www.globaleaks.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:4f:82:0b:ef:1b:b3:08:80:b7:5e:72:de:46:0d:53:f9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.globaleaks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:4f:82:0b:ef:1b:b3:08:80:b7:5e:72:de:46:0d:53:f9
Serial Number (int): 337665792237880182651436487207401340883961
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:94:a7:c8:a8:7e:56:ce:94:5e:f7:90:85:66:25:cb:42:6e:85:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:48:da:8b:e7:fb:db:af:3b:be:a5:42:82:38:28:c6:29:3d:a9:1c
Fingerprint (sha256): d6:1b:ae:19:3c:39:9d:de:42:96:de:b4:e8:ed:dd:2e:fa:bc:18:bd:5c:70:da:f9:8b:71:63:cf:f2:dd:ea:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.globaleaks.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.globaleaks.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.globaleaks.com

Other certificates including the domain name globaleaks.com

(limited to 100 certificates)
ordinedivendita.com
globaleaks.com
11840.com
globaleaks.com
globaleaks.com
globaleaks.com
www.globaleaks.com
www.globaleaks.com
www.globaleaks.com
globaleaks.com
bsadomains.com
globaleaks.com
www.globaleaks.com
globaleaks.com
www.globaleaks.com

Certificate

The complete raw certificate details for www.globaleaks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337665792237880182651436487207401340883961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 10:55:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 10:55:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.globaleaks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831971465675771878933005984799140182119288850031879130415511906633789919987015503991544337431841832707932910426737452306530779672735880181515141290304687640877051020796003649630718341927919469938925864998760605518425661041469056290788211711538251666678815283267221335612971081585530349688375107774265859461946349846330865249466097462566674124229627158790795377776573591978474742320868781542838929869199531479243724228241650536290624464543052459606231797781546642632739551074033882220940312386748206227267461374159146000899894501510328383662416157216782012969860073971422081199610551647317589085206527075667186685810444995526275335007283898187998451810193488285465846562240663956218160004362948202909255865496677588285436821158444251757035837027663326338925690061493680977869810309866749070375571206278874139335448614238381588277071617996925229408853476900957407837667979419846955844050187725418761520842262733234777064339764220788328473328334014226539047008196530239453351373021985287665224157020261630136260568705378266639376011779977427844671118271436947053292045448668097898695644419374627970314096889588006526387793184533666556721731029523340568279710502699713843219501672291665018253248317024280310359302522093103416270601081707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac94a7c8a87e56ce945ef790856625cb426e85b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaleaks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3349a19900000403004630440220623e2b30e8b51740c7f0374c9067a63bbcb6f922ad1b7486a6fbd248aee94a0402207377f297f4ba086a30a81efef04b95923211e295b466418f0d2de9aac41da42e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3349a1a10000040300483046022100cf0bcf5ac8dbb1b7885f1c65d1fa729fb571b70c2e336c9e08b44a03cdbdf998022100cc805848a5f8070af4ecef7deb77a18cdb438b52d96bd453a93d220525d8ac92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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