staging.magpul.com

Issued by R3

About this certificate

This digital certificate with serial number 03:14:5a:3f:92:5a:39:4e:78:38:7c:1c:d5:d2:0a:5e:84:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.magpul.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:5a:3f:92:5a:39:4e:78:38:7c:1c:d5:d2:0a:5e:84:e3
Serial Number (int): 268262465736402311600768488473181210707171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:94:63:6a:5e:2b:0e:71:b9:0e:46:44:fd:17:8d:ec:53:5e:f2:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:cc:86:b9:1b:3f:fc:18:4a:eb:e0:91:8d:7e:2c:fa:bf:aa:ea:48
Fingerprint (sha256): 05:4b:62:71:3d:29:30:83:76:a3:2d:36:9a:4d:e8:1b:17:40:f0:ed:41:aa:c9:90:f9:65:4e:92:71:31:51:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging.magpul.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.magpul.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.magpul.com

Other certificates including the domain name magpul.com

(limited to 100 certificates)
ns3.magpul.com
magentocloud27.map.fastly.net
magentocloud27.map.fastly.net
magpul.com
sandbox.magpul.com
magpul.com
enews.magpul.com
staging.magpul.com
ns4.magpul.com
staging.magpul.com
tls.automattic.com
staging.magpul.com
magentocloud27.map.fastly.net
sandbox.magpul.com
sandbox.magpul.com
sandbox.magpul.com
media.magpul.com
tls.automattic.com
comms.magpul.com
ns3.magpul.com
tls.automattic.com
staging.magpul.com
sandbox.magpul.com
ns1.magpul.com
sandbox.magpul.com
enews.magpul.com
enews.magpul.com
ns4.magpul.com
web.magpul.com
global.magpul.com
ns1.magpul.com
ns2.magpul.com
tls.automattic.com
pdmweb.magpul.com
ns4.magpul.com
www.magpul.com
magentocloud27.map.fastly.net
sbc.magpul.com
enews.magpul.com
sandbox.magpul.com
tls.automattic.com
staging.magpul.com
usftp.magpul.com
global.magpul.com
magpul.com
magentocloud27.map.fastly.net
ns4.magpul.com
magentocloud27.map.fastly.net
magpul.com
tls.automattic.com
ns4.magpul.com
tls.automattic.com
magpul.com
magpul.com
staging.magpul.com
tls.automattic.com
ns2.magpul.com
store.magpul.com
ns4.magpul.com
staging.magpul.com
www.magpul.com
magpul.com
magpul.com
magpul.com
ns1.magpul.com
sandbox.magpul.com
tls.automattic.com
enews.magpul.com
forms.magpul.com
sandbox.magpul.com
global.magpul.com
usftp.magpul.com
staging.magpul.com
staging.magpul.com
ns4.magpul.com
magentocloud27.map.fastly.net
sandbox.magpul.com
ns1.magpul.com
enews.magpul.com
sandbox.magpul.com
enews.magpul.com
global.magpul.com
sbc.magpul.com
tls.automattic.com
ns2.magpul.com
*.magpul.com
magpul.com
magpul.com
magpul.com
ns2.magpul.com
staging.magpul.com
www.magpul.com
enews.magpul.com
global.magpul.com
ns3.magpul.com
staging.magpul.com
usftp.magpul.com
magentocloud27.map.fastly.net
enews.magpul.com
magentocloud27.map.fastly.net

Certificate

The complete raw certificate details for staging.magpul.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAxRaP5JaOU54OHwc1dIKXoTjMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA4MjIxMjI4MjlaFw0yMTExMjAxMjI4MjhaMB0xGzAZBgNVBAMT
EnN0YWdpbmcubWFncHVsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMscuOSPhsf7vPo4a4S3AAQdjgpP3bJATTgGCqDebwxiixSyahEIzqjOhS2M
625mfmVaNJhS21RDBITLTlESdgZUDqE+kEp1xi08STZ1GY5wGg14MH7FI453rIlB
MKh9iDong0lAi2Vz3seA3IAf5jeTHQMLWbGGmH+m1nMMv2iGwUmhejeu0LIMkGcB
yKHl7xsa6ZD7MrfjuLU79jchlkIJT3xD6rgtKNbnJZ/KCtZ7tMChSaWPcjqFzG3v
0vNCjfQD1oURkXIiNA2GkcKNyw7zQma4EKqU0AI1WjUhX580gppMkql9OpKDu2tu
umIbGlfbuMvu0cw8hSY4YOUfNEUCAwEAAaOCAk0wggJJMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUbJRjal4rDnG5DkZE/ReN7FNe8kQwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wHQYDVR0RBBYwFIISc3RhZ2luZy5tYWdwdWwuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAlCC8
Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAF7bgxfRwAABAMARzBFAiEA
h8S9rqGfZFP788AQa52Zvbg6rDnsz7tWAOCBCnfzFPICIHRq/pCC3iQ/EixNsB5F
XmYCrwV8JZyZ7j3D70gWVkJlAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyAL
zE7xZOMAAAF7bgxhSQAABAMARzBFAiAG38aeznTj80o3Y98UXyumQ8MG+8yNz8FF
45VGGi4BpwIhAMaZf2UocZUI00kyTNmNsmZJ26V4y3BL10f0wQF9cwlMMA0GCSqG
SIb3DQEBCwUAA4IBAQB+Bhz53Ei+a6aRcsMdDxkLlbFzhDc8UghxQoFRPFWtR40x
+LspnKRB8iSyJU6NL6OqrK8yqsgrXHYISXx6/XBwIloBZDQh0slHJGMcsqhqKgUv
NqiPCkml40k0/PsGPBmLHocFeNNyYVEGtZQM4fkWH/fOZsqg3ZakCx/Dr3N8tTKx
Rm54PeC++h/RQJvE2W06Ie3co9flidhlpdEeve5l6ygTV4uCCIDCrbQXI0novM3n
FfrWUuIwRFJHnhifkXV1jBoKU6atHI72M1CoSrnGp4vO3dM1sqZuSYcZW8Prjw5c
Zmy1hx88CkbWRMtN0pgizenSlMx7Lxu2wUkclwWF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxy45I+Gx/u8+jhrhLcA
BB2OCk/dskBNOAYKoN5vDGKLFLJqEQjOqM6FLYzrbmZ+ZVo0mFLbVEMEhMtOURJ2
BlQOoT6QSnXGLTxJNnUZjnAaDXgwfsUjjnesiUEwqH2IOieDSUCLZXPex4DcgB/m
N5MdAwtZsYaYf6bWcwy/aIbBSaF6N67QsgyQZwHIoeXvGxrpkPsyt+O4tTv2NyGW
QglPfEPquC0o1ucln8oK1nu0wKFJpY9yOoXMbe/S80KN9APWhRGRciI0DYaRwo3L
DvNCZrgQqpTQAjVaNSFfnzSCmkySqX06koO7a266YhsaV9u4y+7RzDyFJjhg5R80
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268262465736402311600768488473181210707171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 12:28:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-20 12:28:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.magpul.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25640539371329624043165124875185396750324271602248226829403782778011288393798647202411871291509579857903669060262544906512850549005897409345038486380191849346950634710020280460710433056922717351052517425713771629673881505648390478220875190713514657613323456375894625302701900505398349354109005109008555957844132866208458115736611596275906721260441792218856728548520807064609631976724805143582127779184634508993413685714157541378557737755134874550728694919235839282015344952351436522693874826534685918208039263981195363122942995185150608183059592956193857124993106790984786948912341590581005223931639242584333119075397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c94636a5e2b0e71b90e4644fd178dec535ef244
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.magpul.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017b6e0c5f47000004030047304502210087c4bdaea19f6453fbf3c0106b9d99bdb83aac39eccfbb5600e0810a77f314f20220746afe9082de243f122c4db01e455e6602af057c259c99ee3dc3ef4816564265007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b6e0c61490000040300473045022006dfc69ece74e3f34a3763df145f2ba643c306fbcc8dcfc145e395461a2e01a7022100c6997f6528719508d349324cd98db26649dba578cb704bd747f4c1017d73094c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007e061cf9dc48be6ba69172c31d0f190b95b17384373c5208714281513c55ad478d31f8bb299ca441f224b2254e8d2fa3aaacaf32aac82b5c7608497c7afd7070225a01643421d2c94724631cb2a86a2a052f36a88f0a49a5e34934fcfb063c198b1e870578d372615106b5940ce1f9161ff7ce66caa0dd96a40b1fc3af737cb532b1466e783de0befa1fd1409bc4d96d3a21eddca3d7e589d865a5d11ebdee65eb2813578b820880c2adb4172349e8bccde715fad652e2304452479e189f9175758c1a0a53a6ad1c8ef63350a84ab9c6a78bceddd335b2a66e4987195bc3eb8f0e5c666cb5871f3c0a46d644cb4dd29822cde9d294cc7b2f1bb6c1491c970585