santelena.org
Issued by R10
About this certificate
This digital certificate with serial number 04:61:92:fc:c6:2e:f0:36:11:f9:d9:3b:e6:fa:d8:66:7a:55 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=santelena.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:61:92:fc:c6:2e:f0:36:11:f9:d9:3b:e6:fa:d8:66:7a:55Serial Number (int): 381651913084200904804376688766248766831189
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 45:a5:fd:14:f4:9b:2f:4a:67:a3:60:44:96:74:ca:25:eb:69:ad:3a
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8
Fingerprint (sha1): 1c:cc:a5:22:cb:38:ae:57:b6:0d:10:ca:a6:a7:8c:dc:c5:79:01:cf
Fingerprint (sha256): f1:a4:bc:87:67:8b:ee:9b:c8:23:a2:86:de:a6:bf:a9:d9:5d:4b:f0:99:ea:d2:83:da:86:a2:8f:b5:8a:19:e8
Issuing Certificate URL: http://r10.i.lencr.org/
Revocation information
OCSP Server: http://r10.o.lencr.orgCheck the revocation status for certificate santelena.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for santelena.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
santelena.org
Other certificates including the domain name santelena.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for santelena.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISBGGS/MYu8DYR+dk75vrYZnpVMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTAwHhcNMjQwNjA5MjAzMTE4WhcNMjQwOTA3MjAzMTE3WjAYMRYwFAYDVQQD Ew1zYW50ZWxlbmEub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA sZ5IcHrcsgfdHMFXCHYSNINxI5Y+vxiVdKg2VUz686zYzY17myb8uGz7lu998RWF eyX5Ft8HoKcYfrv/QYYftJkXt/6/x780b9aJbo7ejzlU8+ge67U0F2tCdQb8T5Av eijAnmBBUabjvJIctVT+GbF3ipxyXDXfMYZA38pSa5nvpfV1uLn2RQk2XcIo34KV rPz8KOrNqWjNJ6F5bCbZoQDSO9iSNG5e+TWOlD3RBk8VPreCvhbzS6uZTEk/mVH+ aPnUzm0EnXEongzXmDOIddxUyA+QHDazrf64uxsoqrKqr+pgnW7XV/+aVTPrdn9b NxrApsP84UWeDig3L69ZCh+V+C6lySdUUQefUOvWYr/J2hut5356IHaqO9EsC12F UnK95ZAxIdwW4mEWVA74//5zDtfi49Sj8NzyaJNXaTVv5RUlvw04zlpmtwkPpcXr jbcvlsDY2E0L5hel4IxU/E9Xh6HZvxBPvnbIuge7XRXA9WsxxLBC1ckkurMxYUu8 DarxlUQtKT5Zzec5s9ifpItY05y2DmJPU3jvJozZzZsDWiL67/86X+4UZX+x2WI5 +Z/pS7b0MThOKB5uXoWqtwjYylGw1Vf18mGKF/scGlbbjYrJttuuf1w0TFPqm4BK PGVs9InGKszAmfQzrZuGMA6WMNkGsi4O5JJaE16UBb8CAwEAAaOCAhEwggINMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQURaX9FPSbL0pno2BElnTKJetprTowHwYDVR0j BBgwFoAUu7zDR6XkvKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsG AQUFBzABhhZodHRwOi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRw Oi8vcjEwLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg1zYW50ZWxlbmEub3JnMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdL T9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGP/umvIwAABAMARzBFAiB3 gRI8dgLt/5hrM0XgTd4Sq+g4KGZm3C6zkO6abndfAAIhAMRm+4zSPfqNT4K1rqwy DYUo64B4nrGxTWziiD3nrbUoAHYA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHR wTu+UlwAAAGP/umv6QAABAMARzBFAiEAxcha4/a0twtjgcA2MFFV/wljTL9Uem5M cer1qSI0FcoCIHX1pI/Gz0rhD7mtoQGqqZpwEoXB9+RC5nXeCQ/En3VcMA0GCSqG SIb3DQEBCwUAA4IBAQAjhvOIzSo4tdek79dkWO97IqIO/lZGwnDhxbvGuF9SYxPa SvT9hCIuQXdgNeRyxgwI83bKqg0KwcJs9lDCyf1kVlCo5dW09ZMYJPpgV1ZZ/kQB /AvKtkOyitss6iLbEZFG6JmKOE9myBuG6dX0qZw5bvc7raj7jEi3ZdDVeNEopAqf XQAyciiUUE/bny/LV/shMHWOrY43P5816ZlL68B4C3Cpuyg8V1R+FBxCW/ygRmOy uo1uGh1k4NlX2SUfjb9llBdnZfoVQvbsM2KOzBTHb8Y/sV3K8fSHjugVsWzdTFqe IvyNyoT2s4xBmAn7IzNNUsgK+1bzcOd8MDFbu4hz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsZ5IcHrcsgfdHMFXCHYS NINxI5Y+vxiVdKg2VUz686zYzY17myb8uGz7lu998RWFeyX5Ft8HoKcYfrv/QYYf tJkXt/6/x780b9aJbo7ejzlU8+ge67U0F2tCdQb8T5AveijAnmBBUabjvJIctVT+ GbF3ipxyXDXfMYZA38pSa5nvpfV1uLn2RQk2XcIo34KVrPz8KOrNqWjNJ6F5bCbZ oQDSO9iSNG5e+TWOlD3RBk8VPreCvhbzS6uZTEk/mVH+aPnUzm0EnXEongzXmDOI ddxUyA+QHDazrf64uxsoqrKqr+pgnW7XV/+aVTPrdn9bNxrApsP84UWeDig3L69Z Ch+V+C6lySdUUQefUOvWYr/J2hut5356IHaqO9EsC12FUnK95ZAxIdwW4mEWVA74 //5zDtfi49Sj8NzyaJNXaTVv5RUlvw04zlpmtwkPpcXrjbcvlsDY2E0L5hel4IxU /E9Xh6HZvxBPvnbIuge7XRXA9WsxxLBC1ckkurMxYUu8DarxlUQtKT5Zzec5s9if pItY05y2DmJPU3jvJozZzZsDWiL67/86X+4UZX+x2WI5+Z/pS7b0MThOKB5uXoWq twjYylGw1Vf18mGKF/scGlbbjYrJttuuf1w0TFPqm4BKPGVs9InGKszAmfQzrZuG MA6WMNkGsi4O5JJaE16UBb8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 381651913084200904804376688766248766831189 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 20:31:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 20:31:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santelena.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724619414744895011978600355772152919118751166497603484208344656113560580533289774526366126533598511234350661045270623891909167895199498957155942582162429262955720603689049396487540257087889793810102161901295305876851478661893961224518485545897319924490654430470575735232677008112975451596547219458857277802595986253320281329967080223954464346374471009169977780296266788427884015754868107102491364012548750552530502535282786309990238195768752588297286478490616590265620622112344574576149824198125978582697850721474716324948485942510795184653437787573115321289925604514028289764575541476242452140522857940277594091519216642615528474628079256955341600798859671049313690705824318178904593322065016938728141776684526653636159358311447278192881869441088969049683025753687956508328932943295934871505130691806468281810934403015595508155267087630803575019177712353957897296051404090619883207512648313558125077343855135103123326133547237912500089831293373936847990787453939245697678052718071596177997811453696421748372731287931059800270690313623587419262807018151109263886319193860232673403688228940726027648678286038144709365937296078612118158150604082072961082135912021433493400607315458907806228391320032214968732826961270965733847276455359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45a5fd14f49b2f4a67a360449674ca25eb69ad3a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santelena.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ffee9af23000004030047304502207781123c7602edff986b3345e04dde12abe838286666dc2eb390ee9a6e775f00022100c466fb8cd23dfa8d4f82b5aeac320d8528eb80789eb1b14d6ce2883de7adb528007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ffee9afe90000040300473045022100c5c85ae3f6b4b70b6381c036305155ff09634cbf547a6e4c71eaf5a9223415ca022075f5a48fc6cf4ae10fb9ada101aaa99a701285c1f7e442e675de090fc49f755c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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