studio.magma-nx.io

Issued by R3

About this certificate

This digital certificate with serial number 04:73:c1:5e:98:18:df:74:39:32:78:23:f5:18:dd:c1:f1:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=studio.magma-nx.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:c1:5e:98:18:df:74:39:32:78:23:f5:18:dd:c1:f1:6c
Serial Number (int): 387838648086936992240138562043261327896940
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:ac:f2:bc:1a:f1:f5:23:87:1c:7b:66:37:04:8e:41:53:01:56:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:b9:2c:06:1d:14:5e:0a:50:82:bd:2a:ec:a8:d4:6e:06:05:4d:d9
Fingerprint (sha256): 3e:3b:d8:04:50:a8:f2:2f:88:a4:ef:d2:b8:36:d9:ff:56:9e:35:c8:d4:12:da:9f:52:45:22:b7:06:2a:2e:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate studio.magma-nx.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studio.magma-nx.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

studio.magma-nx.io

Other certificates including the domain name magma-nx.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for studio.magma-nx.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnua5dj4FXah+mHypVpg
JbAjAudl2RShANGCz9juexAU8RlHsiTgehXy8dYvlrsvBDhr03+UEPRUSTJm9h3m
s8knU0oFzqMszlw/1++hqWFSvmWCtjp8udIrYraML/cqQAFN1ESOynLHxQs7DXVy
ZNYp87zffKK+c9FNcssub63oxqYrFwykNK3/zSdYzoAtIOemjQX6OKIQ4dQLt26r
Y8F9pnGWI+230M5hO8BSg/kNcy1pwQffPaotylBvGB1cZ8EEDXPXCCV9iwTgSUqE
Ga7BSjuO0hbLat6TT9uqGGkDw8zpMaU1QJJLU359Lr+DrneBdg0cXegfWfFlHHB9
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387838648086936992240138562043261327896940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 00:42:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 00:42:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studio.magma-nx.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25056136314855841303291298193643019581234375394385109359018901108546658474619836913882981012582996517727907183349618686524566346604581755881570573213363262475831442236730653386280462658837017279124814829502417353575151549948767399330032118886774367552916171946208840594862036882482339616199651781897303595418446531743868167070771509309217763093547130117298396522954095489693458423978562682002915842422463986667606278260622557184007779847508264583494331808590780949134085309818824546217481370666761308445283453727939244250454513198690701345722467192437515841784175889447144531755648048457893201637190176562459029044727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89acf2bc1af1f523871c7b6637048e41530156e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.magma-nx.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc131c4240000040300473045022100d190a12c6c72500b50ef37c811b147225d11383a4055f04fcc3fdb9201baf72102201ef6fdd85ef55f5601ac5cf90e68426b5a3534431f5cc19c0caf829b91de0455007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc131c441000004030046304402205c8c0007c1270feae210eb54ca88a884654b4dc8e577fc84a2fc7bba6121532802204f680273216ffb4ae79c74c1e81d304d132ca67bb7b7f2ea1a158784be79b9c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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