mage.direct

Issued by R3

About this certificate

This digital certificate with serial number 04:4a:e9:c7:d7:63:4e:cf:32:29:f0:3e:75:d2:f0:38:49:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mage.direct

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4a:e9:c7:d7:63:4e:cf:32:29:f0:3e:75:d2:f0:38:49:c5
Serial Number (int): 373940786637869209901193971341986750810565
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:c8:dc:dd:a9:72:c9:26:71:de:55:3d:97:48:fc:5d:14:37:df:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:45:11:b0:68:f0:a8:0e:33:a8:52:52:13:15:d8:1c:64:98:8a:ff
Fingerprint (sha256): 4f:22:ab:7d:6d:26:d3:4a:20:51:99:51:6e:a9:5c:de:f5:61:4a:8d:96:77:c3:08:ef:4e:b9:b9:bb:7d:10:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mage.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mage.direct

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mage.direct

Other certificates including the domain name mage.direct

(limited to 100 certificates)

Certificate

The complete raw certificate details for mage.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISBErpx9djTs8yKfA+ddLwOEnFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDgyMDE4NTdaFw0yNDAzMDcyMDE4NTZaMBYxFDASBgNVBAMT
C21hZ2UuZGlyZWN0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtPGW
bg1BS6r5n7tBgYM+5zbO8Iv9B8ZlRBG2iy71FRMNme652yb5bqpCr/dvv60O0Zcu
i8aRLrASciQKkA9/lU3qd0Ow8J5iPVGKBuokD8VPWQXsmB9ip2RBi2gBMBG8PPRR
bNlEuFRzmpsiGuuasv/qPP/GF5ySvI3tAOp0mJJCfoaq6Jew9WBSqV0ToDM751hp
ip48T5ge180Mv9T0CHOd+TD10prW3PvmbyffDgEbwnEJS0tbvy1j0ZBPrkpPBGpZ
jXrChi6xp7UIMGUd3ukMxVXorWcpRSFmOjwjYoNUap3s758s1nQvTvLU8DAjCrGk
sTh5Y//wQ4ntF42r+ia1Su+k9+h0v49Z+PzqXJQMEuOfxvbMxx+M45fz68HvrXMy
NlURMdyAQNpzFCCFe0OY0oYgFU7JOsbnbeZwfedNWqQneqTwNJ+6Yr9mWW7UdMSM
Unil6NCXaGGmUztgZptZg2V2FIzn758zfdUodtNU8dYtCNecP+4wMM6GxwqpN9E4
RhxGEwYGnmCOUWeztG2rWHg52OVeKAsfbAHuzbAtfGz/CYysb54Idpg7hiZaBawh
PPTseGuOwbZjcJFt9ihQ7PjaNh59uX3tcSz9j3nXXIJdF8Jq6d8d0PonFTU/zip+
UHzuvDt6Up85AsEj40R/gqzIeNqJXDYeydj4tikCAwEAAaOCAg0wggIJMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUqsjc3alyySZx3lU9l0j8XRQ338AwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILbWFnZS5kaXJlY3QwEwYDVR0gBAww
CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxLTEJBAAAEAwBHMEUCIH/dL6fYOHWP
UkLu2lzM93IpX8G1Eh3M0gFpxDRUyrw4AiEAjRVRPf0mhhI8Aj5PmPe/2nFW4R2A
t0zshXMGpynue7YAdgAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAA
AYxLTEMNAAAEAwBHMEUCIQDewH4jg1KChpRVoL8X5ckFE1j8ZihQeK/vI0L3SJ5T
0gIgNd3VmFuCs5O/M7y1ERHh4wNFYFu5nT7Z0WFeUp+rx9cwDQYJKoZIhvcNAQEL
BQADggEBACbGfkmRWeB0g3+srn5atQyU9XxttVaBjfCRODu4HbdeEuahRKj+qcfY
a6juRx5R3ShbaT6ksR6zFZVLz63VGhhHqb53XWoeKi4oyEHLODHESqFd7NBQeDRR
zqiPvCCwQaOjsCAW8lMnK1ui7QFogvDrnZeTaRo0e82dfFFJZrfsidaVIfbqToba
sgnolC8bO5VkwEgtSyXvpxqxW4VnuF9xmPptxP81nkidPM7g7nZntFEL9OYg2CkX
gEp5DLHfqTwCGwfTStAd9JUBfWv3Hx6HcnGdxLD7kh0m7DKsumqBiilZRGx720IO
Ox9ko0RrErh0u623Z6OqIl+BsFo/Kh0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373940786637869209901193971341986750810565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 20:18:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 20:18:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mage.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738185898992096465664099202608608714760201211068992118401857839874252147568483635186269100049961812122006787148194919476268870630973376583161134701628320105581170610452496308896834001803559765556710233053261413540689992903519717346614304126450716692701340513367679686120039314561973892654397492426219920632236540684781264555898814558356744047369809432785757358132118124450047003875679226498827259215979317390671288102510251189064376338073818717690512326530830189400180444510852715884396185773645365810753986081763276448682131080994148495908996723504801257008131483902050600100423387515879080551140214641261407161376131503267810724893492198603345077175048502667692505428064183938319683752281943689920266061812706875981673038951670917985999968438513186648716508278594800452599323036037849850924746869520784477178151176984884557681378617320682604931119916204577123635661758773338125648379592602667404872446567896625393663788287001100764777997786504304325123025621427454653407304856954260491962364241513363206626114582755500798758925087346928767406429924002630364720370017609098116737068404057654003320835718912744108977959579922243793091507576580093083113905382452502194326786101508625167138720773884585898162004193596821584549493913129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac8dcdda972c92671de553d9748fc5d1437dfc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mage.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c4b4c4241000004030047304502207fdd2fa7d838758f5242eeda5cccf772295fc1b5121dccd20169c43454cabc380221008d15513dfd2686123c023e4f98f7bfda7156e11d80b74cec857306a729ee7bb600760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4b4c430d0000040300473045022100dec07e23835282869455a0bf17e5c9051358fc66285078afef2342f7489e53d2022035ddd5985b82b393bf33bcb51111e1e30345605bb99d3ed9d1615e529fabc7d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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