galapagosstore.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:1f:c3:6e:86:45:e2:32:2b:ff:f1:fb:cb:96:f0:a9:89 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=galapagosstore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:1f:c3:6e:86:45:e2:32:2b:ff:f1:fb:cb:96:f0:a9:89
Serial Number (int): 336241199325347206683699744133360565397897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:2f:ae:49:b4:28:1d:80:df:89:c7:d4:ab:ff:fa:52:f5:32:e1:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:69:fd:37:6d:9b:e2:0e:4a:2e:9e:63:aa:7a:76:2e:29:b7:b6:c3
Fingerprint (sha256): 54:42:89:04:db:9b:64:22:dd:e3:ec:ba:92:fd:27:9f:a4:be:c6:38:e8:bb:8a:1f:24:d6:36:1e:78:4c:51:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate galapagosstore.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galapagosstore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

galapagosstore.com
reaps.galapagosstore.com
storeman.galapagosstore.com
taiyaki.storeman.galapagosstore.com
tool.storeman.galapagosstore.com
xmdf.galapagosstore.com

Other certificates including the domain name galapagosstore.com

(limited to 100 certificates)
cdn.galapagosstore.com
cdn.galapagosstore.com
galapagosstore.com
galapagosstore.com
log-test.galapagosstore.com
cdn.galapagosstore.com
cdn.galapagosstore.com
test.galapagosstore.com
galapagosstore.com
galapagosstore.com
galapagosstore.com
log.galapagosstore.com
cdn.galapagosstore.com
test.galapagosstore.com
storeman.galapagosstore.com
test.galapagosstore.com
galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
galapagosstore.com
cdn.brain-library.com
cdn.test.galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
adapp.galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
reaps.galapagosstore.com
galapagosstore.com
cdn.test.galapagosstore.com
galapagosstore.com
test.galapagosstore.com
cdn.test.galapagosstore.com
cdn.galapagosstore.com
galapagosstore.com
galapagosstore.com
reaps.galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
log-test.galapagosstore.com
test.galapagosstore.com
storeman.galapagosstore.com
test.galapagosstore.com
cdn.galapagosstore.com
galapagosstore.com
log-test.galapagosstore.com
reaps.galapagosstore.com
galapagosstore.com
cdn.galapagosstore.com
test.galapagosstore.com
galapagosstore.com
smetrics.galapagosstore.com
log-test.galapagosstore.com
sz.galapagosstore.com
cdn.galapagosstore.com
galapagosstore.com
galapagosstore.com

Certificate

The complete raw certificate details for galapagosstore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61HRO10+7xiZS3GxTSnz
c/Rs5PbbSmu4vgj6NUPu6kfRnmmd6Dq/YhfPmHEE/FQYUFFTrRP7Ma9UOtc21rju
h4RdSRCTn8zxVik05iwOh5Ph46fhQbPIh1ADr0eC52oeHSmkxQtI7NvPJIdelNTm
NwHEb1SrZaBRgaL4QHMSQCERnrO79kchjCD4ZBoQGItvk67xIKqlVlk7+9nCCQC8
G4xhEl6VGw0uq13LcWRlVqGW49pifV1UeaF5kYo2Lk7upxTlE3SsNDAfZFOHXGHd
jwOD309vB8sxeTBOVzJVOtI/VXSogU7wAKstjJ8d45TRcI2kf55kc+Bd74ZoBPpt
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336241199325347206683699744133360565397897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 22:26:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 22:26:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galapagosstore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29706347287310529257581264219949342824799420174549202377436433580831986390549058353973690531802354197405554334795351661286200411051663319224725314153979896584320960190137149534648923141496441900915760406517611221184193487976204485865552581506175534282660815350728180913429637193462739471530359399522943409374598254249173965985377043444299714524082005160483740993323366734962645012592775246157051162690752783017756392731599075483176723466466683876684058271137437184557406203815309077155735824253418620198967731054300086097448310862939833478885007423060568252090581666052672062112369578340379128776728476828489838390569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							562fae49b4281d80df89c7d4abfffa52f532e1ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (174 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galapagosstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reaps.galapagosstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeman.galapagosstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiyaki.storeman.galapagosstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool.storeman.galapagosstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmdf.galapagosstore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cac33e7ee0000040300473045022044443c9d74908cb069ca8661931ddc2d1ac8666b08a653a24b01956494a0ecc702210097b53f637b95b0450fd184fb9fd0d93072bb3dada14dbf2cfec6599bd9b381f6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cac33e7de0000040300483046022100f0274a9a41bcd069754a2ce08ebaf08b372f481c5a9ad0f693afa913991d6322022100979cb0c3fcde32c521d9baf1aa5c97d309c53eaa5b37f6226916f5784d32782a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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