sanarica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:12:1c:84:b1:7b:c6:81:ce:c2:96:15:52:9c:12:1e:78:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanarica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:1c:84:b1:7b:c6:81:ce:c2:96:15:52:9c:12:1e:78:e1
Serial Number (int): 354612133698478181965897127202903249811681
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:38:46:04:75:40:ad:93:d2:fc:92:0a:53:01:6e:b0:e6:f9:66:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:fa:4f:9b:45:4f:d9:99:f1:8b:31:7c:70:f8:37:fe:33:83:64:03
Fingerprint (sha256): fb:98:4a:50:84:de:2c:ed:32:91:d9:fd:78:3b:5e:a2:5c:71:3e:3c:5c:1b:6f:0e:45:23:fe:9e:ad:00:03:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanarica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanarica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanarica.org

Other certificates including the domain name sanarica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanarica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzxI7z6kHxDEHSn9wN9BY
VRSjJWJj7nCTVKWMJclf8T/GWu7B+Wl+46dg/nkhJcDeNCvNPx8QKmMQ76AoQSGX
0MvVXtfIffuXCpU8hozkXq2JY2PoaMv4hYUOGOaTcL9mG+i84t1/X2P24v8UFECp
4sBFN4bEc3rayq1yBtsS59+z1KrQHPQv6gTmtTYLzANDaWiwxfpVS60qRsZAISfQ
t1lfxpHhqlB7il8oLb5sRrRX+DLv9CRTCo2w6S+EzMhoUhJEz7x5UTQfKumHirAY
RNpQeg3vYqbA+DfEFnKOasbkVfsj3s9Vdh+om8sGsPkBmoGm/wkOO66ZCHPm1f2F
GBct9ImdvOXEGJOpxU1GD6Wuu14y4R63ltkaZJK8UY9RQjEci+41Wgs0wx1bdvm2
+eVIMX8RV018Zlt44o1dy+Uotaf2qaMQcJsMEpqiVgdBhxVPWcag0l9wmZWy1FIq
8X2dJETF9Ksq9XhWOI1cwvs5/GzYjj19egEWGoWPGPcG6i/RpACMH0QWMVU+0318
b/yF0LRVNrUhQ8i6h4bv7+z0jXQFANjQZ14pn543cxtV9rnD+gPRk441c9qIkucH
afiHM81spZ8YvSWB3vkPZb1RiqyT4oJim/dkuBo1iyOis245zLQGpxGxKgqrdPBw
j7Vllr7xo3VKPCYvy7aVxKMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354612133698478181965897127202903249811681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 16:33:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 16:33:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanarica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844776895324831147593650834640854304908287510626674833549744062977587320326228441222694583853624654766362976522671174266217964592601824741440327681195487557125181094451481300130140642517446046095861763112182623597805527389707701640340283319749622685976444881588678763829188107425823558905693249320352339562556573622441106192711868960334990849353731146700177391323344625627689903325431971002289875933142329354357053299107431372068270737038941868980726244076787903236810022219319886654204500850426172181878453519035068983451749202994246660446931674185445811801651057420961712004661103749619866981333670444507659647194007197156788899360185330155775741358740575655555551184059577381639739631890240955428511068161797360041229622157759312908167015925070781008947041681198409668034067923753056568549960264896030840094582012469678545613589762309484667585287938200910283849913427926948849056035575431369434460479840039295220999899612349390487067137330100483247906753629775968584180896500792308566283250029245647957638047922717486538094595676052846192686333080822783922301923927631676173796230121577731490075497425840293940799290694844484280232549190616816076144402164051652951506093778359098271817801693930877143786550169384150762202724680867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d3846047540ad93d2fc920a53016eb0e6f96610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanarica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed1f8ef2c00000403004730450221008f3b8cfa6763d832bea975f2d80f96997518237cbd6d4aca06a7dae70391738702200e5e2902fb9ab4608518c6d94002d3b95b94478ffca192b12c7df0ae76366edd007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed1f8ef29000004030046304402201b2d16df1d71ec03868ddd676007cf685d65c2e301d70f84bf5e1aef42512e0f0220327bfcfbadf1457e36ee9bd2fde742a432c06adc648fd0780f53520f856e4eee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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