xl-gmt.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d0:9f:ff:65:e9:7e:e1:88:af:15:26:69:9c:78:6d:b3:48 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xl-gmt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:9f:ff:65:e9:7e:e1:88:af:15:26:69:9c:78:6d:b3:48
Serial Number (int): 419440549400647714591375249108094302401352
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:04:40:16:a5:7d:d4:e7:79:13:47:73:f6:06:02:17:74:98:20:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:2a:8a:36:7a:4a:cd:83:e6:46:0e:39:26:2d:ba:bc:49:c3:c1:26
Fingerprint (sha256): 07:85:77:5c:ca:7a:df:ed:34:0c:1e:ba:ef:8f:65:d0:61:7b:16:50:65:a7:97:ee:60:04:60:65:ca:36:12:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xl-gmt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xl-gmt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xl-gmt.com

Other certificates including the domain name xl-gmt.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for xl-gmt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419440549400647714591375249108094302401352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 08:38:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 08:38:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xl-gmt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890877357371096367239398098570595338253015857305871807397690067714484680930909316662635987425482151847128970500141199050958948296215493118532553905977881635179021966584945212702768825906350849852127485054172161294138790900259792833072231434966373590526786060261878269612811400198903380873400521764937656148865464070709870792228738213549200484070724160768154750425768534409224370975921494658473070744853532622769123136020791916828037420865881969368658499736471044126852976487549395264753944383563281546870570563321653895732039603603106591740816358589937940899079748303228506532104642118525565167340463249259879509545128954186629050705194345953130070023227889835768870898297488821424533236666332744165417941856712788212247510636512282303799720002240704139411353699719732023375086687106155318907241421973495522627439765978034551534031173614313697032258897486136930732664167010119385506103013233312009320848979084243664828235047491278635970573433332570986837813829818976699344855822002455736560176213591836331288423731982358676867265084550728116632415900224789484808915331114664568195832424413315679914991385341163408424827747454878408586164247970660365590454108684646460956368475999777037015824483414573743882300401532249790521960108883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34044016a57dd4e779134773f60602177498201f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xl-gmt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f93f888000000040300483046022100f5b56f55296048be03d2e951cb3cdc9ad218cc1af2616082ad6e1db59368ecea022100fd6168b408fecd7139e9881375ab54af74bc347903842d4c50f30d2ecfb6f4ac0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f93f8882e0000040300483046022100e5c570e9455a22ceb29615144cbc1fac37d58aa26be972ac7ede0d857a6241160221009e32cf4536fd4bf048d0b4c65188a83269570ded349b90a8e5809d7d7ec9d672
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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