www.valeria.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:0e:ce:23:7e:81:2a:83:c7:ad:0d:63:de:7c:4b:a8:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.valeria.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:0e:ce:23:7e:81:2a:83:c7:ad:0d:63:de:7c:4b:a8:2f
Serial Number (int): 262037102054123523431581108066122635913263
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:0d:27:2f:15:e5:4b:ba:bb:84:da:7c:a5:ac:9c:0d:2d:4e:55:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:d3:70:d6:ff:76:a8:7c:bf:0c:b1:59:58:06:df:6e:80:7a:59:69
Fingerprint (sha256): dc:59:cf:f4:95:a8:e3:b6:45:49:03:12:aa:d7:d2:8b:75:57:ef:f2:e7:a8:88:44:da:03:f5:4c:a2:5f:5a:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.valeria.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.valeria.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.valeria.org

Other certificates including the domain name valeria.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.valeria.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAwIOziN+gSqDx60NY958S6gvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDkxMzM4NDJaFw0y
MDAzMDgxMzM4NDJaMBoxGDAWBgNVBAMTD3d3dy52YWxlcmlhLm9yZzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALSJhpJjt7dZ+nZnWQdF+u0aBa+8BUr9
rMhyHyKIAjadEij9lmK/kSEr4PWbcIJOfPiHjrFxcTwhmzF6GhqeT19q51Dv1QPY
hi4srs2pj3zHidRWw7xf/rcAumuikGskSBHNKJCLwm4kFYMBhp2K7ho8ytSbBucZ
OHvHHXhWk7LuvGCSKyJZ4+yMIc9PUS83fxTyN7vsMkwREm1ARgoU8QoGsy6xOTdH
nbtdrjO8a7cg2t2KmGjZOqoPQg04oMAWLXET62xYB3q7SfNam/bxajD4qnv+Yo0I
znHLi2dO5WK8cE9Ikt/hgkh8QVFzpH4QNZIDHA5BNpM2FNGNwuwqiVuS8IpSnPeZ
b1tQNTtPkPCR00TT23Zc8DIji4YC0RqUa5Jx4uRl2NTgl8AYkd5jh85m5Rx07svs
/uuidoZNuik2rIRGEX1E4k3KMCjtxCpKofRJuK/5c8ydU8ylvLxymo6V20F0Drx1
sVWpD9YEgUiFVCoYwlj0YCK502snslS3MEB8sgzoKCYh/A054K6aruVO0AHNgdyo
kJ9fuKRz1t6I+VY4JCfW4tSi0nB3pdWF1rNToXan464v0vBDx2aslGXuvGQ6yr/b
sDGHZYdlwPOgfNKZlg00+GEG9PKh6HKmoxslS0VbStma5lsbfhU4RULNhn7Inyut
2yKPWazD/pbLAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBsN
Jy8V5Uu6u4TafKWsnA0tTlUuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnZhbGVyaWEub3Jn
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu6xkh
BAAABAMASDBGAiEAnCvJOilxTNhbM852XsWfdv7FGRzFO8NrQAs88GM1IGYCIQDu
gG/MCzryXXFFEICwH3b6ExcxuYDf0MESZa1hrY3xCgB2ALIeBcyLos2KIE6HZvkr
uYolIGdr2vpw57JJUy3vi5BeAAABbusZIPcAAAQDAEcwRQIhAK9YOPkzQAqARaLj
wcozXO7U606ZVLK88GTiFAOuLNP/AiAB7dRrmPuF2sgbyzNOOpkvfyar6Xzf916/
NPXLap/tNzANBgkqhkiG9w0BAQsFAAOCAQEAMfRfwBHUZmGuwiloGZR3hZFaobn4
9yOgNS5yKfgpAARIPNqi2RGPy9LPzIEX27qIuoLqWIcesTik4iUMFjoRWFAy9qdn
WhPzYyl85bN0VlSXfeO0sf13aY8LTMOkxkFWfYub2hETuQIhhBZDZKBfrV8ejonR
vahpxKo2mgrIyjPeJBq8k8OvqntQoM/AXUKO6CT2nblQp1+BIWEbO3eVHomYCmXf
afEAUBADfkB81aDxIp5lADSmyl1LsPGwmzv2dOLdNx6vKgAgW5eIc2tYN8BC7gRG
6jMYbmT+leL9SYTdHrh/RSEYHWU+1EZjd7DmJqp4Eybn+6TneRcCG2G2gQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262037102054123523431581108066122635913263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 13:38:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 13:38:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.valeria.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736527556418705101479940843467481821881381435422200395680688215232416962940046048742342102763632392424884714541931166088931957604180374872901005542913024997822188117481229154049694416650759032610388479700558136360829287398923844342092068021747882542474472019187807258802234638834381054685595220612224848508005099467520589477814867722790752783617676628028276113864599375818452031366092323880416225186475264487797630625465810405978105511817702639970351814012629893166154588132320040288007904542580462794276030618146096665883718620594863556026273820289019593355874339747622002831961630104402673332226160737322746700534887518016029810023685776079835559080468343792650706897923520074267992185634391262853939584917994849213494119882223289282353483388790640552707260660784264420001050478562195418628576543377535657467896969218990520396010827813962879294301460697919940329997481636733825595424275643000701275003913090751725586780630333684114567081282068485007009905811029936930599342425326340324427293791248049322620541196429932819088169243303970850871387692531695567123729798742888472044112679535344992456565624616219837657639529549273547662376571713243600498884439921728798028664787144645712446942654960538257288645868260814772089489626827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b0d272f15e54bbabb84da7ca5ac9c0d2d4e552e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valeria.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eeb19210400000403004830460221009c2bc93a29714cd85b33ce765ec59f76fec5191cc53bc36b400b3cf063352066022100ee806fcc0b3af25d71451080b01f76fa131731b980dfd0c11265ad61ad8df10a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eeb1920f70000040300473045022100af5838f933400a8045a2e3c1ca335ceed4eb4e9954b2bcf064e21403ae2cd3ff022001edd46b98fb85dac81bcb334e3a992f7f26abe97cdff75ebf34f5cb6a9fed37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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