www.geeksforgeeks.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:a7:a0:18:e1:1a:83:90:7a:66:22:a1:e1:7e:8d:a5:68 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.geeksforgeeks.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:a7:a0:18:e1:1a:83:90:7a:66:22:a1:e1:7e:8d:a5:68
Serial Number (int): 309879766245459820990032319975831131497832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:42:da:16:17:ab:14:a4:85:9c:c9:d2:c8:8d:15:c9:26:7b:a3:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:27:73:34:87:1e:e3:26:76:2a:8f:48:41:df:3e:45:a9:fa:ab:3b
Fingerprint (sha256): 02:f2:1f:e3:ea:17:84:dd:97:9f:9e:3a:7f:4d:a9:fa:20:dc:2c:5f:34:4d:d7:b3:c1:b5:99:96:2e:84:92:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.geeksforgeeks.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.geeksforgeeks.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.geeksforgeeks.org
auth.geeksforgeeks.org
authcdn.geeksforgeeks.org
cdncontribute.geeksforgeeks.org
cdnpractice.geeksforgeeks.org
cdnvideos.geeksforgeeks.org
contribute.geeksforgeeks.org
practice.geeksforgeeks.org
www.geeksforgeeks.org

Other certificates including the domain name geeksforgeeks.org

(limited to 100 certificates)
auth.geeksforgeeks.org
cdncontribute.geeksforgeeks.org
help.ummeedhfc.com
api.geeksforgeeks.org
util.geeksforgeeks.org
api.geeksforgeeks.org
*.geeksforgeeks.org
authcdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
api.geeksforgeeks.org
www.geeksforgeeks.org
auth.geeksforgeeks.org
www.geeksforgeeks.org
premium.geeksforgeeks.org
www.geeksforgeeks.org
api.geeksforgeeks.org
www.geeksforgeeks.org
www.cdn.geeksforgeeks.org
adevtest.geeksforgeeks.org
helpdesk.geeksforgeeks.org
auth.geeksforgeeks.org
www.geeksforgeeks.org
api.geeksforgeeks.org
servicedesk.nykaa.com
www.cdn.geeksforgeeks.org
helpdesk.nlbconnect.com
auth.geeksforgeeks.org
auth.geeksforgeeks.org
www.cdn.geeksforgeeks.org
contribute.geeksforgeeks.org
ithelpdesk.niairport.in
helpdesk.nlbconnect.com
www.cdn.geeksforgeeks.org
authcdn.geeksforgeeks.org
util.geeksforgeeks.org
util.geeksforgeeks.org
api.geeksforgeeks.org
api.geeksforgeeks.org
origin.geeksforgeeks.org
ide2.geeksforgeeks.org
www.cdn.geeksforgeeks.org
util.geeksforgeeks.org
www.geeksforgeeks.org
api.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.geeksforgeeks.org
media.geeksforgeeks.org
origin.geeksforgeeks.org
authcdn.geeksforgeeks.org
auth.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
api.geeksforgeeks.org
www.cdn.geeksforgeeks.org
api.geeksforgeeks.org
cdncontribute.geeksforgeeks.org
authcdn.geeksforgeeks.org
api.geeksforgeeks.org
api.geeksforgeeks.org
authcdn.geeksforgeeks.org
authcdn.geeksforgeeks.org
auth.geeksforgeeks.org
auth.geeksforgeeks.org
auth.geeksforgeeks.org
api.geeksforgeeks.org
authcdn.geeksforgeeks.org
idevtests.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.geeksforgeeks.org
authcdn.geeksforgeeks.org
ithelpdesk.tatanexarc.com
help.ummeedhfc.com
auth.geeksforgeeks.org
util.geeksforgeeks.org
auth.geeksforgeeks.org
helpdesk.hcgel.com
util.geeksforgeeks.org
contribute.geeksforgeeks.org
auth.geeksforgeeks.org
auth.geeksforgeeks.org
www.cdn.geeksforgeeks.org
www.geeksforgeeks.org
authcdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
api.geeksforgeeks.org
api.geeksforgeeks.org
www.ptest.geeksforgeeks.org
authcdn.geeksforgeeks.org
www.cdn.geeksforgeeks.org
contribute.geeksforgeeks.org
servicedesk.linkintime.co.in
www.cdn.geeksforgeeks.org
www.geeksforgeeks.org
api.geeksforgeeks.org
api.geeksforgeeks.org
authcdn.geeksforgeeks.org
api.geeksforgeeks.org
ide3.geeksforgeeks.org

Certificate

The complete raw certificate details for www.geeksforgeeks.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eEglNyv+nD07k9dTGYA
/CYsLOIWlK7iCT9hRy7f1Cug3/MI8EQjZrzz5qMWsiNndByAiEp+OLjy16DIMhkQ
qzBJel/ipBiAf3BGh0RbJxaA/95ek5iOgvdKNqD/SlGVSLTfUinXYVqTBs1SlHwA
Hg/6g/YB9tKeWBWM7m9QPsMpk+dij2uVN2/tpb/7zfr0kz6sg2ZmCvNmJ0rAWgha
EfKZjywtcvPVHWL0XaOzCKWN7go9qaTELUuZixuh0lxsDKQfVV9BoDFLcspWPcsy
ZuAZKp/PPyq6sPOgMvEZYsQz29kWo/FkMSLxAkhILmCrCv/8DR+MaCAzoT0uKbPk
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309879766245459820990032319975831131497832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 11:24:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 11:24:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.geeksforgeeks.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28009679792616473906894490436591718576782874539799206389917799077595159057559178935148672628197272733777900684882232566952722464736602141291806337410850117818504444072828591742741329978384939481411302673066426653893154651970950865191004667602178432469368725817059539591822716569574467356995643963899133359826719124600715353439062568926625504932279685300957274043184767143909362561950754139869633494947246412775484595987629998817132987983296339094324019355217673933815084346549372428092233888413023396095907387016377565026691163745399711583686918524952002223253480381769513295536904662313953001552684733448014685004961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c242da1617ab14a4859cc9d2c88d15c9267ba3d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authcdn.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncontribute.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnpractice.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnvideos.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geeksforgeeks.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018968f584fd00000403004630440220525569f734a5bb919b1234a9c97006c87d30864888265cc28f9e0ac8111d77a5022065fcd05fec0993a4e35e3d276fd201eb128cc082484173e152c97218413e31150076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018968f585090000040300473045022100e8bb3bb2f6c449b5c5c1bcf07f0cdecebc892e878101e1de9abfa2adb2012eaa022049611cc5ee181b6d67a262286f271af3398efeaf74a47c40a693befbec44e5d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009385ecabc63b7bb89a5b9fb4bc6b7c8fb9b8acb8f325abfb530c261500bbde11ad7e74af693dd51f9f0421c9182f758213b9cd6242ea1d455374f9cd280112d3610b8efa532ed7f5acc4008a554eadb75405bb6fe201480ff22929e002c40c4fdf5976095f96461f08190d72010a628a04633a61c80aec18a92a10d1bc367c2847d1d1d581b3f5994f98209850847f017ae28b78ae5720450b82c8891da6c0985ed1bb865f557997af87969831848692563622b606d1d25f6cad56d40f1b42b5dfce194b8b2e0e073b9b1baf2375d1374534762d5efaac35d30b58dd010443ead7b17d1695c1e9955bc7a303d8b56662df86a05ddd05783675c2cd62791bd428