ndjamena.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c6:e9:fb:aa:d3:0b:5a:e4:19:8a:a6:5e:48:4f:29:04:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ndjamena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:e9:fb:aa:d3:0b:5a:e4:19:8a:a6:5e:48:4f:29:04:e8
Serial Number (int): 416136069231646469119261383369506771502312
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:1b:90:c3:59:f1:a4:7b:32:ea:0b:51:50:10:8b:d5:fa:5e:54:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:fe:ac:7b:9a:92:37:82:8c:14:43:2f:86:f5:5a:63:50:22:d3:6f
Fingerprint (sha256): d0:2b:3e:79:db:4f:0f:d1:e6:33:99:66:b5:71:49:16:3c:5c:9d:3d:17:09:48:f9:5b:0b:c8:8b:b6:52:6d:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ndjamena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndjamena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndjamena.org

Other certificates including the domain name ndjamena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndjamena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISBMbp+6rTC1rkGYqmXkhPKQToMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTUwODEwMDZaFw0yMzEyMTQwODEwMDVaMBcxFTATBgNVBAMT
DG5kamFtZW5hLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOQI
vwkR4un9bdEdQBnH16N+D8YWO6xJPtRsDP1edHJig7AVZvAWAIdNWWiJYQRiJvtn
voZkAcCcefvjDQ834bPJaXhiC61ncwoWKyaVXHJWLpG2L/Q/exOqBBVRiYDgckDU
EOFqhCetA700xd86NdwDVeBE9SHijYeOKCOPqSpz2eqXwqUzeiaUl462vjOvosXi
4LovEZmFVB8AjK8es8a1UIOpkUAt7RF8wMwlLQVhNlXcA43U+RUiclavis+2YEmJ
U9guim3kMYjug3AmjQHetZjuZqhT4Ks50FG5saD5QX1UgM+GNzVn5QD4pWYBixxc
2wLRCr6W9N9EXLPqQk640UK8tSP9x7pCpJtJQw+1dDJrMejCZZB/bHGYDtELj3cX
RuztMaiGJA5xbXUBj19PYUfjeWMDV85GGZuLJ8pHICvUfnRkWTR0fqfDUpxJmRjf
Ko2vqm2RArBYfx/340NsCPOjQ5XDB4zMWcSEnK1+pq/JotnckDjppYJ2tSgRWYsl
4+KaX3XTMwbFhxOvEXlvOjuOc4t92Jm/9qg88f2Vh+WGEHZlUg/C6M2TG4R0McpZ
/5Yqi0ySdy5sBxuDDvUwfbGCzBfntCNpCr50e/PIDdL3Swy/jkntqO7CUBHK8pDJ
lu/g6QmeWreDcbYt+YV8m8Rj/gdVhd8RPzOEhhFDAgMBAAGjggINMIICCTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFJEbkMNZ8aR7MuoLUVAQi9X6XlR1MB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDG5kamFtZW5hLm9yZzATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22
IOo44FIe6YQWcDIThU070ivBOlejUutSAAABipgayQoAAAQDAEYwRAIgTq1bWpBy
2ntbRAcDdSOp7SGKUcWQgd00P44g/V6iE5sCIAHf80K6Rj7YvlS3syygD9oTRkp1
oDe3Y+8pHshEmzliAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4A
AAGKmBrJOAAABAMARzBFAiBNwsaRLU4XNq4DktCaWxrcA71VOdeRRlMzRS3CwNRn
pAIhALzec7goim8PnPXppxOU/mKxfierKs8b4KkF/iQ2mwSkMA0GCSqGSIb3DQEB
CwUAA4IBAQBZBllYmKfDyfXIfAjWJr7ega2HJ0NduPiw7RfdmulqLbe6bzxTF7r/
I3yYorycfkB1QDZuzFPU9hy6JB7phIN9wvzV/MsATL7RZinJARq87qRhGOIw2ez5
GU3gQwPM0OwoSs9CCG7K4vMl4gS0jADZHSAGT2IniMoCAHDsKhBP4b+yVgxXkb6N
AWpRQ2OspBINVN9WVHxHgRWG/LzLolRgFEguxfCT4qzBOaB/4rO3ZsLfBYCTWNZG
tTJpV1Oa0aa4Hl8rLxw3VNOVWQB3u3PTIn4T57bLgJJYIutJtXnMHdWweZmVI6B2
BZNNPjqtRQJqnns+ZgkaeEIQYsF05CDe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5Ai/CRHi6f1t0R1AGcfX
o34PxhY7rEk+1GwM/V50cmKDsBVm8BYAh01ZaIlhBGIm+2e+hmQBwJx5++MNDzfh
s8lpeGILrWdzChYrJpVcclYukbYv9D97E6oEFVGJgOByQNQQ4WqEJ60DvTTF3zo1
3ANV4ET1IeKNh44oI4+pKnPZ6pfCpTN6JpSXjra+M6+ixeLgui8RmYVUHwCMrx6z
xrVQg6mRQC3tEXzAzCUtBWE2VdwDjdT5FSJyVq+Kz7ZgSYlT2C6KbeQxiO6DcCaN
Ad61mO5mqFPgqznQUbmxoPlBfVSAz4Y3NWflAPilZgGLHFzbAtEKvpb030Rcs+pC
TrjRQry1I/3HukKkm0lDD7V0Mmsx6MJlkH9scZgO0QuPdxdG7O0xqIYkDnFtdQGP
X09hR+N5YwNXzkYZm4snykcgK9R+dGRZNHR+p8NSnEmZGN8qja+qbZECsFh/H/fj
Q2wI86NDlcMHjMxZxIScrX6mr8mi2dyQOOmlgna1KBFZiyXj4ppfddMzBsWHE68R
eW86O45zi33Ymb/2qDzx/ZWH5YYQdmVSD8LozZMbhHQxyln/liqLTJJ3LmwHG4MO
9TB9sYLMF+e0I2kKvnR788gN0vdLDL+OSe2o7sJQEcrykMmW7+DpCZ5at4Nxti35
hXybxGP+B1WF3xE/M4SGEUMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416136069231646469119261383369506771502312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 08:10:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:10:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndjamena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930298228422998113058644693993515608186028920255873152136913243683377811123526495544394572795223068678251373551092155602386953661591390904417199543904874073482774744379433286659534461171580573976842820413693411646512061736636692962648962877353263122828341436619824431867745934495357884464226539072065901231435970301779122197021131698283133382483217414014274812627157893273785973123998506123337433394210962451049294300102368535393362157292992412789130816232462634699879100770901700061243854558671706105730099056440149964767497930319588157993004530931472766842587257589211480706367502555585524472290158515610489573087245201097201300814330429396034268447815392494236645571152651375016452465772604181617654374766745364290341286779171413668064101802214474837725928228077905664296391968061748588448426013035363285977093425088732240493081046480425653607028188942925350331065342454412481638239593763543748652260196503160248267208208675974759824023931910336009747777714754519074778057400447849405628524375170036036546933450183378854758944849766147803928679742449290590781296016728563104416747484127748583476925502704635575507804303152489298412955865387031462227293488170970186543389111900005705453972184419357135356349315672442586219338404163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							911b90c359f1a47b32ea0b5150108bd5fa5e5475
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndjamena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a981ac90a000004030046304402204ead5b5a9072da7b5b4407037523a9ed218a51c59081dd343f8e20fd5ea2139b022001dff342ba463ed8be54b7b32ca00fda13464a75a037b763ef291ec8449b3962007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a981ac938000004030047304502204dc2c6912d4e1736ae0392d09a5b1adc03bd5539d791465333452dc2c0d467a4022100bcde73b8288a6f0f9cf5e9a71394fe62b17e27ab2acf1be0a905fe24369b04a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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