demo1.my-dev.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:74:7a:95:dc:98:33:d2:ec:82:f3:52:85:90:7a:25:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=demo1.my-dev.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:74:7a:95:dc:98:33:d2:ec:82:f3:52:85:90:7a:25:9c
Serial Number (int): 268637614447904570232836608818862819517852
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:44:e7:ef:f8:e9:df:26:1d:01:85:bb:97:9a:6f:cf:73:3f:df:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:11:9e:8a:eb:c6:3b:8c:81:31:1d:e9:a3:63:18:1d:8d:e5:3f:73
Fingerprint (sha256): 45:bd:8f:3f:59:95:5e:1f:41:b8:a2:1b:97:ba:3b:4d:81:b7:d4:a8:db:39:31:db:9b:a3:63:23:03:e1:4e:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate demo1.my-dev.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo1.my-dev.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo1.my-dev.org

Other certificates including the domain name my-dev.org

(limited to 100 certificates)
xml.my-dev.org
oinu.my-dev.org
cf.my-dev.org
vahelp.my-dev.org
my-dev.org
track.my-dev.org
xml.my-dev.org
vahelp.my-dev.org
hw.my-dev.org
roi.my-dev.org
roi.my-dev.org
bw.my-dev.org
sap.my-dev.org
my-dev.org
vatraining.my-dev.org
w-blog.my-dev.org
my-dev.org
sapdemo.my-dev.org
sapdemo.my-dev.org
oinu.my-dev.org
bw.my-dev.org
moodle.my-dev.org
medialenz.my-dev.org
*.my-dev.org
insideanalysis.my-dev.org
moodle.my-dev.org
insideanalysis.my-dev.org
moodle.my-dev.org
roi.my-dev.org
my-dev.org
hithappenings.my-dev.org
hw.my-dev.org
central.my-dev.org
sap.my-dev.org
hw.my-dev.org
chiquita-html.my-dev.org
hithappenings.my-dev.org
e-search.my-dev.org
medialenz.my-dev.org
insideanalysis.my-dev.org
hithappenings.my-dev.org
vahelp.my-dev.org
medialenz.my-dev.org
my-dev.org
vatraining.my-dev.org
demo1.my-dev.org
ch.my-dev.org
demo.my-dev.org
hw.my-dev.org
oinu.my-dev.org
roi.my-dev.org
cat.my-dev.org
ch.my-dev.org
roi.my-dev.org
*.my-dev.org
moodle.my-dev.org
track.my-dev.org
hw61.my-dev.org
bw.my-dev.org
*.my-dev.org
devsoft.my-dev.org
my-dev.org
test.my-dev.org
roi.my-dev.org
track.my-dev.org
imitour.my-dev.org
hithappenings.my-dev.org
oinu.my-dev.org
sap.my-dev.org
my-dev.org
roi.my-dev.org
e-search.my-dev.org
demo.my-dev.org
cmb-dev.my-dev.org
roi.my-dev.org
vahelp.my-dev.org
medialenz.my-dev.org
vatraining.my-dev.org
my-dev.org
b2b.my-dev.org
track.my-dev.org
imitour.my-dev.org
civicrm.my-dev.org
oinu.my-dev.org
xml.my-dev.org
my-dev.org
roi.my-dev.org
oinu.my-dev.org
central.my-dev.org
central.my-dev.org
my-dev.org
imi.my-dev.org
b2b.my-dev.org
sapdemo.my-dev.org
medialenz.my-dev.org
imitour.my-dev.org
my-dev.org
hw61.my-dev.org
imi.my-dev.org
demo.my-dev.org

Certificate

The complete raw certificate details for demo1.my-dev.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiEgIX8JUMcSMiLyXA78
JJChTDxWpF6Ufhq3VFdXXiaIqKflSoXgAN0b1eVxF/dba3VG8qOspvlvbURx7O2D
kEKuNiFxvXVplaC6b+AHJbIcOIvBpLn5GpCNrpRMJGkJSF+TuCWsgXFd9cN0JNvD
R9XOTLnqEEl3J0YJaiRjgruDMxNajfWK6TPriUm7aKX+26llN90rc6NPRWvrP4XG
AS9f5ubAc/G6O4M7HRkMs/N1uWGhuZbigZ0N/d11vkUIONx5cnUvN5ryVZFQSBXJ
chASwqUz8RZ05quZ8cs4hQyuXymBuJ9A7HTZAVKjkMmb82HP+zfBUWIJ0qZ/lWjb
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268637614447904570232836608818862819517852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-18 10:22:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 10:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo1.my-dev.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22486753082294032238435377506306663841292048110302491139064098831548378576574163678616642459701999272845807605410235769007178644661089639664976300754806863084820979902103311599061933818231214546432691523322666187691276426632962981069361765052442429401629664539377826414235393972208943139584596073676564686556989205538801884352069379417519508565330135117081443843869131124171851752504423744324941944832278362258187687716687633776503475522271871701130733516204864860031140008984799381009124587157581878416310422801252139670782554760954515465364091810261655094330128149523883699443468525895456360615222512785264529169189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d44e7eff8e9df261d0185bb979a6fcf733fdf60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo1.my-dev.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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