mage.direct

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:31:7a:57:11:06:17:40:07:66:c7:d8:40:8a:38:ba:a7 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mage.direct

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b5:31:7a:57:11:06:17:40:07:66:c7:d8:40:8a:38:ba:a7
Serial Number (int): 322993733605899203251644057786695613463207
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:d2:13:b1:6c:94:f7:ee:31:54:f1:3f:ca:71:1b:85:38:32:c9:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:9d:5a:7a:81:43:fa:84:77:8a:79:98:92:48:35:2d:0e:b7:f2:cd
Fingerprint (sha256): 3d:73:5e:5f:18:a7:ae:66:19:42:63:ff:7d:94:2b:c5:aa:56:05:d5:9d:cc:56:e0:a7:bf:38:15:8e:17:e7:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mage.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mage.direct

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mage.direct

Other certificates including the domain name mage.direct

(limited to 100 certificates)

Certificate

The complete raw certificate details for mage.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322993733605899203251644057786695613463207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 08:11:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 08:11:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mage.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761995996794502630329698919577298362950787885622936122522212540453333530960152454423923203378764954521505702679115497439007892830763744288747525913238531379522121544836049163325908185016550816813453793615589422277507866890406041599668657242245025301734103034881028979467308442816225086591560732005963958334925845034364185296490117178937626231195242378564235334949453803779729041244313827618022864909134797913203911225621581589303221311465450436881512862662007925910680280802533439177606689454628262770192211929692442370911144809211036963844424184332886422742129270827754901594393677296357370374473660805992493482150676597404647200946982859720952586606206778228976796443877492879237719644417532261352600224199728962921108439217622508848715491191109174741027549716917260269873998230801366942166269361473967199736242093066455653929728296508999092131238203378094739343503231901179113138246393934631921893916733423191474340774412017120658732133573246085377338184105848397595001832487456144675544068195469496347288504181456528798422552902750984542192353947742186842821541619626431420139657985394038157358786094909587479043535253547161228730770807541193718415740037545173357781375882745521885036876240736093366282747883928421865625558234399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbd213b16c94f7ee3154f13fca711b853832c964
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mage.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ee106d6ba0000040300473045022066126db43cf6fe120fdd6a8a0d4f20ee909b39a4d83bfb43ae7698511b5bd10c022100cbc4f0020012b60962cf4d474e91a6f6cbc2272f696a1f246a1d25ec973d5f12007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee106d7770000040300483046022100a9275a89bc8db9370fc6ffce8cc53bd14e25afeae232a4aabeecca039bfb5c1c02210081906ba21407c5cdf3bf5982fbc7e7fc441acdeeeb24de268afd8e9beaebf988
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090bc9508b74a963bc5a13e6096c4391e944cf5acd41267141bcc236c2eae79008fe90833311b2e1942a684e2f830c640f4c8809c0619558975084a3ca19260ec0f6104f1371a765de4370d26eaf91a219757ff57a0cbef8531181ea36bdf7fa00afdfef425fa5c733391966ccdaa358a6f77caeb1cf3418add7deb3d03cf6407fc9872583daedae836580e8b7004fc5ea30f269a2c2f636b1213677a81c94bf6cb92502655ad3396dcb71f9aaef0237993506298744d24387eefb053a33d1805fb388d486a804057e27e63c56f8a3b09a9817601e1dc43419c5dd79e4025d0a0a14b83739d441faaa8976447c73f5bdbbfd7e0a727cd25bb870c26aa1d118bda