staging.magpul.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:5e:bb:89:0d:f4:a8:ae:26:69:00:ff:f3:4e:bc:7a:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.magpul.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:5e:bb:89:0d:f4:a8:ae:26:69:00:ff:f3:4e:bc:7a:cf
Serial Number (int): 431263680059741161390213819229403610905295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:84:78:41:03:28:f8:65:8c:aa:95:e2:08:15:de:f4:95:4c:73:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:8d:de:f8:5e:7e:11:8f:0c:de:56:e8:26:e4:f0:e5:82:9c:67:37
Fingerprint (sha256): 05:e2:8f:df:c9:7b:b9:dd:bc:43:b9:6b:f9:a8:e2:26:b2:4f:f0:16:3f:cc:5e:01:83:57:b5:bb:b8:5b:86:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging.magpul.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.magpul.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.magpul.com

Other certificates including the domain name magpul.com

(limited to 100 certificates)
ns3.magpul.com
magentocloud27.map.fastly.net
magentocloud27.map.fastly.net
magpul.com
sandbox.magpul.com
magpul.com
enews.magpul.com
staging.magpul.com
ns4.magpul.com
staging.magpul.com
tls.automattic.com
staging.magpul.com
magentocloud27.map.fastly.net
sandbox.magpul.com
sandbox.magpul.com
sandbox.magpul.com
media.magpul.com
tls.automattic.com
comms.magpul.com
ns3.magpul.com
tls.automattic.com
staging.magpul.com
sandbox.magpul.com
ns1.magpul.com
sandbox.magpul.com
enews.magpul.com
enews.magpul.com
ns4.magpul.com
web.magpul.com
global.magpul.com
ns1.magpul.com
ns2.magpul.com
tls.automattic.com
pdmweb.magpul.com
ns4.magpul.com
www.magpul.com
magentocloud27.map.fastly.net
sbc.magpul.com
enews.magpul.com
sandbox.magpul.com
tls.automattic.com
staging.magpul.com
usftp.magpul.com
global.magpul.com
magpul.com
magentocloud27.map.fastly.net
ns4.magpul.com
magentocloud27.map.fastly.net
magpul.com
tls.automattic.com
ns4.magpul.com
tls.automattic.com
magpul.com
magpul.com
staging.magpul.com
tls.automattic.com
ns2.magpul.com
store.magpul.com
ns4.magpul.com
staging.magpul.com
www.magpul.com
magpul.com
magpul.com
magpul.com
ns1.magpul.com
sandbox.magpul.com
tls.automattic.com
enews.magpul.com
forms.magpul.com
sandbox.magpul.com
global.magpul.com
usftp.magpul.com
staging.magpul.com
staging.magpul.com
ns4.magpul.com
magentocloud27.map.fastly.net
sandbox.magpul.com
ns1.magpul.com
enews.magpul.com
sandbox.magpul.com
enews.magpul.com
global.magpul.com
sbc.magpul.com
tls.automattic.com
ns2.magpul.com
*.magpul.com
magpul.com
magpul.com
magpul.com
ns2.magpul.com
staging.magpul.com
www.magpul.com
enews.magpul.com
global.magpul.com
ns3.magpul.com
staging.magpul.com
usftp.magpul.com
magentocloud27.map.fastly.net
enews.magpul.com
magentocloud27.map.fastly.net

Certificate

The complete raw certificate details for staging.magpul.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTxI6eWxTIR03tBZdHT
Xol9n75PGfNe5STqioBmN6HdWbh+uLxyyXThI6mCNoYPon5YC//Gv07x23QWLOX+
UR+6sInNI3sPFXV7DP2uRuM9KVdXnsS3oWIm05/+awieZP7PfYpgbz7Ao6alS3H1
uBFgbApeWyXGtLAOcGWU8Ez7ec/dWFkbk6oiDamy8nkEEVEj6TwHWzLSM3Swhbro
AVwue8Ue7tIAW/6ZVz/Nf7niZu95cQA2EqP08RAF8JqhTC85CvacroqvVGT6Xl+x
WT6HXUheblKakCrwJtqnYFLFzlcubwerVGoQ76ifmpOJrfL969EsoLyXY+LcGKmg
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431263680059741161390213819229403610905295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-28 11:30:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-26 11:30:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.magpul.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23301294126816481643415228192625566773466758392025876886137022692052199288465640129894579890175604478589792539455389210674781441961063501821161836530252309875462707526378848958744927319087965353040496540148160808459414223343347669791781433759759344384960316903792098197256333674639073225717385841378696409150704590422284311944061763050743315797622792506518582656168739195746249222898748891335844005449674771420617356148521237175307024060785812256450000908331018810379377361932342830321306224668130323072774112207174244183596601012157436980434120511729189464115860933754733887443521991225514444531221732618077433602269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff8478410328f8658caa95e20815def4954c7311
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.magpul.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b8cbd32910000040300473045022064cc35aa4ddca5edf5efddff039001769a31d6365edf62bb79d680b88e43af0a022100f1af922036772d16ee1e7c40a66ce0d5d80ff821d9fe614b43c76c64365e959b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017b8cbd33d10000040300483046022100bc39e35185d6281273cc0c97815c83dc859acb0b2daa5709047ac37cebdb0ec10221009a9a8efd4a4cc4cee2ce6d82edf2a93ce9cdef9208e3159cd618ed8d34f958a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042a8187ca32bfaf119b49310b12df03d446c3155b4ce89506ec71bb0b697fc8936989fdd1a8bd61f19d83abba81931271e0a1d3f39f24cb01771c11d32f08af1bce754111ca5bfb56c87ac669962c611f6503c260723af5712976b6c2928609055daffcbc8025dee02d441281ace8ca5f51f2c6209feaadf23a1c9d7835b3faa5e19b0d89ce47804bf7dc0ebc9917e27c83b29ed46fa66594066aca34f8206778f18004b491033f1f54fb3161dfcb5f62b0b916d4b94d68f98c184d41e210243da5e4aa4b6a249a4ac5d9c02b5aa4364a9d2b4aff9abe6fd5b0b0e808a49b942a1edbd0174dbf62507c556984850cfd87c1e06bacf79c4459c0059f5bd79cfe1