cert-00001-cdnedge-bluemix.akamaized.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:a3:76:d4:d4:92:4e:36:25:67:5a:48:78:ab:26:9b:16 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert-00001-cdnedge-bluemix.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:a3:76:d4:d4:92:4e:36:25:67:5a:48:78:ab:26:9b:16
Serial Number (int): 292179551989219935839042683043912714984214
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:3f:23:eb:88:66:11:77:c9:7e:cb:62:77:53:e3:4f:17:80:69:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:36:44:6a:bc:88:1f:75:65:fe:71:d8:df:47:c8:23:e7:7d:be:25
Fingerprint (sha256): 17:97:11:db:4f:e7:c3:e8:bf:13:e0:1c:e8:2c:e7:fd:dc:ba:85:92:d2:29:c7:08:3b:7c:ce:01:ea:ff:27:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cert-00001-cdnedge-bluemix.akamaized.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert-00001-cdnedge-bluemix.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdnakamai.comet.it
cert-00001-cdnedge-bluemix.akamaized.net
ibm-fantasy-widget.espnsb.com
tom-tailor.topmone.com

Other certificates including the domain name cert-00001-cdnedge-bluemix.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert-00001-cdnedge-bluemix.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXZtfLnEf46cE39dFu5V
636TcEmYIfwOBBApyMxH83ShctN0heyg4xbg9i80oimED74tLbXOaTqY+VH+RIiY
yqnknOgMkfl+KRRP2NAKJJhRlfc4gKOUWnFag/tZ2H7JGBWDpkhMJu83Ylx9Idwd
Ia23eYVNGc4Qh8Ui5PeYrPAp8TZDIrWucidXzx5fLhoy8MxtzmYvbdirERHnpf96
0I8kwzjMkmrxdkITf8gUGAjsI8Zkr5ZUf/nJBA8xXRVDMuDJ1rynSJtlCXY/iA98
8zWO3Riyzz1qs2132gVM4v2mTR/FrM2LwEcAHHOBipr8DHxIwoT9wt1DdJ0zB2qU
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292179551989219935839042683043912714984214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 04:37:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 04:37:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert-00001-cdnedge-bluemix.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25432298165917171733791828765718412383161750805205706057786592249740043175826525272237894695850529253963400871431295710005625769884730046388106489166710347724605694232237107634622145667481956883529656301847540156415050158494646771396507742540870263353529239028843393571304533110439629996106897914133235114410341787811748422899029643554806862776487356984946608220047293118837215127854395875987303429111896030428857684120741279323252982538990431673259360983440022645229797014614631297801482949938903742522180120133211745746938812775874830477124595903519449213472052405291654250908641172991134864718903978795226660246571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							393f23eb88661177c97ecb627753e34f17806961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnakamai.comet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert-00001-cdnedge-bluemix.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibm-fantasy-widget.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tom-tailor.topmone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167d46b270a0000040300473045022100effadccec976d4c81a946f64d0a0073303a4200ddd6e38b727fb028a45dc7c3002204a392da82a8a69f68fb8fcee8a799da70eb2fa310d3ddcb2ccd72123bddfd56a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167d46b26cb0000040300483046022100981018f2e0a33de377f4d54758e3b89ad53d70cd50a0f225dc891db39bc11ca5022100ac4315f010c0f10ccb67241db957b9955f0b8d447c5884b20e42df30be98b8bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077e675499b0f6dda7673fb8d1ba55f45c76dc15f27fd63d4e93f55bc83f36e36e77e78cb62b04ac477b40a0e3bdb04744f4e532909d76a050bc4dc93ee21ae914640341addce0370fab558dc670cc2e299bc8e5ccff8f71e954ae8bdf2295f9f75298cecff5f0f0d9ca5af6921088c4d52747627f49d51e1c72ecfd54bf8a8c9ded9c65ad631084515f512b4959b15add82871a8c1fb260e5ad197b7527bb490aab1c059b081d6a74c975e7fe32d95776240aabf73f8cd507adf7aea6c048df749183a45add2ec4e1577413c69ecfb4deec34969e3c34b850cc9217bc56bae54b3f99f084223975e8f7b2a2b6b8ff4ccd5dc148b35f3514c708b8843be43b1af