auth.tunego.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:1a:e2:d1:b6:e4:53:1f:b2:81:89:bc:2f:39:52:b1:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.tunego.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:1a:e2:d1:b6:e4:53:1f:b2:81:89:bc:2f:39:52:b1:f1
Serial Number (int): 312414950473915741956681174847685194330609
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:2f:39:84:c8:6b:af:f4:e5:a6:f7:e2:a4:5b:64:33:b6:dd:0b:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:bf:85:77:52:cf:24:77:4a:a9:aa:25:a6:db:ed:f0:b1:d8:46:e7
Fingerprint (sha256): 2b:fe:8f:ca:77:a9:7b:fa:6a:2c:78:90:b8:2d:87:87:0b:81:f5:9a:e6:74:53:7a:92:d8:7e:2c:ee:8e:00:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.tunego.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.tunego.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tunego.com

Other certificates including the domain name tunego.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for auth.tunego.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312414950473915741956681174847685194330609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 16:44:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 16:44:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.tunego.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724891019378285276971054790616066990203407580900670407554511037211524636713316793187220609469222048768052830323205512311507572732070036739254146094834059549034989418498972418289568193945263552339796120354737518881961781070305258382378187593401591013062666107383743888910044845689536470852999602322073093564859230690822448756647852465662580696919767939235956624390737098801374028606815107200370219615396678048568918966019605129828472027058230746844366496281951787443923821455463176237139927877703336475261112257330194026644337729102684723668031106555847771940078648121687225772244538107874502260199410291197981292825314032918903680426276572179439294978530401526399788476232342513165029216762377184327095321055240451096241060918665356523055388032283236226929857536478376570101239912014809429513071442143314264716077967747786361587301325257246896609854751738533880811497883585618785371177698926796062371255377673334197305760911724728204846950274362258632192977645698874711840240691850019076710471261222315129542914185350005775990067484228542362893592449809956088677137488673366747901512203156664232616872056048362287803936953578356373026995797415919872304210658856962919400710459536264909616617373649790252400852378477064246422227877171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							922f3984c86baff4e5a6f7e2a45b6433b6dd0bd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tunego.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167eb9e966500000403004830460221008069a23a92570027a2ea93c5aad476910690d2891af1e0314786f9b9b7c701a4022100cb6c8b76057c1d8ed322f8980ad6a7c934e238a65e9f14817dec50caf1a034d7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167eb9e96b9000004030047304502206155eb71271e7bc4fd04af7ba975e5cf59f7ca974e5a9a10c0678c664e51930e022100cec9c3848b5121f94b25e49159ca98c0f588b584b68803bc7fe0e2c63d1bcd07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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