afterwork-minneapolis.magento.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:6c:5d:58:51:c2:93:e6:24:15:29:88:87:b5:c8:bb:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afterwork-minneapolis.magento.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:6c:5d:58:51:c2:93:e6:24:15:29:88:87:b5:c8:bb:84
Serial Number (int): 323752572240294838582725447859274162682756
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:d8:c1:d2:51:3d:16:5e:f1:91:11:8e:e9:39:a7:d7:14:02:60:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:eb:02:b5:27:a0:90:32:dc:de:21:c4:3a:80:0a:d0:08:61:86:f9
Fingerprint (sha256): 03:07:4a:c2:a4:f4:b6:47:2f:2d:02:95:63:69:c4:ae:b1:0a:64:c3:ef:c3:ad:3d:10:50:c5:89:03:1e:d0:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afterwork-minneapolis.magento.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afterwork-minneapolis.magento.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterwork-minneapolis.magento.com

Other certificates including the domain name magento.com

(limited to 100 certificates)
su.magento.com
magentocloud9.map.fastly.net
*.dev.magento.com
statuspage.io
kickoff-apam.magento.com
guide.magento.com
engcom.dev.magento.com
de.magentocommerce.com
accounts.magento.com
afterwork-la.magento.com
accounts.magento.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud2.map.fastly.net
mcus.ecg.magento.com
prod.magento.com
shoporg.magento.com
events.magento.com
backend.opensource.engcom.magento.com
account.magento.com
secure08.lithium.com
staging.cloud.sparta.magento.com
static.magento.com
secure05.stage.lithium.com
events.magento.com
obui-sendgrid-api-prod.magento.com
dns-vetting1-mims-pawel.map.fastly.net
secure08.lithium.com
afterwork-minneapolis.magento.com
afterwork-nyc.magento.com
marketplace-stg3.magento.com
magentocloud35.map.fastly.net
magentocloud9.map.fastly.net
kickoff-emea.magento.com
marketplace-stg2.magento.com
secure08.lithium.com
marketplace-stg.magento.com
kickoff-emea.magento.com
dns-vetting1-mims-pawel.map.fastly.net
accenturetest.magento.com
secure08.lithium.com
secure08.lithium.com
resource.magento.com
sandbox.api.magento.com
glossary.magento.com
secure05.stage.lithium.com
cloud.sparta.magento.com
afterwork-la.magento.com
afterwork-seattle.magento.com
*.mcom.magento.com
cloud.sparta.magento.com
*.corp.magento.com
events.magento.com
brand.magento.com
magentocloud55.map.fastly.net
afterwork-minneapolis.magento.com
*.corp.magento.com
api.opensource.magento.com
obui-sendgrid-api-dev.magento.com
dns-vetting1-mims-pawel.map.fastly.net
*.mcom.magento.com
statuspage.io
magentocloud9.map.fastly.net
afterwork-philadelphia.magento.com
secure05.stage.lithium.com
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
afterwork-minneapolis.magento.com
mcc.stg.swat.magento.com
omsdocs.magento.com
support.magento.com
experienceleague.adobe.com
mcus.ecg.magento.com
afterwork-sf.magento.com
statuspage.io
statuspage.io
nrf.magento.com
stg.swat.ceng.magento.com
kickoff-emea.magento.com
support.magento.com
statuspage.io
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
tst.sparta.ceng.magento.com
mcc.stg.swat.magento.com
secure08.lithium.com
statuspage.io
statuspage.io
secure08.lithium.com
*.corp.magento.com
mp-stg-static.magento.com
statuspage.io
magentocloud58.map.fastly.net
magentocloud9.map.fastly.net
dns-vetting1i.map.fastly.net
magentocloud9.map.fastly.net
backend.staging.opensource.engcom.magento.com
de.magento.com
kickoff-emea.magento.com
api.magento.com
*.bcn.magento.com

Certificate

The complete raw certificate details for afterwork-minneapolis.magento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323752572240294838582725447859274162682756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 20:36:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 20:36:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afterwork-minneapolis.magento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594559881311504312635387350878310604062204205730208473740579559208649463916635489114399503647724496585656119164314642957654843424369364380034607898412645598142203703772819971512734793172979353321666690658802909014422428142823943391634830939748055000523321061810262046177240670772910113401372497186609666904481858377512643696112346386214027919788747984944989779241883890068468986469226348998207158693572812398536954232403379622618370378172013597776389879978830098843458569746989820951718103044850035272857466070998561205409811686909846408046700510121176087458349801173716890199738671829868894362338873048538322958952849822702327621993050994176744089834965696605032143757630043612335630308692331934218896445643519327967237442674534530147172693480381403768492025275456969727616459426479322823948397468720704605265403996551049073122869378812553105738112315469426676541321087740305403496707274189961753683541701786705467728935998500898303790358499893481380271190089263203020688608673799427109803741915163065699729044510341770008455789427198096123494301049410304599975544789207422715181098506580676396889378444633315045913666367239116041814257903893237601193407517967990734952352554215994712272360390570925038342332493690737965971620848457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9d8c1d2513d165ef191118ee939a7d7140260c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterwork-minneapolis.magento.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc1e731150000040300483046022100ab060ad99073e851a1bcc2bdd042229bf6d5c63f3c3602c24d4e6d3a26447d80022100cb7b31bdddb0d05b84b7238b0aec47757afa098c1f6306663b1b517257d9022b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc1e731db0000040300473045022100eca7bcc7b690f12f33bab241b44cf5482009f624b85a0eba5165908f1a25255702206fa90358d2b38596e37d24f4897b20639cb8bea52d9d18e5299b2eaad24b0fdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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