab:cf:a0:60:a4:20:32:bd:64:67:6c:aa:07:40:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.loredana.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.loredana.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.loredana.org

Other certificates including the domain name loredana.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.loredana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287207924866332981764261527831346829365833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 09:02:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 09:02:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.loredana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728391554979097355577288426830345672538318268406872993220593569184154051935106894224818689857697135441806281620035927110985306169454666603942166881759105573218538082492070981949986299631756099846183415389990052792154992919587184600113349903941993661509295656242911818678156896602849311808695806062974427497991399482447376767768884956478997438611044268959071678745156800817652669899704608027906979869237502328627414658421755329463806621481165691054206957131337228817764163054214046428104909985941351157022606687961845005425287889875127573174398854079912972800437399256739256102302142961818827404605034203241909810811318986453624891520188484835516504161061102972227847595262073515321102820099502467817319587524609124027426294428312170529315005537132080116374975366709291504581019410856552939673609952909638431655725135636181691645557866282204516934130618470405941552347704886594875101423825601307717226778027036531700182630350489271211932364474296271551648352228248007037540421327831846888808620044031810288444732962458998158886057333124523698510800842611951410741374963030384314549698391875873732469363144512715048068484005433923650700694052032046567209473147959157771919351197746277122094572971413497020660786013923392047915533229331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d1caa0520cd046b9b1972a5aaed0487708e1e14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loredana.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4f9d66740000040300473045022000d318295cefe77f70b8d4a1264f1a1424f328ee149f7e1e95a5db9a805f47400221008a8cba6c20b6b39f9d1a9a7a0caea054178744831ba7a9bffd63416b7d14b3db007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4f9d66710000040300473045022100d24646948c7f29fc7ea1a8de9cff572d64de7c1550944301f0a09139d18b679f02202b13b59920feace7d3d92086224c703ca5c14448a3aca7504049fa9f72690f26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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