journal.ashesi.edu.gh

Issued by R3

About this certificate

This digital certificate with serial number 03:68:dc:f9:12:72:fa:c6:f6:02:c6:fb:d2:5e:6f:a2:9a:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=journal.ashesi.edu.gh

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:dc:f9:12:72:fa:c6:f6:02:c6:fb:d2:5e:6f:a2:9a:36
Serial Number (int): 297019947370241791978058207967043700038198
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:e2:84:9e:14:0e:af:ed:42:85:dd:61:88:61:35:71:ab:66:f6:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:47:54:da:19:14:5d:dd:8b:60:53:99:4a:8b:84:ed:99:b1:c3:41
Fingerprint (sha256): fc:f6:a2:bb:0d:ff:fd:c2:a1:f3:14:ea:28:ae:43:b6:4a:b6:47:91:a7:5c:04:ad:c0:b7:99:ed:b8:2d:2b:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate journal.ashesi.edu.gh

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for journal.ashesi.edu.gh

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

journal.ashesi.edu.gh

Other certificates including the domain name ashesi.edu.gh

(limited to 100 certificates)
*.ashesi.edu.gh
admissions.ashesi.edu.gh
outcomes.ashesi.edu.gh
*.ashesi.edu.gh
nms.ashesi.edu.gh
perfcore.ashesi.edu.gh
outcomes.ashesi.edu.gh
air.ashesi.edu.gh
at.ashesi.edu.gh
air.ashesi.edu.gh
outcomes.ashesi.edu.gh
at.ashesi.edu.gh
*.ashesi.edu.gh
educationcollab.ashesi.edu.gh
archives.ashesi.edu.gh
incapsula.com
admissions.ashesi.edu.gh
un-sdgs.ashesi.edu.gh
librenms.ashesi.edu.gh
at.ashesi.edu.gh
incapsula.com
librenms.ashesi.edu.gh
ashesi.edu.gh
*.ashesi.edu.gh
mplan.ashesi.edu.gh
archives.ashesi.edu.gh
outcomes.ashesi.edu.gh
netbox.ashesi.edu.gh
seed.ashesi.edu.gh
www.ashesi.edu.gh
at.ashesi.edu.gh
ashesi.edu.gh
at.ashesi.edu.gh
admissions.ashesi.edu.gh
librenms.ashesi.edu.gh
admissions.ashesi.edu.gh
air.ashesi.edu.gh
*.ashesi.edu.gh
at.ashesi.edu.gh
admissions.ashesi.edu.gh
seed.ashesi.edu.gh
*.ashesi.edu.gh
librenms.ashesi.edu.gh
apps.ashesi.edu.gh
*.ashesi.edu.gh
radio.ashesi.edu.gh
admissions.ashesi.edu.gh
perfbore.ashesi.edu.gh
*.ashesi.edu.gh
perfcore.ashesi.edu.gh
nms.ashesi.edu.gh
*.ashesi.edu.gh
www.ashesi.edu.gh
www.ashesi.edu.gh
outlook.ashesi.edu.gh
at.ashesi.edu.gh
outcomes.ashesi.edu.gh
admissions.ashesi.edu.gh
admissions.ashesi.edu.gh
librenms.ashesi.edu.gh
outcomes.ashesi.edu.gh
outcomes.ashesi.edu.gh
www.ashesi.edu.gh
perfcore.ashesi.edu.gh
perfcore.ashesi.edu.gh
sis.ashesi.edu.gh
air.ashesi.edu.gh
admissions.ashesi.edu.gh
admissions.ashesi.edu.gh
air.ashesi.edu.gh
ashesi.edu.gh
www.ashesi.edu.gh
ashesi.bywatersolutions.com
incapsula.com
incapsula.com
*.ashesi.edu.gh
outcomes.ashesi.edu.gh
at.ashesi.edu.gh
radio.ashesi.edu.gh
air.ashesi.edu.gh
incapsula.com
journal.ashesi.edu.gh
perfcore.ashesi.edu.gh
admissions.ashesi.edu.gh
www.ashesi.edu.gh

Certificate

The complete raw certificate details for journal.ashesi.edu.gh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297019947370241791978058207967043700038198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 09:20:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 09:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'journal.ashesi.edu.gh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726006560701214673257894701300162909157770840707440549723277937820929926597073562298009337146858595670682164946141521115329127189956325129824917179036014281463185433083799475556469684562445501943325339835590494393898460353025026666480092058302329453239429722438157194190648275836962858102082617009663468718201524050658199615981478915724135586709722562029368559421368400807164976757736327355469106561060280740836887041926516443707958210268121780152982890709473810917916257433964459932218777970375187484316331957630721401365562103422398418857567955530971941999914873138444527399116253645960726882373156926343766282724154344456945837612645362975872833099298788167957330340109648056376633862722619755012440136832023842367643986788292384211358906108556165446827091621501461588648034456510012889624971181727585541703502003349862377376956353305418845291989118897847992911249816837136106019465369978670390118789558683387390611983602576791677558138745538056417744573292356803002813915384477333067776358174449241176499497934795962901447605013147473842932848291675494316301591542471736259243610642952011974298563229260085592601137045472715050760824603813587875708088145419401634184571107739557224518543802870271371874001781510390760147799456901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89e2849e140eafed4285dd6188613571ab66f632
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.ashesi.edu.gh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001879e2e55470000040300473045022045dbad8ce24555864821e10e9674ec0fc1c0dbb3029d0e20acc96f5f1f6092bd022100ada4d92ae87951bfef7fb260ff7e2082cfa2ad02a992f7933539653971c31f7d0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001879e2e555c000004030047304502207c7639756f6284357642bba2783535bf4d9cb753889b64a762a60745917c1cb402210097032e0b6e1ffd1adf223e9582d0f426730300a5e590cadbd18525ad0e3bb7d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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