gitlab.mfessolutions.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:a0:4c:12:a5:99:7e:dc:23:d4:5c:47:23:c8:4b:8a:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.mfessolutions.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:a0:4c:12:a5:99:7e:dc:23:d4:5c:47:23:c8:4b:8a:08
Serial Number (int): 296599013060227761114484845550966856714760
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:94:58:fc:1d:96:6e:e3:e6:9e:d3:d9:a7:c2:09:69:18:cb:37:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:7d:40:d6:fa:bb:85:33:3b:00:04:a8:38:76:26:9e:a8:42:f4:ad
Fingerprint (sha256): 17:f3:37:b3:2c:32:0c:e2:34:fc:ed:b8:35:10:06:86:3c:cf:29:25:9d:d8:dd:4e:fe:c0:ec:f0:dc:6e:a4:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.mfessolutions.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.mfessolutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.mfessolutions.com

Other certificates including the domain name mfessolutions.com

(limited to 100 certificates)
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
task.aasmaasecurities.com
zoho.fourmedia.do
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
*.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.tollos.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.curocomp.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
task.aasmaasecurities.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com

Certificate

The complete raw certificate details for gitlab.mfessolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h5ayQ8VbuWe4qIedTh9
Dl9NasoqZA5ZZgwkVqSxkGfIX/EU2cbjTLyPmg1JGHks4CG+mFHszR1I8gaoP97J
f6jHdb5r0iQ/fpRr+dWuqbTjQTLKcVL7Yrqp5HKfMrkbtEQDDs6TeC213iWriby9
hQZFsskUa+E0emDLC0N7DThGKuqxdG+rbuR7dcw6LOHZNW4RvwcW2kzIC8B+MW+u
CLzSwuF+KR1dBf/sJu1hNVDEPdBQdMwQIc99Kep5lFdP6pdX8j0t72w3eCADJXZi
woDnyU52l9NxgW9lbG7jEA9DMvQeXe/0rAXPNFNpZCC0cGZmH1yskIYXNzHHf0yN
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296599013060227761114484845550966856714760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 23:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 23:25:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.mfessolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525012469011155520172067547614755235814322071613984174693156975063632302068535411125930417801408028544184141250556306066115257891893903905077224630478722749067031609692360160705958340438351172071728119860267847233056074899165223150975381402654986350198723420072932450459035135977845655582536050822040639486032150380571119788997229581269259772767044170316491395656337950585958552416152324886920067128326924448929743617862467596679254775523912468742219749382961481811307454972624789205114506324828491560139062637993620314841619569277493389026636845689553380439400896841022126418408874433682792448769891066839036628429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							419458fc1d966ee3e69ed3d9a7c2096918cb372f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.mfessolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166cca905240000040300483046022100cbb049342271dbe56c8eeb9be4c8dfe5431afaafda299b88402e7e6d8ffa7c03022100dd26ff92b78146c9c40f1adfac5078bcfb1764e9f0283e7a6056d05abf28a6b7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166cca905830000040300483046022100cf209ed804c67e4cfb7482bb8c33a871a287b15a9fd57b122d31000b13d1cefd0221008f9c300bc720d07efd50445b94dac82ba74c060e2ca4ac713d8857c16749e48f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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