staging.launchpad.net

Issued by R3

About this certificate

This digital certificate with serial number 03:cf:38:3f:37:15:15:2f:8d:0b:2a:51:8c:5a:3a:9d:67:0d was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.launchpad.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:38:3f:37:15:15:2f:8d:0b:2a:51:8c:5a:3a:9d:67:0d
Serial Number (int): 331850072747583921144234285045368766686989
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:9c:c4:27:7d:6c:8f:92:3c:b6:67:4b:a8:a3:13:66:ad:c4:ae:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:80:a8:76:0d:bc:b1:f2:06:a6:83:24:0d:05:6c:90:f5:8a:cd:bc
Fingerprint (sha256): 33:5c:50:77:dc:b7:d5:23:8c:f4:f6:86:da:fc:e0:c9:e9:c2:f5:22:2c:21:ec:96:b9:84:c9:ec:6b:02:02:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging.launchpad.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.launchpad.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

answers.staging.launchpad.net
api.staging.launchpad.net
blueprints.staging.launchpad.net
bugs.staging.launchpad.net
code.staging.launchpad.net
feeds.staging.launchpad.net
lists.staging.launchpad.net
mirrors.staging.launchpad.net
staging.launchpad.net
translations.staging.launchpad.net
xmlrpc.staging.launchpad.net

Other certificates including the domain name launchpad.net

(limited to 100 certificates)
lists.launchpad.net
help.launchpad.net
lists.launchpad.net
edge.launchpad.net
git.launchpad.net
qastaging.launchpad.net
test-blog.launchpad.net
git.launchpad.net
launchpad.net
lists.launchpad.net
*.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
qastaging.launchpad.net
private-ppa.launchpad.net
test-blog.launchpad.net
launchpad.net
about.launchpad.net
lists.launchpad.net
edge.launchpad.net
help.launchpad.net
blog.launchpad.net
test-blog.launchpad.net
bazaar.staging.launchpad.net
qastaging.launchpad.net
dev.launchpad.net
help.launchpad.net
*.qastaging.launchpad.net
edge.launchpad.net
qastaging.launchpad.net
launchpad.net
private-ppa.launchpad.net
blog.launchpad.net
git.launchpad.net
launchpad.net
qastaging.launchpad.net
git.launchpad.net
help.launchpad.net
lists.launchpad.net
staging.launchpad.net
launchpad.net
bazaar.launchpad.net
help.launchpad.net
lists.launchpad.net
about.launchpad.net
login.launchpad.net
bazaar.launchpad.net
launchpad.net
blog.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
help.launchpad.net
qastaging.launchpad.net
staging.launchpad.net
staging.launchpad.net
*.qastaging.launchpad.net
git.launchpad.net
git.launchpad.net
bazaar.staging.launchpad.net
login.launchpad.net
login.launchpad.net
edge.launchpad.net
blog.launchpad.net
staging.launchpad.net
lists.launchpad.net
blog.launchpad.net
login.launchpad.net
launchpad.net
bazaar.staging.launchpad.net
dev.launchpad.net
edge.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
bazaar.launchpad.net
bazaar.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
test-blog.launchpad.net
dev.launchpad.net
login.launchpad.net
about.launchpad.net
staging.launchpad.net
qastaging.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
edge.launchpad.net
private-ppa.launchpad.net
help.launchpad.net
edge.launchpad.net
blog.launchpad.net
private-ppa.launchpad.net
staging.launchpad.net
dev.launchpad.net
git.launchpad.net
launchpad.net
launchpad.net

Certificate

The complete raw certificate details for staging.launchpad.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XsFq1nYEd3ih/+/xHNa
UAAEvHAHVTgIVnw/CtfNLAQ2hB502UwaYtkQX8BmoaQec8DaEO8gzVVVvtlUyCCJ
lujSs4ikhqCIgH6oddsvOTOBvuJ/GbpILm1rwMLp0bAp5H4EVU5z2by6NLYunYP0
aIUztz0JGLIFcDovT7cUNgahF1bhCOVSmoM0I+26kxza1QlevvjzpNFg0HTp9Tr3
Z6xXdAZSAXPsbKakqBBQkc7fGKMeESpWpfw+XHPve90ZtwDhzd2Cxf4tv/ht7vvU
KKg3vqqP5e2AX0lN4KFDtiRsLn/ietS/WGtfY2WCSPzKnSud3f8jpEit44Ph0tLx
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331850072747583921144234285045368766686989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 21:45:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 21:45:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.launchpad.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27454376658753500544186114763211303122078899984372573720808916263983973824900137601767648644999607045564601895477414009915210820934420770183723583850576972757297145047259244802756628631048274252135951584928158125998946867848797865169246445187008815569536662168598974159213339880347945097055973519473090012312412450217333343464306445326042160117830982312453800186362578582514228476239206171846561717464135744448622373856425074875909166790841400701610468928527568193531266637789890041720051434034319715545417933474665956103498512110850906292019872952345583839079857511743198514743220878945904380023784158355898198323687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							319cc4277d6c8f923cb6674ba8a31366adc4aed0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprints.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirrors.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translations.staging.launchpad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmlrpc.staging.launchpad.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185600ff8000000040300473045022100b3a1b75ebefc6ab16a6a45bde4d914c35be5b1e90d79e0f70ae6187da20054dd0220072d115e3d4474a75944577628a7551e61e09c7122afd6ce2ca679873fdb644d007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185600ff9dd0000040300463044022071d4330a1fb9ff68978939dc912917eab31b17dfda37e37603a03865ad104a0002202d1cc402e2587a9473381b22c00785c78183da250250b08666fb2f217855739c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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