santelena.org

Issued by R10

About this certificate

This digital certificate with serial number 04:61:92:fc:c6:2e:f0:36:11:f9:d9:3b:e6:fa:d8:66:7a:55 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=santelena.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:61:92:fc:c6:2e:f0:36:11:f9:d9:3b:e6:fa:d8:66:7a:55
Serial Number (int): 381651913084200904804376688766248766831189
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 45:a5:fd:14:f4:9b:2f:4a:67:a3:60:44:96:74:ca:25:eb:69:ad:3a
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 1c:cc:a5:22:cb:38:ae:57:b6:0d:10:ca:a6:a7:8c:dc:c5:79:01:cf
Fingerprint (sha256): f1:a4:bc:87:67:8b:ee:9b:c8:23:a2:86:de:a6:bf:a9:d9:5d:4b:f0:99:ea:d2:83:da:86:a2:8f:b5:8a:19:e8

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate santelena.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santelena.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santelena.org

Other certificates including the domain name santelena.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for santelena.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsZ5IcHrcsgfdHMFXCHYS
NINxI5Y+vxiVdKg2VUz686zYzY17myb8uGz7lu998RWFeyX5Ft8HoKcYfrv/QYYf
tJkXt/6/x780b9aJbo7ejzlU8+ge67U0F2tCdQb8T5AveijAnmBBUabjvJIctVT+
GbF3ipxyXDXfMYZA38pSa5nvpfV1uLn2RQk2XcIo34KVrPz8KOrNqWjNJ6F5bCbZ
oQDSO9iSNG5e+TWOlD3RBk8VPreCvhbzS6uZTEk/mVH+aPnUzm0EnXEongzXmDOI
ddxUyA+QHDazrf64uxsoqrKqr+pgnW7XV/+aVTPrdn9bNxrApsP84UWeDig3L69Z
Ch+V+C6lySdUUQefUOvWYr/J2hut5356IHaqO9EsC12FUnK95ZAxIdwW4mEWVA74
//5zDtfi49Sj8NzyaJNXaTVv5RUlvw04zlpmtwkPpcXrjbcvlsDY2E0L5hel4IxU
/E9Xh6HZvxBPvnbIuge7XRXA9WsxxLBC1ckkurMxYUu8DarxlUQtKT5Zzec5s9if
pItY05y2DmJPU3jvJozZzZsDWiL67/86X+4UZX+x2WI5+Z/pS7b0MThOKB5uXoWq
twjYylGw1Vf18mGKF/scGlbbjYrJttuuf1w0TFPqm4BKPGVs9InGKszAmfQzrZuG
MA6WMNkGsi4O5JJaE16UBb8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381651913084200904804376688766248766831189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 20:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 20:31:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santelena.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724619414744895011978600355772152919118751166497603484208344656113560580533289774526366126533598511234350661045270623891909167895199498957155942582162429262955720603689049396487540257087889793810102161901295305876851478661893961224518485545897319924490654430470575735232677008112975451596547219458857277802595986253320281329967080223954464346374471009169977780296266788427884015754868107102491364012548750552530502535282786309990238195768752588297286478490616590265620622112344574576149824198125978582697850721474716324948485942510795184653437787573115321289925604514028289764575541476242452140522857940277594091519216642615528474628079256955341600798859671049313690705824318178904593322065016938728141776684526653636159358311447278192881869441088969049683025753687956508328932943295934871505130691806468281810934403015595508155267087630803575019177712353957897296051404090619883207512648313558125077343855135103123326133547237912500089831293373936847990787453939245697678052718071596177997811453696421748372731287931059800270690313623587419262807018151109263886319193860232673403688228940726027648678286038144709365937296078612118158150604082072961082135912021433493400607315458907806228391320032214968732826961270965733847276455359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45a5fd14f49b2f4a67a360449674ca25eb69ad3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santelena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ffee9af23000004030047304502207781123c7602edff986b3345e04dde12abe838286666dc2eb390ee9a6e775f00022100c466fb8cd23dfa8d4f82b5aeac320d8528eb80789eb1b14d6ce2883de7adb528007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ffee9afe90000040300473045022100c5c85ae3f6b4b70b6381c036305155ff09634cbf547a6e4c71eaf5a9223415ca022075f5a48fc6cf4ae10fb9ada101aaa99a701285c1f7e442e675de090fc49f755c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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