download-stats-staging.elastic.co

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:5a:bf:ad:ce:dc:b8:0d:6d:da:56:4f:1a:c2:d9:e4:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=download-stats-staging.elastic.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:5a:bf:ad:ce:dc:b8:0d:6d:da:56:4f:1a:c2:d9:e4:20
Serial Number (int): 406758054244088258536977181965883599873056
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:7a:ce:6f:05:5f:ce:9d:3c:db:b3:f4:6e:a5:fc:22:ee:4f:1a:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:27:2b:e4:87:a7:91:cf:ab:f6:0b:30:15:ba:d2:04:31:40:44:85
Fingerprint (sha256): 02:4c:23:ad:ce:34:b9:da:4d:f3:d0:2b:48:ab:0e:00:d1:11:24:07:ad:c3:a7:aa:d1:6e:d0:e2:f6:88:ac:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate download-stats-staging.elastic.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for download-stats-staging.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

download-stats-staging.elastic.co

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for download-stats-staging.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISBKtav63O3LgNbdpWTxrC2eQgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MTYxMjEzMTNaFw0yMzA5MTQxMjEzMTJaMCwxKjAoBgNVBAMT
IWRvd25sb2FkLXN0YXRzLXN0YWdpbmcuZWxhc3RpYy5jbzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKhIIGCrUgIYh3VgQfswIq6bApGZ95gnuVhBizyw
DWNyUp13sOXqZo3Bf53WYpyNWggOeZiMm98dgnRtkkMmXSIShS5sL/PO2Zmco+mx
2qbKc7j08CHYQt+8MLIzdsRRrIPgWDW/yaLPisITAvYefEWygIGuMNXftMd1wnPN
i2if8jWDAm9jTfwVyBQkvCDDd7W4049/0u4MZPRiZQR1L8baT/a57ayWvpGpC6LV
ki711JwfPjK48GSVvmtHB0hLN0wIoT+KJvz58K8v+XtbuYXR9WNZGEDO9OMvlYn8
JkOLh21/motwYHdskH1++5XA5dLoR0FFftCHRjBoXHI3MmcCAwEAAaOCAiIwggIe
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUB3rObwVfzp0827P0bqX8Iu5PGlEwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wLAYDVR0RBCUwI4IhZG93bmxvYWQtc3RhdHMt
c3RhZ2luZy5lbGFzdGljLmNvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXt
tJkAAAGIxFap5AAABAMARzBFAiBbWL88WYUtlLhqIMqEkKXoqYgStYdHr345Nm4Q
9lRWsgIhALh9hgpbwf9zK4GdZ4qX+W3zRkBTVOLdWH/Ld2JdLUTqAHUArfe++nz/
EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGIxFaqGwAABAMARjBEAiA399Nl
Duprqu6dXbS3RYnrWl2ihCTXhszDuZmmKTQzxwIgHehBpHtk/4UdIQywTEBX2hYt
b3WLrAyChC8qke/htQcwDQYJKoZIhvcNAQELBQADggEBAAso81qmH93vNIT3pM4Q
6QX3KmoOC2MPw+2bh0nWZjbJoiDqyje6hoFbjTr4Ti3bw49BnDYZ1WYVTcZHTm6q
uZP8oOjNDmjZ8bDAp5474cYMCEhQZVaXqgryExCIABc5hQWZ4BLOsuN7FWyJiZ8G
FXRIYBuTSmFCpUm1ZiJveXhTXYthHss3j9rkAVjfu9cQpxyRtP5OZdkHqgCW06jK
YKBR3xwsWDYsbathkjNDXQbQY2KBGPZwSaJJUefOppAelWM5e/md4R1BsII1hBd9
DN2/KoLY6fhzQ3nujITjRE8Z5ILXjlzUU/vLMIpJ/gASrDnGNeyDTApjopCWyUAu
Msw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEggYKtSAhiHdWBB+zAi
rpsCkZn3mCe5WEGLPLANY3JSnXew5epmjcF/ndZinI1aCA55mIyb3x2CdG2SQyZd
IhKFLmwv887ZmZyj6bHapspzuPTwIdhC37wwsjN2xFGsg+BYNb/Jos+KwhMC9h58
RbKAga4w1d+0x3XCc82LaJ/yNYMCb2NN/BXIFCS8IMN3tbjTj3/S7gxk9GJlBHUv
xtpP9rntrJa+kakLotWSLvXUnB8+MrjwZJW+a0cHSEs3TAihP4om/Pnwry/5e1u5
hdH1Y1kYQM704y+VifwmQ4uHbX+ai3Bgd2yQfX77lcDl0uhHQUV+0IdGMGhccjcy
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406758054244088258536977181965883599873056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 12:13:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 12:13:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'download-stats-staging.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21243602124743746936940540597224568108034747808235916248237930980435319956953508686248893353709151771802650691628421446301954364969704117801482109885780045515234030067081637920854122331299792943046206922775651856908293236346470354013438270682833665052891393483578255308189142361202422229406450974804769308976127082459274697290378455604680632908128506735493834803374653347244163304546001764920206580843868730705335854696544271020246739944165749670780665558948654381229019202800379946808065531716057799196585460614666478594592220211101403387450991374759784444727223769010111601004841990807540975413550181539253979656807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							077ace6f055fce9d3cdbb3f46ea5fc22ee4f1a51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-stats-staging.elastic.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188c456a9e4000004030047304502205b58bf3c59852d94b86a20ca8490a5e8a98812b58747af7e39366e10f65456b2022100b87d860a5bc1ff732b819d678a97f96df346405354e2dd587fcb77625d2d44ea007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188c456aa1b0000040300463044022037f7d3650eea6baaee9d5db4b74589eb5a5da28424d786ccc3b999a6293433c702201de841a47b64ff851d210cb04c4057da162d6f758bac0c82842f2a91efe1b507
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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