cgit.it.redwood.com

Issued by R3

About this certificate

This digital certificate with serial number 04:49:df:4a:81:84:78:9c:85:47:9f:74:3d:58:56:6b:a8:61 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cgit.it.redwood.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:49:df:4a:81:84:78:9c:85:47:9f:74:3d:58:56:6b:a8:61
Serial Number (int): 373586561212223345982174754052657189202017
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:35:12:61:ba:81:59:c7:89:44:11:a6:2a:5b:1f:dc:49:f1:67:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:a6:26:fc:aa:78:af:09:36:ef:5c:1b:4e:0f:19:61:3c:73:25:b7
Fingerprint (sha256): 37:d0:a3:01:8e:e7:41:46:88:74:21:c0:6f:0e:ad:a7:d6:5c:22:3b:c7:66:6a:95:cf:07:89:e4:3a:17:1c:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cgit.it.redwood.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgit.it.redwood.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cgit.it.redwood.com

Other certificates including the domain name redwood.com

(limited to 100 certificates)
www.redwood.com
webmail.redwood.com
files.redwood.com
uptime.redwood.com
docker-registry.usw2.cs.redwood.com
euw1.intelligence.redwood.com
euw1.intelligence.redwood.com
go.redwood.com
support.us.redwood.com
support.us.redwood.com
clientvpn.redwood.com
uptime.redwood.com
status.vleo.net
uptime.redwood.com
runmyjobs.redwood.com
unms-test.redwood.com
*.redwood.com
redwood.com
support.eu.redwood.com
status.eurabo.be
docs.cs.redwood.com
*.redwood.com
cdn.redwood.com
get.redwood.com
unms-test.redwood.com
*.redwood.com
rwx.redwood.com
uptime.redwood.com
go.redwood.com
documentation.redwood.com
clientvpn.redwood.com
uptime.redwood.com
dev.marketing.redwood.com
uptime.redwood.com
rmj.redwood.com
docker-registry.euc1.cs.redwood.com
cgit.it.redwood.com
static.marketing.redwood.com
hello.redwood.com
uptime.redwood.com
go.redwood.com
r2w.redwood.com
wallis.status.app.vista.co
docker-registry.use2.cs.redwood.com
get.redwood.com
docker-registry.euw1.redwood.com
euw1.intelligence.redwood.com
cdn.redwood.com
status.tbft.org.uk
www2.redwood.com
uptime.redwood.com
www.redwood.com
status.cs.redwood.com
docker-registry.euw3.cs-test.redwood.com
support.eu.redwood.com
www2.redwood.com
seftp.redwood.com
staging.marketing.redwood.com
uptime.redwood.com
euw1.intelligence.redwood.com
*.redwood.com
docker-registry.euw1.cs-test.redwood.com
hello.redwood.com
*.euw1.cs.redwood.com
redwood.com
www.redwood.com
go.redwood.com
sap-support.redwood.com
status.eurabo.be
hello.redwood.com
get.redwood.com
euw1.intelligence.redwood.com
euw1.intelligence.redwood.com
status.hotel-spider.com
docker-registry.euc2.cs.redwood.com
status.cs.redwood.com
*.redwood.com
intelligence.redwood.com
wp.marketing.redwood.com
uptime.redwood.com
oauth.cs.redwood.com
webmail.redwood.com
*.euw1.redwood.com
clientvpn.redwood.com
support.us.redwood.com
euw1.intelligence.redwood.com
uptime.redwood.com
support.eu.redwood.com
status.absis-ciborg.com
support.us.redwood.com
status.cs.redwood.com
uptime.redwood.com
unms-test.redwood.com
support.eu.redwood.com
cdn.redwood.com
support.us.redwood.com
enroll.redwood.com
uptime.redwood.com
armory.redwood.com
university.redwood.com

Certificate

The complete raw certificate details for cgit.it.redwood.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOQmjZLsZL59D3HJTj/x
JAWJ5EXebK/dhb4UkOOpwtg1Y/V05kH97zhxyYSKo6Rgy5uZAQ1y+PHABSCXNVtO
DfkAP89AFrIXiCUPFiOvq9yNizn3qN0M+N1kCHfQaD++Bmp3tauLMVjVcoW1l/TF
yIVoHNl+FHxggcqAV2JRfDG9zxKjgAD9QJBpLEAR/mZboDulhIgv/H8SKcy71Rds
vFNtnmrK6s7kQtCiO0eQPJ+h5+bWBOqp0DYiIa24tDuYF3ivEzg4uVToBg0eaZ7O
1vYTzXUBbeRHFMuuMj81bOfIkmPNTlR40LAq8Yqvy8K9jjCSCyQXLXpq4fne+s4M
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373586561212223345982174754052657189202017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 04:32:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 04:32:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgit.it.redwood.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19805680827582179365549249446980343046175878888537708474803187979322161839513305056890153865810943369432784839570009008995074315252231319502256913216137794624814858535906169856918220338492179266266843638413842968536403059802932184058263737834859627119169311840398741129774164438478684422255899320493352859244656989357525289072461525803715112674567512918743218398183670741012227676641342308363945366368646228461388585580389971113624956422934425530531470538959319848575291485402012879431647171271189470973544227999404208359889615220330337570902570739023494484346187687608746732940708261204925937644159466349698231438367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8351261ba8159c7894411a62a5b1fdc49f16721
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgit.it.redwood.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec67e75060000040300483046022100e457362e82873cac58cf43ec595e5b5edb07809a01563d56e29aacbce69a6dea022100d8990b67cfb7621c6174d4863dedbd5b1075023a5bb01aa54c8b6d6e1ea6256c0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ec67e75070000040300463044022007caf9400e45418ffb6e986ebc6c31f5a6611c2ce68945919078ce756e3a57ab0220162e880b10471968917dc1033f029e07ff6f3882765bc84fce52b444ab5b088d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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