libask.itsligo.ie

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:82:54:ed:23:48:35:2c:8b:5a:05:8f:07:d5:dc:40:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=libask.itsligo.ie

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:82:54:ed:23:48:35:2c:8b:5a:05:8f:07:d5:dc:40:4e
Serial Number (int): 284309016981098181938491516817233722228814
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:86:4a:9e:f9:af:e5:a3:07:64:99:e4:7e:b9:d4:79:15:71:b7:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:21:d6:e6:34:0d:18:57:cd:32:1c:c0:27:eb:ee:12:5f:ce:68:5b
Fingerprint (sha256): 11:ea:17:c2:3e:d3:0a:1f:91:c5:25:b9:b8:1f:96:8e:bd:69:2a:97:25:05:5f:96:84:e3:70:de:57:9b:94:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate libask.itsligo.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libask.itsligo.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libask.itsligo.ie

Other certificates including the domain name itsligo.ie

(limited to 100 certificates)
customerportal.uk.rlb.com
epayments.itsligo.ie
support.homeinstead.ie
hsm.itsligo.ie
systems.squaredup.com
helpdesk.epsilonnet.gr
vle.itsligo.ie
exampapers.itsligo.ie
studentportal.itsligo.ie
support.homeinstead.ie
hub.theriderfirm.cc
libcal.itsligo.ie
password.itsligo.ie
servicedesk.esmsglobal.com
cag.itsligo.ie
dissertations.itsligo.ie
ithelpdesk.familycarers.ie
service.littlegarth.org
heastaging.itsligo.ie
libask.itsligo.ie
ithelpdesk.oneplm.com
libcal.itsligo.ie
sdp.dilloneustace.ie
support.homeinstead.ie
customerportal.uk.rlb.com
outlook.itsligo.ie
outlookex-test.itsligo.ie
helpdesk.mlw.mw
helpdesk.itsligo.ie
servicedesk-meckenheim.pvs-europe.com
helpdesk.itsligo.ie
sugarcrm.itsligo.ie
support.homeinstead.ie
libask.itsligo.ie
vlearchive.itsligo.ie
servicedesk.alessi.com
staffweb.itsligo.ie
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
helpdesk.itsligo.ie
support.homeinstead.ie
sdp.dilloneustace.ie
support.homeinstead.ie
*.itsligo.ie
heastaging.itsligo.ie
servicedesk.coram.eu
support.homeinstead.ie
edocs.itsligo.ie
sd.srk-zuerich.ch
servicedesk.buildmat.eu
opencourses.itsligo.ie
hsm.itsligo.ie
adfs.itsligo.ie
helpdesk.itsligo.ie
libguides.itsligo.ie
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
support.brill.com
support.homeinstead.ie
helpdesk.itwfasteners.com
support.homeinstead.ie
ithelpdesk.frederic-robinson.co.uk
grouphelpdesk.oceanscan.co.uk
helpdesk.itsligo.ie
libask.itsligo.ie
staffportal.itsligo.ie
helpdesk.itsligo.ie
heastaging.itsligo.ie
libguides.itsligo.ie
support.homeinstead.ie
ithelpdesk.koinly.io
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
helpdesk.sunlight.gr
helpdesk.beauchamps.ie
customerportal.uk.rlb.com
www.itsligo.ie
support.homeinstead.ie
hsm.itsligo.ie
coolaney.itsligo.ie
*.itsligo.ie
*.itsligo.ie
servicedesk.am-labor.de
itsupport.nza.nl
support.homeinstead.ie
servicedesk.relyonnutec.com
estateshelpdesk.itsligo.ie
library.itsligo.ie
it.rmk.ee
noc.servicedesk.as
it.rmk.ee
itsupport.gnt-group.com
support.apc-overnight.com
libcal.itsligo.ie
systems.squaredup.com
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
customerportal.uk.rlb.com
support.homeinstead.ie

Certificate

The complete raw certificate details for libask.itsligo.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uo9Odxj/So+S/9QKDZF
EPYXYqqBzl/wl587Em8b7KA2WYXTCl0DSxhyH4Adw1T2PnbiiNdw6fZwN4Cmjdj3
hTYAt7DQlETOAUPAJ/PQejj2yX/4yilIQ/0Qqhu57SM8tG70Shm++fG6z2UOdzNf
xNxhN0Xh41lxW1xqx1ih/grk8uYuBjMETb/+MOxSvgu8GU1H2xYbcpi1ZQ9RtJ3b
zqxNhxM0FU1Rp/+JrAuThJcE7NqL0bzRWbUPQqmsTNLAGc7QerEmHR4QH676pM38
jaAx+IYXA6cKyyC4SZ3M8cVgq8slgaeQWjWWKWQtgh/24IqzqPHHJshNDNxf1VWO
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284309016981098181938491516817233722228814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 12:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 12:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libask.itsligo.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26420414434167139147909174849213883297255052184189231026337521849145528555436736874051496515600387187610506174813158039178124907652030801051107143331363943393251753681483631784678208941907498350512675772956763061983884615003105305899395352055751040162501704046492547796971020784582233995801771846190958859435612074817773113340822156964393751506335983072133852876807870101341222053351158553983092755029012506101670801981773212862123354796115315389855925249201614456072988175070466766018267008857638508017723895408467206399898158864912069317776147912731197834799551225230942479478600359169857490860616579703727912750721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66864a9ef9afe5a3076499e47eb9d4791571b79d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libask.itsligo.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a211b07080000040300483046022100cf1878a52766bff456fca94966abbb340e5307fbe9276e1d552cbb43bd9ea49c02210093c15fedaa98710b23672156d11eccf7fcef4847a9748823d7605c89f0fb3582007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a211b09760000040300473045022016bd7e1fcdd6756eeab1b2034480b4c2a1cafbbbe50818aba3a6e789817d799e022100df8bbebb2ffb78903e4d4a0402cb8e0465a389cc5fa43dc83f70b01b13136e59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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