dev.asmodee.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:37:c9:5c:ee:c3:b5:d8:ef:c5:ff:da:3d:2c:53:09:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.asmodee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:37:c9:5c:ee:c3:b5:d8:ef:c5:ff:da:3d:2c:53:09:22
Serial Number (int): 269577787677718554567647036486291301796130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:61:65:3e:b8:e0:b9:b2:89:41:bd:4a:90:aa:f1:2f:b1:0b:3c:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:d9:3a:02:cf:3d:0a:41:89:ea:78:bc:3d:0d:cf:e4:ab:82:29:07
Fingerprint (sha256): 22:57:9e:15:27:9b:34:06:72:4d:d0:a7:1b:ae:8e:1f:91:d6:55:6e:d9:65:c7:a1:33:21:08:3a:a0:d2:e8:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.asmodee.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.asmodee.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.asmodee.com

Other certificates including the domain name asmodee.com

(limited to 100 certificates)
ssl471549.cloudflaressl.com
ssl471549.cloudflaressl.com
*.asmodee.com
asmodee.com
asmodee.com
asmodee.com
sni189662.cloudflaressl.com
sni189662.cloudflaressl.com
webshopnl.asmodee.com
preproduction-mdm.asmodee.com
ssl471548.cloudflaressl.com
forms.jugosystems.co.uk
sni189662.cloudflaressl.com
dev.asmodee.com
sni.cloudflaressl.com
asmodee.com
sni.cloudflaressl.com
forms.resursbrist.se
dev.asmodee.com
forms.bemovil.es
preproduction-mdm.asmodee.com
sni189662.cloudflaressl.com
shop.asmodee.com
sni189662.cloudflaressl.com
asmodee.com
sni189662.cloudflaressl.com
forms.itcrew.supply
shop.asmodee.com
promo.electrolux.ro
reclamation.asmodee.com
gencon.asmodee.com
dev.asmodee.com
asmodee.com
sni189662.cloudflaressl.com
mdm.asmodee.com
webshopnl.asmodee.com
dev.asmodee.com
ssl471547.cloudflaressl.com
asmodee.com
ssl471549.cloudflaressl.com
ssl471548.cloudflaressl.com
ssl471549.cloudflaressl.com
sni189662.cloudflaressl.com
ssl471548.cloudflaressl.com
asmodee.bynder.com
ssl471548.cloudflaressl.com
ssl471547.cloudflaressl.com
forms.finaform.it
sni189662.cloudflaressl.com
asmodee.com
ssl471547.cloudflaressl.com
be.asmodee.com
ssl471549.cloudflaressl.com
jarvis.asmodee.com
ssl471549.cloudflaressl.com
dev.asmodee.com
ssl471547.cloudflaressl.com
forms.aurabrands.com
asmodee.com
forms.embello.com
ssl471548.cloudflaressl.com
sni.cloudflaressl.com
*.asmodeena.com
ssl471549.cloudflaressl.com
asmodee.com
be.asmodee.com
ssl471549.cloudflaressl.com
ssl471547.cloudflaressl.com
asmodee.com
*.asmodee.com
mdm.asmodee.com
asmodee.com
dev.asmodee.com
form.europabw.co.uk
shop.asmodee.com
ssl471548.cloudflaressl.com
asmodee.com
asmodee.com

Certificate

The complete raw certificate details for dev.asmodee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269577787677718554567647036486291301796130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 10:53:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-30 10:53:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.asmodee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822305318702107164313716359104160672057047348677074113455510146710138129054150293699232033238358998194691393116861777458194425958985293118249096703995415165521905647472326878160901965559357043776620880985101144253624322938046035627867452792880812469605016971749073154629772679883987187783720614184703056468022619701837667788850622526942861012113203618152605736562353811729321051416478225275322692716751118058667386395282774745422863893754037659532767184462760920194729557185674180909369392527326143275395342733023859903655362363333564052211017214850515542698461625811922590491559218798061666767022259234561415991542230996205393115501735895066525961088811857963483840903117912995809953227388286261488769260033441585999312419744035878754431924027560727829079929339943447434708241497125884116405666269174932635709516879638013650856582945228307413507792432170119566023775826067967796336987050678172267624288857271054623140952967632054185100371974026210302312015664159301876219971467597558072579265985669732850616579474406596876092197153444979012003012973609129589661555749748923628564381774753126858952167502670044603709073154972161962242912714817150250205409031820350443798295867511086525110981489555366707217763025795110144748558659159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0761653eb8e0b9b28941bd4a90aaf12fb10b3c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.asmodee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001645ad7939c0000040300473045022061a6bdc9b722528037d32c63bb348cc68d5e2d8e36cd79c716aed2fb9db39dd2022100e297312d9e080edf0baaa76ab5a4ddcdbf6b8f38e614008858afddfcce0646f90076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001645ad793f8000004030047304502203a171c94d4836ff46fa42cb8b36735fbe39b280c4c9848f4733269d661748981022100ff90e143a7d770c57bedcc98907eecbb02a4056197c047da1b33369c3c9c50b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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