go.gengo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:3b:90:61:8a:5d:c0:a1:03:85:4e:c2:fd:6d:80:1e:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.gengo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:3b:90:61:8a:5d:c0:a1:03:85:4e:c2:fd:6d:80:1e:22
Serial Number (int): 339680976307951758549344901839600966704674
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:f4:1f:d6:f4:1c:6d:a1:78:24:cb:3b:82:78:3c:c0:62:3b:0d:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:f4:4f:ea:41:d2:17:7c:1a:4d:c6:2c:16:61:77:62:15:6c:72:4e
Fingerprint (sha256): 37:a1:77:dc:b1:72:fa:e5:5b:ae:37:4d:ff:13:5a:c5:2f:81:34:10:c8:9c:3e:e5:f0:81:11:13:6e:67:77:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.gengo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.gengo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.gengo.com

Other certificates including the domain name gengo.com

(limited to 100 certificates)
ab-status.alloy.co
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
go.gengo.com
blog.gengo.com
support.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
go.gengo.com
ab-status.alloy.co
developers.gengo.com
ab-status.alloy.co
ab-status.alloy.co
translate.gengo.com
*.gengo.com
status.bipbop.com.br
blog.gengo.com
*.gengo.com
style.gengo.com
ci.gengo.com
ab-status.alloy.co
api.sandbox.gengo.com
ab-status.alloy.co
ab-status.alloy.co
go.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
developers.gengo.com
*.staging.gengo.com
status.bipbop.com.br
dashboard.translationexchange.com
ab-status.alloy.co
support.gengo.com
blog.gengo.com
go.gengo.com
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
support.gengo.com
ab-status.alloy.co
go.gengo.com
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
developers.gengo.com
qa.blog.gengo.com
ab-status.alloy.co
status.bipbop.com.br
style.gengo.com
support.gengo.com
developers.gengo.com
api.sandbox.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
style.gengo.com
developers.gengo.com
ab-status.alloy.co
ab-status.alloy.co
*.gengo.com
ab-status.alloy.co
blog.gengo.com
status.bipbop.com.br
support.gengo.com
ab-status.alloy.co
style.gengo.com
blog.gengo.com
go.gengo.com
*.gengo.com
ab-status.alloy.co
status.bipbop.com.br
support.gengo.com
*.sandbox.gengo.com
developers.gengo.com
*.staging.gengo.com
support.gengo.com
style.gengo.com
ab-status.alloy.co
support.gengo.com
status.bipbop.com.br
blog.gengo.com
*.gengo.com
ab-status.alloy.co
*.qa.gengo.com
ab-status.alloy.co
developers.gengo.com
style.gengo.com
blog.gengo.com
ab-status.alloy.co

Certificate

The complete raw certificate details for go.gengo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxEcdQrgDvAu0+I6Y2oHk
/H6u6ODG+xK4mxeKE6foGms4mJoiouk68a8uPAx3THXL61Drn9d0nJ2vs+dCb+O6
uMmA3lpn9SzAe5/+JtUt2a88oa3DcGeeuUuNgAvqd0IOk05HVslxLuG8wqCyNIJl
oypU/OcNMisUjkKZmRGhxnnqocPjmxphAQuWl6uw6UccNII9nO1yenEgY41Uin/s
PVSrAoQCvYLOPAyDEXlphBPzmci6W1HrJod34fUHtWpMhtjUc9jcey0BDR0+OFNk
6J8sCFNKuOWpJdR1j37AqsbFRwkiQTIwShbbMDpLGMrQvbgJoH6f5cfFPl6IhiQh
cl/UVLJ+WRHf3NbY7NT/FDk+i+QcyhYGjBto0WTuDolqZgqw/YtdkF3P+eufhiU0
MYDEvQAvT7iT7HptsSUqJ3N1vp+TW664g/0nmLP/nOD0D3Hl3apXgD6ip7rWSX15
GpdSXt32LocjLROYSWrlv6tCy5Iwg0wsuAYtvVZIKXrB/T2gEUSoAfkjdBEej5ha
7FfWunv1MxsnQpg4hSi9RriEHEhfVmK23c2XQwyO2bQW86+A8jpVMqWpOh4eAjgt
/FDjic6o5e5/QI5vXpIE0uXsWinV5dOd63WDspPBIAQOOZuduH7dQO+eZfxwLDy+
UIPSB3y84oW0WSxjs/xHqOkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339680976307951758549344901839600966704674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 03:09:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 03:09:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.gengo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800743522602582852075173645855618885674103827176720976552726195430911733274910552615804134191274624981288075797603676840845963182794579492547930278841232166223582336329017828176991998375067773298718197836405509706143076105297326547540247874305553123748809099348456803254777035573096436056482629177226203914263248256620085376383445038461963852115356724677209767140966848091456225746736023062849868329939854371914198715802114428592409555618449023053310254429474327805096752057285920662339938197839773339554160237937682926470776076208972597032107423443146457749413293555400775872920125432480185303585198872676512213955393854332850802626911978002197063963570437803774212677451087350156967598410135204197763474428672487280607825734662681374134226871211874574036555789548266061533668224257531000417583314501372096831818561080628489810621066404687178147663895608046114042507799867604135228039349626430885060428803169993244515132158658728348971347172743052070050890073807052952843582282535309173342072929422955645370890125799238903794648755327096901176499847649273861078481758037495710174662816885690599345198032197520289369969563140971709279396203595084046776832906763078130077493650598822665105969234073853793455077899311018645908235987177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3f41fd6f41c6da17824cb3b82783cc0623b0d19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gengo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8108702d0000040300483046022100ae5b029f6b878b580838cbf10b490571b5457c5d731973336f316d6f822bb09a022100d2dbad1d73bfd256518346f19655aacb42ee8f3ba210a44991aad0640b5b7bbd00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a81087214000004030046304402206e177e1b45e35809134d483c740e0d8d3208fe21d609b1a04b0faf484395bcd002202669ffc43f39085847b71725a5a6bb38d21cf65d792274963822c5e68334e77b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00035b3960ed5d516d41004b75a32a892de5abda6627643e3d062f0692c86074516543fcc661eeaeb8a4e7f3862c1ee19a4666cc725299de16c6cb81a79da743dad67222a768dc919e04313ca0b47584b3e4f7f9c6a0d241408dfc3d74afd2113202fc03efac4d0ddd8cc349ebd4999293e6c63d6ec1b3ee7d8c20054b7864baff4ce25f993fa4fac84ca3ee3635d0796a203098c2e834b73c87640fb002babee05b879622dd600b168fee414443bf8b8445647abb704eba3d88ecdfe1b586c7aab87cb1ce6f46c59356321a4ddf2c735e5e44e11c2e878ed1d0129c86a14f4acade2c557f4bb2702ef3c77ac9ef3c86ac41a93f26c94fc9e9d04c1c4b17afee63