shopify.mailigen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:14:69:f8:94:a8:70:3c:34:06:0e:2e:3c:62:d8:4e:a7:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopify.mailigen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:69:f8:94:a8:70:3c:34:06:0e:2e:3c:62:d8:4e:a7:a5
Serial Number (int): 355395650709779776404837423842765828958117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:e8:1c:96:1e:17:d7:43:ef:6d:4c:03:8e:9e:37:97:41:40:b5:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:1a:55:a1:f6:4d:21:88:b7:40:da:47:48:78:70:3b:db:de:53:2b
Fingerprint (sha256): 0f:7f:88:d0:98:65:36:c1:fc:ce:ee:55:a9:a8:26:f7:41:d7:8a:f2:63:6c:c0:54:06:aa:ad:e6:4d:e2:53:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopify.mailigen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopify.mailigen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopify.mailigen.com

Other certificates including the domain name mailigen.com

(limited to 100 certificates)
backend.omega.onappcdn.com
gl.mailigen.com
gl.mailigen.com
*.r.worldssl.net
*.mailigen.com
leadersend.com
*.mailigen.com
*.mailigen.com
*.mailigen.com
*.mailigen.com
shopify.mailigen.com
signup.mailigen.com
blog.mailigen.com
url.mailigen.com
backend.omega.onappcdn.com
mailigen.com
*.r.worldssl.net
mailigen.com
mailigen.com
archive.bp.mlgn2usa.com
*.mailigen.com
jira.mailigen.com
support.mailigen.com
backend.omega.onappcdn.com
mailigen.com
login.mailigen.com
mailigen.com
*.mailigen.com
signup.mailigen.com
*.mailigen.com
list.mailigen.com
backend.omega.onappcdn.com
dev.mailigen.com
support.mailigen.com
confluence.mailigen.com
login.mailigen.com
*.mailigen.com
admin.mailigen.com
mlgn.to
*.mailigen.com
archive.bp.mlgn2usa.com
backend.omega.onappcdn.com
*.mailigen.com
jira.mailigen.com
dev.mailigen.com
leadersend.com
*.r.worldssl.net
*.r.worldssl.net
support.mailigen.com
url.mailigen.com
api.mailigen.com
confluence.mailigen.com
login.mailigen.com
archive.bp.mlgn2usa.com
shopify.mailigen.com
backend.omega.onappcdn.com
*.mailigen.com
*.mailigen.com
shopify.mailigen.com
backend.omega.onappcdn.com
academy.mailigen.com
survey.mailigen.com
support.mailigen.com
*.mailigen.com
leadersend.com
signup.mailigen.com
*.mailigen.com
shopify.mailigen.com
survey.bp.mlgn2usa.com
backend.omega.onappcdn.com
*.mailigen.com
archive.mailigen.com
mailigen.com
*.mailigen.com
*.mailigen.com
mailigen.com
support.mailigen.com
blog.mailigen.com
shopify.mailigen.com
confluence.mailigen.com
survey.mailigen.com
archive.mailigen.com
survey.bp.mlgn2usa.com
mailigen.com
archive.mailigen.com
list.bp.mlgn2usa.com
shopify.mailigen.com
jira.mailigen.com
*.mailigen.com
mailigen.com
leadersend.com
list.bp.mlgn2usa.com
*.mailigen.com
*.r.worldssl.net
backend.omega.onappcdn.com
survey.bp.mlgn2usa.com
gocd.mailigen.com
survey.mailigen.com
*.leadersend.com
admin.mailigen.com

Certificate

The complete raw certificate details for shopify.mailigen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355395650709779776404837423842765828958117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 05:01:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 05:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopify.mailigen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864163356095902719310815972180694479664430446822959974613629220919992391342400944014995510249582109449301957750071355900191627060026166154930667845322515021335532376330499332934230473908365183208882133735405686654010016185204612183765081737924195779649122778163401313670310185823966437022515909897343035501902050878745245310358084006790364642175678407968750472285798793353876448364661032941770332913003403167807551254578837549901348317411766720783624273188122062419860109238825008557914073594686892163420076684014201514231825969652348520909153570454578440364415596768224658116287866220558198347009114763168362789102930564510880112161937533681832522283526325253228274083698989029265580905616221803880115982043666075929367308672252310705325985402040439137632920817116322572857690319862305227299675003408875630281597557336457204214454416195916050936954309158755617906143939762530945482766126927967602977322959076166163429345106869448696357813137905278033738001507856134491945830355730983224371150239407241231544847328535875004429583890733213769706799104283605207111569881711793240684219906200083989685428623819502465554976010893505612787273543598410371813107153883631832877252413329096871955490845388462933697274150554875021151075410039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82e81c961e17d743ef6d4c038e9e37974140b591
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.mailigen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c08d1e2c90000040300473045022100aca65a734a39dd032bc75e10602de344bffa9be40c99b07e6ae73ddb1099ec3e02206893fa249d6b70980b89115d0f41f1a07f6b3537a19d9321766adcc6301a718e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c08d1e2c3000004030047304502203b79c423567c485cab1a5e7a223137e17c35f18462010496011d60a13c19dd40022100ede1615bf2f0421d98a8aa28bb46e836ba313fe86a766f742cd52a043589d710
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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