www.comanage.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b7:a8:6f:25:5c:22:3b:1a:de:3c:d6:27:24:04:1d:d9:f8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.comanage.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b7:a8:6f:25:5c:22:3b:1a:de:3c:d6:27:24:04:1d:d9:f8
Serial Number (int): 410944704279564628863070254854773392923128
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:99:e2:aa:95:8f:6a:03:22:8a:4c:92:2f:72:a7:ab:c3:46:67:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:dd:71:14:aa:41:2f:6c:70:63:a3:55:ac:87:c1:ca:8b:75:6a:a7
Fingerprint (sha256): 52:31:2c:34:6f:17:53:d5:fb:2a:4a:de:77:5b:8d:c3:03:93:98:e9:85:48:96:6c:83:35:ad:91:e1:74:f0:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.comanage.me

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.comanage.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comanage.me
www.comanage.me

Other certificates including the domain name comanage.me

(limited to 100 certificates)
beta.comanage.me
beta.comanage.me
beta.comanage.me
*.comanage.me
*.comanage.me
beta.comanage.me
www.comanage.me
dashboard.comanage.me
blog.comanage.me
comanage.me
comanage.me
migrate.comanage.me
dashboard.comanage.me
dev.comanage.me
comanage.me
dashboard.comanage.me
*.comanage.me
beta.comanage.me
dashboard.comanage.me
comanage.me
docs.comanage.me
dev.comanage.me
dashboard.comanage.me
beta.comanage.me
dev.comanage.me
staging.comanage.me
dashboard.comanage.me
dev.comanage.me
dashboard.comanage.me
dev.comanage.me
staging.comanage.me
dashboard.comanage.me
beta.comanage.me
dashboard.comanage.me
dashboard.comanage.me
migrate.comanage.me
dev.comanage.me
dev.comanage.me
dev.comanage.me
blog.comanage.me
migrate.comanage.me
www.comanage.me
blog.comanage.me
help.comanage.me
staging.comanage.me
dashboard.comanage.me
help.comanage.me
*.comanage.me
*.comanage.me
staging.comanage.me
beta.comanage.me
dev.comanage.me
*.comanage.me
staging.comanage.me
comanage.me
help.comanage.me
dev.comanage.me
www.comanage.me
blog.comanage.me
beta.comanage.me
beta.comanage.me
staging.comanage.me
staging.comanage.me
*.comanage.me
dashboard.comanage.me
beta.comanage.me
migrate.comanage.me
dashboard.comanage.me
beta.comanage.me
dashboard.comanage.me
dashboard.comanage.me
*.comanage.me
dev.comanage.me
beta.comanage.me
comanage.me
dev.comanage.me
staging.comanage.me
migrate.comanage.me
beta.comanage.me
www.comanage.me
dashboard.comanage.me
staging.comanage.me
blog.comanage.me
beta.comanage.me
help.comanage.me
www.comanage.me
staging.comanage.me
dev.comanage.me
dashboard.comanage.me
dev.comanage.me
dev.comanage.me
help.comanage.me
beta.comanage.me
dev.comanage.me
staging.comanage.me
docs.comanage.me
*.comanage.me
dashboard.comanage.me
migrate.comanage.me
dev.comanage.me

Certificate

The complete raw certificate details for www.comanage.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410944704279564628863070254854773392923128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 06:04:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 06:04:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.comanage.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939629225265535022649998805998506922914123251117441910847592446867672762523798303855531178368019303690760352933182718333805427174806221528590275364504915993464803470500846064661891152538693101532768996381225217478274830126601821167488410162027946510728974418531261142027347464828858982513063779360226675191555635358007417141482902007499410303768410647869912750020640731520248826618610188662581489625222648426515203555168948243478857875456889709465385278969282859312928338403250944553638675231810744453869427922482049630987175406242493743521075876631706009741285345063321829407904863705246853335233115755353147888075541144522511810693234842038972642108712244401739891485188751429080594665006939111713726833604149486166511223553629531579889788028080477973826980046727827281945052736178293229823624439235968434053045255184782262947610599773687019278095420778451388993275287671036696808345681907758553401189838972038543500084742170239051659634139506839737580860237335820352240795977384249135878463192018045665247791079284554522423920770689095241369674912900384780833826384603353004540832442301068467259985033073990197623334162128080808230776678819789754531356914101432198142571269180332284327769953910183940926362803172613740579524339289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f99e2aa958f6a03228a4c922f72a7abc34667c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comanage.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comanage.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001691e518aa50000040300483046022100d0b04ad26595f74d33054cf63791d85f5eadff6466cdb215c08dbfbe7b1d3687022100962bb524b66b746693054d781cf6d52d61035959c513ef35694fcc243347ff1e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001691e518aac0000040300473045022012963daabade5dc4ddca1767da694d8ce98c9838ca1a95dd3c9fa507442b21e10221008d797c4738f728a86a79f09bd1fa9d95441011ad621a2b92359e382e3b7adc84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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