afterwork-minneapolis.magento.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:ed:ee:71:87:e3:84:88:d2:73:e1:44:ef:fd:9a:83:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afterwork-minneapolis.magento.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:ed:ee:71:87:e3:84:88:d2:73:e1:44:ef:fd:9a:83:30
Serial Number (int): 287854865152524858451031421710808769004336
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:24:74:f2:2f:7c:b2:14:b8:18:05:45:20:b8:c4:ed:f8:10:75:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:a3:b9:89:ef:4a:5b:4c:cf:b6:88:fb:f2:80:71:b8:be:f6:43:41
Fingerprint (sha256): 04:04:ef:47:ff:5f:9d:36:ec:ed:07:15:db:eb:82:07:42:c1:c1:02:aa:e5:f2:bb:23:cb:b1:7c:1a:a3:90:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afterwork-minneapolis.magento.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afterwork-minneapolis.magento.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterwork-minneapolis.magento.com

Other certificates including the domain name magento.com

(limited to 100 certificates)
su.magento.com
magentocloud9.map.fastly.net
*.dev.magento.com
statuspage.io
kickoff-apam.magento.com
guide.magento.com
engcom.dev.magento.com
de.magentocommerce.com
accounts.magento.com
afterwork-la.magento.com
accounts.magento.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud2.map.fastly.net
mcus.ecg.magento.com
prod.magento.com
shoporg.magento.com
events.magento.com
backend.opensource.engcom.magento.com
account.magento.com
secure08.lithium.com
staging.cloud.sparta.magento.com
static.magento.com
secure05.stage.lithium.com
events.magento.com
obui-sendgrid-api-prod.magento.com
dns-vetting1-mims-pawel.map.fastly.net
secure08.lithium.com
afterwork-minneapolis.magento.com
afterwork-nyc.magento.com
marketplace-stg3.magento.com
magentocloud35.map.fastly.net
magentocloud9.map.fastly.net
kickoff-emea.magento.com
marketplace-stg2.magento.com
secure08.lithium.com
marketplace-stg.magento.com
kickoff-emea.magento.com
dns-vetting1-mims-pawel.map.fastly.net
accenturetest.magento.com
secure08.lithium.com
secure08.lithium.com
resource.magento.com
sandbox.api.magento.com
glossary.magento.com
secure05.stage.lithium.com
cloud.sparta.magento.com
afterwork-la.magento.com
afterwork-seattle.magento.com
*.mcom.magento.com
cloud.sparta.magento.com
*.corp.magento.com
events.magento.com
brand.magento.com
magentocloud55.map.fastly.net
afterwork-minneapolis.magento.com
*.corp.magento.com
api.opensource.magento.com
obui-sendgrid-api-dev.magento.com
dns-vetting1-mims-pawel.map.fastly.net
*.mcom.magento.com
statuspage.io
magentocloud9.map.fastly.net
afterwork-philadelphia.magento.com
secure05.stage.lithium.com
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
afterwork-minneapolis.magento.com
mcc.stg.swat.magento.com
omsdocs.magento.com
support.magento.com
experienceleague.adobe.com
mcus.ecg.magento.com
afterwork-sf.magento.com
statuspage.io
statuspage.io
nrf.magento.com
stg.swat.ceng.magento.com
kickoff-emea.magento.com
support.magento.com
statuspage.io
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
tst.sparta.ceng.magento.com
mcc.stg.swat.magento.com
secure08.lithium.com
statuspage.io
statuspage.io
secure08.lithium.com
*.corp.magento.com
mp-stg-static.magento.com
statuspage.io
magentocloud58.map.fastly.net
magentocloud9.map.fastly.net
dns-vetting1i.map.fastly.net
magentocloud9.map.fastly.net
backend.staging.opensource.engcom.magento.com
de.magento.com
kickoff-emea.magento.com
api.magento.com
*.bcn.magento.com

Certificate

The complete raw certificate details for afterwork-minneapolis.magento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287854865152524858451031421710808769004336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 20:18:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 20:18:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afterwork-minneapolis.magento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842752204759838059714773007621728594317945499676368017659515963089486682207089470517265901050881132031735710384436060080307800421302010199725777583254783712851061494048772631031873171196695259722951422449716228286282243321239336609215027113185092453410116477456738964813070313976373606265638362711815794207316585371761279287849039721309537220360669810234316205140491714867195218948474350539990554991253407683010830950890964559327532025739327029727290268228926340701511269651068389629779705925856239568114534942861345740703871111700673730984917806550103660638469031683906381208786585277605623717424655027384820568178689401486872963145357106397522057307116717787923144028626441099540600648843333217654654424551332117214742088762898746991793010855215636089234242152164681904672929323790585429689160835223743056974380083766596985146598742523918116922278132579624889035920178326350063146625714956988060519438954097905706752098163792984584285962671050730756845653739804107570476034196064747672441679187657151490548893788809924896036598849633940883452072175898907504792329752947874520698200688338810581563967735598772630255602821197293339357898868895983560101679147112052035295382353115604272518827417467933460561488035022980680608789885909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							372474f22f7cb214b818054520b8c4edf8107567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterwork-minneapolis.magento.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b57db2955000004030046304402206ad84a9280cde07a2c3fe913e222f4e3ece3998fc7cf52838ce84ac7b30913400220707097fabb76004bcb79c9f98afd5e2cd7a232110588c024a90d40cea652c12b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b57db29480000040300473045022100937875ff3fdf13a13f38e09b06cea41fb5e7f7f82d35002b546a055e9b17c52e022023d4467b0162fad2bddb603633bb05e0a96f8d7faf0a8d5ac716ae06d03c8197
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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