afterwork-nyc.magento.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:45:b4:34:b7:5d:ad:ab:01:6e:e5:2c:27:d6:42:11:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afterwork-nyc.magento.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:45:b4:34:b7:5d:ad:ab:01:6e:e5:2c:27:d6:42:11:ef
Serial Number (int): 336972195666085819480572879937509861233135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:cd:0d:66:e7:04:18:30:ba:1f:c9:5c:81:d8:e6:0f:ba:b5:f2:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:27:72:ac:f1:3a:7e:21:3f:af:b0:d0:8f:4f:4c:38:6e:7f:17:9a
Fingerprint (sha256): 01:1b:38:0e:6a:77:4b:5e:0a:a0:35:31:19:aa:60:bb:a3:df:3a:89:43:2e:75:7d:4c:22:9d:db:10:79:63:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afterwork-nyc.magento.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afterwork-nyc.magento.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterwork-nyc.magento.com

Other certificates including the domain name magento.com

(limited to 100 certificates)
su.magento.com
magentocloud9.map.fastly.net
*.dev.magento.com
statuspage.io
kickoff-apam.magento.com
guide.magento.com
engcom.dev.magento.com
de.magentocommerce.com
accounts.magento.com
afterwork-la.magento.com
accounts.magento.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud2.map.fastly.net
mcus.ecg.magento.com
prod.magento.com
shoporg.magento.com
events.magento.com
backend.opensource.engcom.magento.com
account.magento.com
secure08.lithium.com
staging.cloud.sparta.magento.com
static.magento.com
secure05.stage.lithium.com
events.magento.com
obui-sendgrid-api-prod.magento.com
dns-vetting1-mims-pawel.map.fastly.net
secure08.lithium.com
afterwork-minneapolis.magento.com
afterwork-nyc.magento.com
marketplace-stg3.magento.com
magentocloud35.map.fastly.net
magentocloud9.map.fastly.net
kickoff-emea.magento.com
marketplace-stg2.magento.com
secure08.lithium.com
marketplace-stg.magento.com
kickoff-emea.magento.com
dns-vetting1-mims-pawel.map.fastly.net
accenturetest.magento.com
secure08.lithium.com
secure08.lithium.com
resource.magento.com
sandbox.api.magento.com
glossary.magento.com
secure05.stage.lithium.com
cloud.sparta.magento.com
afterwork-la.magento.com
afterwork-seattle.magento.com
*.mcom.magento.com
cloud.sparta.magento.com
*.corp.magento.com
events.magento.com
brand.magento.com
magentocloud55.map.fastly.net
afterwork-minneapolis.magento.com
*.corp.magento.com
api.opensource.magento.com
obui-sendgrid-api-dev.magento.com
dns-vetting1-mims-pawel.map.fastly.net
*.mcom.magento.com
statuspage.io
magentocloud9.map.fastly.net
afterwork-philadelphia.magento.com
secure05.stage.lithium.com
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
afterwork-minneapolis.magento.com
mcc.stg.swat.magento.com
omsdocs.magento.com
support.magento.com
experienceleague.adobe.com
mcus.ecg.magento.com
afterwork-sf.magento.com
statuspage.io
statuspage.io
nrf.magento.com
stg.swat.ceng.magento.com
kickoff-emea.magento.com
support.magento.com
statuspage.io
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
tst.sparta.ceng.magento.com
mcc.stg.swat.magento.com
secure08.lithium.com
statuspage.io
statuspage.io
secure08.lithium.com
*.corp.magento.com
mp-stg-static.magento.com
statuspage.io
magentocloud58.map.fastly.net
magentocloud9.map.fastly.net
dns-vetting1i.map.fastly.net
magentocloud9.map.fastly.net
backend.staging.opensource.engcom.magento.com
de.magento.com
kickoff-emea.magento.com
api.magento.com
*.bcn.magento.com

Certificate

The complete raw certificate details for afterwork-nyc.magento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336972195666085819480572879937509861233135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 07:29:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 07:29:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afterwork-nyc.magento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 975371048613971527834394987392728922312249011013034719661067386584844706308335622804003917923223873444429066182744624045793766420773984027215118022372842200478524742753739107552300103004753728132374415372394797808003236484193207731832953069246219121080704874860561999103646047003488276767647350144382652488532338986585569789013170743740372648520924337569011392093133960902884589638891101170206126878026073016122890631689779630946566210545250297752247153121316925389030882611958772066603967363981301112016786579532772574067395851019715448136598525711219185846393207698559610060332907214712316649680988906423745309615905064303600048139193587934612725145804768039996284268049465207248705965285677347439095973076573291339832805484346955080081067231490217489890139801553855065960356151980551354248119554620579117294051333142810270906395701226303159539427133352699770187519482338831424994064482885302641771723619914913025463682523657025200496296836599513499789245337434407288765378983681272086151846754287987130179753835704967678804675158797263751984070706055547856822118712929007666181522589398213466399945124329140235368948857053730245845723080819265270204896499238042876309556054595053553151149819563365625073659667794374116333243057627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49cd0d66e7041830ba1fc95c81d8e60fbab5f24d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterwork-nyc.magento.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001712a8f8e270000040300483046022100d263a23c85938e0780b5cbe4bb983ff0640413e917ccbf50c7894e06a79fa133022100f5eb1f723f74e679fa6b57a13a951d670313d22091b416d41a6a306382c521f3007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712a8f90150000040300483046022100e36da7fe70fe14262761868c205d45b8b3490d72c7473bcc50e883018ed43419022100dbc1dc41f562fb5ff7b400b22bdc5334802cbf8c7e885721771c50114d0d7e98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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