www.mindu.app

Issued by R3

About this certificate

This digital certificate with serial number 04:a3:59:8a:97:ea:0f:d0:dd:f8:5e:d5:81:c3:f3:4f:d7:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mindu.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a3:59:8a:97:ea:0f:d0:dd:f8:5e:d5:81:c3:f3:4f:d7:1a
Serial Number (int): 404034190444933426409609342845350455531290
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:17:07:20:10:c7:d5:58:50:d5:03:dc:ff:12:a4:c1:3c:7b:0c:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:79:ed:81:48:b7:3e:6f:43:41:23:58:9a:17:ed:3f:66:9b:77:18
Fingerprint (sha256): e0:3e:84:39:74:fd:ae:f1:71:35:a5:ef:d3:04:5b:f6:c3:a5:7a:1f:a5:c3:84:d9:70:6c:5e:28:fa:bc:fe:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mindu.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mindu.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mindu.app

Other certificates including the domain name mindu.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mindu.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISBKNZipfqD9Dd+F7VgcPzT9caMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjYwOTQ1MzlaFw0yMzEyMjUwOTQ1MzhaMBgxFjAUBgNVBAMT
DXd3dy5taW5kdS5hcHAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD7
uttmk7H3EFsgnIjsgAiCt4q6RjQZZZ9MDuiajhLiLHH8nSyJgxw8xVHrPfZ6Twrd
kDx20cXYdFy+rhvfxeYN71J1x0OcLLMn9+MaUw8fPpy7AP80vUFoeODNSps1skNN
ArX3xNZ6UGjPsGqonnNuwDVEFpk8gUAbc5sMgpKO5FPUY84SsMGxEuW6LV43JcBh
5SuXxwiIi+nwPoNbnQqLijZi6e9WNkAN9L0lRZ1lI2kMjXj2vywcN7LZdDRinAFD
xOq55sLQIDCYTs4A2RBOTtO5CnSNAZTJXAT1GjPR4TquR+o8+RwUw0Ic/LYgMJUB
hhDO1GLju5d/BRJQuch/MKYWoUVwHS+bu0dXagKPF0Oa8vo6TIsEl+VhVkWAe2PR
zAaL4brp5hYpR16J7/do6J0mpZw6EFQAIQ+jT5NV3zPbBocvDvU/UShfhXd2FW0V
7SQVtDvaRq3DR/llXZSOySqsCtySWvuxdy3CDAUVY3V1gyosJNfhAfAyH3UbHRRG
i5oOtRUd3ya/NyxoINLsJjHKR7AaiLAEVjianD+SiqGGjH2V6b+eqtqBGIb5owjH
cyTJ6HSyaFy+2nXaEXd1H68bjLyZCvukbAatTTKjdzvfrheopUUZAgyWa2fqDfNQ
X7DZCSaHguI6dZp+lQAuNyqGF7cLeZphMOP+/xy0hwIDAQABo4ICDjCCAgowDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBRsFwcgEMfVWFDVA9z/EqTBPHsM9jAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg13d3cubWluZHUuYXBwMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3
LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGK0Rg5JwAABAMARjBEAiBv6EFA
5foog7CgKMuDqSThmBTtvjhnRDhRls9J3ptiwQIgF6gVZtqa21r/4/VDkEOHoXGJ
mGcu/o80Qbq8p7Nwvq4AdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC
igAAAYrRGDlRAAAEAwBHMEUCIQCzdhWcNs4J5SQrDhKDdkzJGcuhg3oFROMLdmlH
w+a+DgIgZc92bLXS9P908Dd/QvkJfdAElEAR5v2sdxZMFei69YYwDQYJKoZIhvcN
AQELBQADggEBAGVbZcw+ECh3dp/VF0oINSuZajpomQl8mbDhfXiEtlotvaysGLu9
198VN4CcV1tVwHeP+473DGQFeKbkuu+Ue2nX1R+XV6NEbhxCsFidVUuRc7sWPnvB
6yss8O9fX+4sM4cEVcGMnGjHUdjG1XYUYOYE1rHIOrhOrly03fp0oHacQ+uAl310
rif/Mpcpyu45dMF+llQSzcydBUScnuZXA7+1PACixb2ypXx0OLUmDEMEpdYu/m4T
uTwcn5EmZVwTWxYZfZYmbK2Gmx7P4+lGonYZWaj4EFkz0px6lcbwmB/Ap+pap7Sl
3Tj/gJp4zFe5SBmd2VNREPWNmercWWuXyLk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+7rbZpOx9xBbIJyI7IAI
greKukY0GWWfTA7omo4S4ixx/J0siYMcPMVR6z32ek8K3ZA8dtHF2HRcvq4b38Xm
De9SdcdDnCyzJ/fjGlMPHz6cuwD/NL1BaHjgzUqbNbJDTQK198TWelBoz7BqqJ5z
bsA1RBaZPIFAG3ObDIKSjuRT1GPOErDBsRLlui1eNyXAYeUrl8cIiIvp8D6DW50K
i4o2YunvVjZADfS9JUWdZSNpDI149r8sHDey2XQ0YpwBQ8TquebC0CAwmE7OANkQ
Tk7TuQp0jQGUyVwE9Roz0eE6rkfqPPkcFMNCHPy2IDCVAYYQztRi47uXfwUSULnI
fzCmFqFFcB0vm7tHV2oCjxdDmvL6OkyLBJflYVZFgHtj0cwGi+G66eYWKUdeie/3
aOidJqWcOhBUACEPo0+TVd8z2waHLw71P1EoX4V3dhVtFe0kFbQ72katw0f5ZV2U
jskqrArcklr7sXctwgwFFWN1dYMqLCTX4QHwMh91Gx0URouaDrUVHd8mvzcsaCDS
7CYxykewGoiwBFY4mpw/koqhhox9lem/nqragRiG+aMIx3Mkyeh0smhcvtp12hF3
dR+vG4y8mQr7pGwGrU0yo3c7364XqKVFGQIMlmtn6g3zUF+w2Qkmh4LiOnWafpUA
Ljcqhhe3C3maYTDj/v8ctIcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404034190444933426409609342845350455531290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 09:45:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 09:45:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mindu.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1026968435253212609350032956990329768599750991352737165335009028313977521155387823618916669425680737659928016327179643520171679155240027914219261205761012952553270426651173306476307920715601660758733388512322512348115936135784595932134412144847384070294233476154946888470190187750682646803129246121518087126227516695690307707516293197581544887925031078489866145788610405998525432319611734452687590524969406909211608868106925261867072106682123298320180174712238988726961982514159695386155595850944572534977669131456900560619684849845910524519355964728626428537988043045335997279791305177808588254279983894116363916529115215914246918614497158478927082281803778417511088921851237524426233556480885512907157996575275724386042247352036713503796621144967652338229126058629999000010717473000416355455192095257025013687160970893909008382277684077654310747383065307632705267117331175128271111523088105748028212542538346404600673954878335956146509551529631584065618244528213417461184716382131013816190837276581543861165630372079211069985830936903929309956701939145288777732777754646395987066682316024312220895405771991270295840212991524483187862622874498470514190847582478083799133509339669692071279239194595427093904235319813434432122458518663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c17072010c7d55850d503dcff12a4c13c7b0cf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindu.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad1183927000004030046304402206fe84140e5fa2883b0a028cb83a924e19814edbe386744385196cf49de9b62c1022017a81566da9adb5affe3f543904387a1718998672efe8f3441babca7b370beae007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ad11839510000040300473045022100b376159c36ce09e5242b0e1283764cc919cba1837a0544e30b766947c3e6be0e022065cf766cb5d2f4ff74f0377f42f9097dd004944011e6fdac77164c15e8baf586
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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