gitlab.msdp.centurylink.net

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 02:fc:72:64:71:e4:33:16:fa:25:16:a9:4b:88:3b:ed:90:d1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.msdp.centurylink.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fc:72:64:71:e4:33:16:fa:25:16:a9:4b:88:3b:ed:90:d1
Serial Number (int): 260127781858794437757327817297616966619345
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:bd:d0:79:93:33:f7:96:dc:55:fe:e8:c1:58:58:b5:cf:52:cc:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:04:ac:fc:a3:e0:b2:3a:d0:e0:18:cf:b8:29:18:b4:d3:43:28:a1
Fingerprint (sha256): 02:f8:57:2c:7d:ad:f5:51:e4:72:59:f4:e4:ff:9c:0a:a3:8e:41:a3:99:18:90:b3:0c:90:55:1d:6c:03:0e:6c

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate gitlab.msdp.centurylink.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.msdp.centurylink.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.msdp.centurylink.net
gitlab.msdp.centurylink.net

Other certificates including the domain name centurylink.net

(limited to 100 certificates)
mtg.ccs.centurylink.net
stacksocial.com
orion.ccs.centurylink.net
qroutingvoiceportal.ccs.centurylink.net
stacksocial.com
tls01-uv.is1e1.is.centurylink.net
prismvpn.prism.centurylink.net
savpn2.prism.centurylink.net
s2-ipsec02.is.centurylink.net
gadDTD.ccs.centurylink.net
stacksocial.com
gitlab.msdp.centurylink.net
fusion.virtz.centurylink.net
prd-int.ms.centurylink.net
s2-host77.is.centurylink.net
wifidev.centurylink.net
chia-rxg-poc.centurylink.net
admin.notification.centurylink.net
test.ms.centurylink.net
mattermost.msdp.centurylink.net
zappvho1.prism.centurylink.net
stacksocial.com
stacksocial.com
ms.centurylink.net
sqrxg.iea2.centurylink.net
wifidev.centurylink.net
wharfmarina.centurylink.net
licenser.elem.st.ott.centurylink.net
uat03.centurylink.net
tls01-uv.is1e1.test.is.centurylink.net
s1-host194.is.centurylink.net
mail.oss.centurylink.net
manage.uat01.centurylink.net
uat02.biz.centurylink.net
jira.msdp.centurylink.net
stacksocial.com
auth.centurylink.net
stacksocial.com
gadPDEPExoticPests.ccs.centurylink.net
uipath-sb.ms.centurylink.net
hlr-director-01.centurylink.net
rxgzuni.iea2.centurylink.net
secure.centurylink.net
secure.uat02.centurylink.net
orion.ccs.centurylink.net
zappvho1.prism.centurylink.net
stacksocial.com
uat01.centurylink.net
instantcaptive.centurylink.com
tls05-uv.is1e1.test.is.centurylink.net
stacksocial.com
uat03.centurylink.net
mail.centurylink.net
stacksocial.com
chia-rxg-poc.centurylink.net
bi.ms.centurylink.net
stacksocial.com
erscalotteryacd.ccs.centurylink.net
api.vrm.pure.centurylink.net
gadcvr.ccs.centurylink.net
chia-rxg-poc.centurylink.net
gadCAIETS.ccs.centurylink.net
tools.centurylink.net
stacksocial.com
stacksocial.com
centurylink.net
stacksocial.com
stacksocial.com
msp-nwsm-01.inet.centurylink.net
www.oss.centurylink.net
stacksocial.com
gadKaiserQRouteGAD.ccs.centurylink.net
webrt.oss.centurylink.net
stacksocial.com
prisminfo.centurylink.net
zappvho2.prism.centurylink.net
stacksocial.com
sgx5-director-01.centurylink.net
stacksocial.com
stacksocial.com
smdc02zappwslb1.den.prism-itf.centurylink.net
gadkpsrfaccessctr.ccs.centurylink.net
gaddwccallcenter.ccs.centurylink.net
stacksocial.com
stacksocial.com
stacksocial.com
den-gscn-edfw01.gscn.is.centurylink.net
ccportal.ccs.centurylink.net
uipath-sb.ms.centurylink.net
www.oss.centurylink.net
dev-int.ms.centurylink.net
testrail.msdp.centurylink.net
stacksocial.com
stacksocial.com
devtools.msdp.centurylink.net
trello.virtz.centurylink.net
stacksocial.com
www.stacksocial.com
bi.ms.centurylink.net
uipath-sb.ms.centurylink.net

Certificate

The complete raw certificate details for gitlab.msdp.centurylink.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260127781858794437757327817297616966619345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 22:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-01 22:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.msdp.centurylink.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739303177432182063567526566362184810455449404030970036825835710865904397620774383590119543311829101401562949583624759471819246886906256631902621708594535829920957729950264190319025496484567708187044432746274213482468168922396018640242742802322394646494092589007416416286437430559974615788042639552928023095512956302647275717135908865494509225643907934498311319799544509712374541696705211647764869935280777300261235526797382036683244040602556140862768186996050715601193806752629561634133060978813267724346559228636241898865609328865495448196037492045200539603217523114769190077862234285413199139299646075381792759152991079234825842675048645736566740539158225127744018873805089660424387968098528596228679904923220838433660152879350803028215578061999742533961121672189660345457444507824077688552587461929548167767020318253537456227632302863356198533827660652828016451830785194117473015049561641273650658848209419478278181868336267737460973184739949195884216914998898843675041161049791206091406406461516153272415940164721233977955454778609683796257359503128461476054085671931894117972111809941678812350916582659305880618173522628540241954186833725599975053352629512545963385048076417428189769249224194672544006743971876581731442213097707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdbdd0799333f796dc55fee8c15858b5cf52cca7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.msdp.centurylink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.msdp.centurylink.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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