support.magento.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:d9:28:87:7b:34:75:3f:a1:04:94:75:f6:ff:1f:14:59 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.magento.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:d9:28:87:7b:34:75:3f:a1:04:94:75:f6:ff:1f:14:59
Serial Number (int): 432447258904438112183551988637382884660313
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:9d:dd:ba:96:a1:05:ab:76:6d:b1:e4:87:56:1c:9a:5f:68:de:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:37:10:a2:40:0e:c5:37:8d:a7:38:3c:5f:b4:b1:a4:74:7e:ac:c8
Fingerprint (sha256): 05:36:a9:41:34:72:7e:1f:fe:f7:da:3e:5e:91:f7:23:f8:67:b6:50:c3:c5:40:4e:7e:d0:84:ce:c0:a0:b0:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.magento.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.magento.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketplacesupport.magento.com
support.magento.com

Other certificates including the domain name magento.com

(limited to 100 certificates)
su.magento.com
magentocloud9.map.fastly.net
*.dev.magento.com
statuspage.io
kickoff-apam.magento.com
guide.magento.com
engcom.dev.magento.com
de.magentocommerce.com
accounts.magento.com
afterwork-la.magento.com
accounts.magento.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud2.map.fastly.net
mcus.ecg.magento.com
prod.magento.com
shoporg.magento.com
events.magento.com
backend.opensource.engcom.magento.com
account.magento.com
secure08.lithium.com
staging.cloud.sparta.magento.com
static.magento.com
secure05.stage.lithium.com
events.magento.com
obui-sendgrid-api-prod.magento.com
dns-vetting1-mims-pawel.map.fastly.net
secure08.lithium.com
afterwork-minneapolis.magento.com
afterwork-nyc.magento.com
marketplace-stg3.magento.com
magentocloud35.map.fastly.net
magentocloud9.map.fastly.net
kickoff-emea.magento.com
marketplace-stg2.magento.com
secure08.lithium.com
marketplace-stg.magento.com
kickoff-emea.magento.com
dns-vetting1-mims-pawel.map.fastly.net
accenturetest.magento.com
secure08.lithium.com
secure08.lithium.com
resource.magento.com
sandbox.api.magento.com
glossary.magento.com
secure05.stage.lithium.com
cloud.sparta.magento.com
afterwork-la.magento.com
afterwork-seattle.magento.com
*.mcom.magento.com
cloud.sparta.magento.com
*.corp.magento.com
events.magento.com
brand.magento.com
magentocloud55.map.fastly.net
afterwork-minneapolis.magento.com
*.corp.magento.com
api.opensource.magento.com
obui-sendgrid-api-dev.magento.com
dns-vetting1-mims-pawel.map.fastly.net
*.mcom.magento.com
statuspage.io
magentocloud9.map.fastly.net
afterwork-philadelphia.magento.com
secure05.stage.lithium.com
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
afterwork-minneapolis.magento.com
mcc.stg.swat.magento.com
omsdocs.magento.com
support.magento.com
experienceleague.adobe.com
mcus.ecg.magento.com
afterwork-sf.magento.com
statuspage.io
statuspage.io
nrf.magento.com
stg.swat.ceng.magento.com
kickoff-emea.magento.com
support.magento.com
statuspage.io
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
tst.sparta.ceng.magento.com
mcc.stg.swat.magento.com
secure08.lithium.com
statuspage.io
statuspage.io
secure08.lithium.com
*.corp.magento.com
mp-stg-static.magento.com
statuspage.io
magentocloud58.map.fastly.net
magentocloud9.map.fastly.net
dns-vetting1i.map.fastly.net
magentocloud9.map.fastly.net
backend.staging.opensource.engcom.magento.com
de.magento.com
kickoff-emea.magento.com
api.magento.com
*.bcn.magento.com

Certificate

The complete raw certificate details for support.magento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432447258904438112183551988637382884660313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 23:39:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 23:39:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.magento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667476389735498240690117019305424962496579702490021905992186966490211815511233904266110551810348501520156220255291750884567372499975138343743302325415055254065559246941630350099847565391550600831471763992404575351735187853245283537694056449002215936773193423057095449746818401839977063863252888377417955522859406994071329023716163014327438311775138643745850237878875571980705544376912296039150618739003561074543058454548187808619464150617284939486888997193861506452542101232668314613372672658142729499413830375064955923775806956695352705586032127900349721849461457799571078459340223370081074521564740882089748116552808608982956525196005550848167115158075319269961628929912576683022000263770979023499607310265846346541439829245782547287005336206924771498564712480804814780249955134523308033518191515004084194537445596164935796573113917447449236405931434399622741616943599798759813702037607454170349538525701969386323771316755692823765356653147735302146193844234545117778854728100402306877371616588983551891697490161423937278283980210002806446675964522550202693668004099322246087328085099954917361470660597025675139118975553363636064961336162817346221824670596858751921706654955929177652068784290869308851766747645670820863175411888241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							779dddba96a105ab766db1e487561c9a5f68deec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplacesupport.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.magento.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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