communications.agi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:d0:9c:94:cd:62:9e:b8:d6:d9:80:26:d7:4a:85:4d:ff was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communications.agi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:d0:9c:94:cd:62:9e:b8:d6:d9:80:26:d7:4a:85:4d:ff
Serial Number (int): 272503185976252880775365840099592494206463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:4f:4d:05:a6:e3:c7:8c:d6:11:98:a0:87:1c:2e:a0:3c:c2:ea:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:4e:1d:d6:91:c4:a2:59:4c:b9:ea:1f:0d:3e:b0:a0:60:d3:8b:ab
Fingerprint (sha256): 50:28:0e:8a:8b:9a:be:6b:6a:77:92:9d:b7:59:ee:7e:d5:ba:3f:36:b9:f6:93:6c:9c:d1:4f:31:69:28:52:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communications.agi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communications.agi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

communications.agi.com

Other certificates including the domain name agi.com

(limited to 100 certificates)
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
san-15-s13.tlsprovisioning.exacttarget.com
*.agi.com
communications.agi.com
*.agi.com
communications.agi.com
*.agi.com
links.agi.com
mail.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
www.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
links.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
*.agi.com
links.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
communications.agi.com
communications.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
links.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com

Certificate

The complete raw certificate details for communications.agi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272503185976252880775365840099592494206463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 16:21:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 16:21:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communications.agi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901904112648283120364660468190437265451144457045284487923868512703944834053917315637631638780162047034566300886886975622333531122320033616160970703757203987996298815132775909223873914877687166695754570799623065743377519690157190704536133562916756247299868304913899113203883811606892245067208780028543734950183738638890612462414848080144951111027263979241837660116391361770611938700206584852517207902031666425346197728218190221090491685061330206061726011356881204275312833186882471652075038487414109330622103555319387707698953499294507119974535083058787145286085611783360352203796705847025375715166643616822568644015068448618583043889292611280082108478456619530215156547128102822185962030136238250534444581855088076537561541429333087305940034347288219156281806483593595959933412428924689295629631418594481649301960438853936941499699207958254141355555623580212336636079824584605663293581987005606714328079590478028245609510004256119575871139017355496789230922838633642341924374710685181680320838883795903922003002147523317304020046162299458579962178924742716947879913284839036644808399214458324692795731409847838599251138006567058798061912648429070245469185965191699364558271618598000053399934545671808047432790237914062778967554056771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a4f4d05a6e3c78cd61198a0871c2ea03cc2eae8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.agi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a83dd91e40000040300473045022076001f90f66663c564cbe1f4f33b5ed99dc33cbd211d21de7d7bafbc6c91db73022100a3f5848b2d9e18d34f86bbbab45442254cf4e9632be746feae681292f081e230007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a83dd91c3000004030047304502202986762dcbce915ee796f4d62d258df2b5316117c5e84e1e9655d1529f8f0f1a022100a10d0c93157496c23f77ac8ac78da873150e9dc5b3b740954c2cfdaf362faec5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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