gitlab.ely.by

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:4a:bf:60:24:64:ca:c8:b0:76:98:c1:26:9f:76:b9:9b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.ely.by

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:4a:bf:60:24:64:ca:c8:b0:76:98:c1:26:9f:76:b9:9b
Serial Number (int): 330173252463693102938945343093910753687963
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:a9:2c:96:33:6d:79:4b:90:84:f7:6c:27:ff:fc:4a:48:e3:a8:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:6d:fd:c3:55:a0:63:b6:ba:df:6c:42:00:19:fb:54:3f:25:55:63
Fingerprint (sha256): 56:d5:55:24:c3:85:f9:6b:86:09:28:52:9e:dc:c0:d3:23:7e:20:02:74:85:7b:b9:73:42:e9:e5:f4:53:59:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.ely.by

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.ely.by

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.ely.by

Other certificates including the domain name ely.by

(limited to 100 certificates)
ely.by
erickskrauch.ely.by
gitlab.ely.by
dev.account.ely.by
registry.ely.by
erickskrauch.ely.by
new.ely.by
gitlab.ely.by
sni33029.cloudflaressl.com
ely.by
dev.ely.by
dev.ely.by
translate.ely.by
ely.by
gitlab.ely.by
ely.by
registry.ely.by
docs.ely.by
ely.by
grafana.ely.by
gitlab.ely.by
sentry.ely.by
translate.ely.by
dev.account.ely.by
sni33029.cloudflaressl.com
dev.account.ely.by
dev.ely.by
dev.account.ely.by
www.authserver.ely.by
erickskrauch.ely.by
dev.account.ely.by
sentry.ely.by
authserver.ely.by
ely.by
sentry.ely.by
account.ely.by
authserver.ely.by
account.ely.by
erickskrauch.ely.by
sentry.ely.by
translate.ely.by
gitlab.ely.by
sentry.ely.by
gitlab.ely.by
dev.account.ely.by
ely.by
dev.account.ely.by
gitlab.ely.by
sentry.ely.by
gitlab.ely.by
sni33029.cloudflaressl.com
authserver.ely.by
gitlab.ely.by
erickskrauch.ely.by
sentry.ely.by
dev.account.ely.by
dev.account.ely.by
gitlab.ely.by
registry.ely.by
translate.ely.by
gitlab.ely.by
gitlab.ely.by
sentry.ely.by
sentry.ely.by
sentry.ely.by
translate.ely.by
dev.account.ely.by
docs.ely.by
authserver.ely.by
demo.account.ely.by
dev.ely.by
gitlab.ely.by
grafana.ely.by
sentry.ely.by
sentry.ely.by
authserver.ely.by
gitlab.ely.by
dev.ely.by
docs.ely.by
dev.account.ely.by
translate.ely.by
ely.by
www.authserver.ely.by
sentry.ely.by
demo.account.ely.by
dev.account.ely.by
sni33029.cloudflaressl.com
gitlab.ely.by
sentry.ely.by
gitlab.ely.by
sentry.ely.by
sentry.ely.by
sentry.ely.by
sni33029.cloudflaressl.com
account.ely.by
gitlab.ely.by
translate.ely.by
dev.account.ely.by
dev.ely.by
dev.account.ely.by

Certificate

The complete raw certificate details for gitlab.ely.by in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1EfOkyEEMslwsIwM8ipd
VpKb03gYTF4fROhfjzyHwEcrlS7pXVPygtK8w2GAJ7T0y+s+D9stkF4GgcfPXk4I
jDj81/MSaH2026QSN5W+wXuHDsHkBDPDzKKH7SeJrLNomL2cNE8d81n6W64COF+D
TRXgwD97RGCqbwKqkEXIbVPKiZnBqHbLyQI4UZNywrZ7iwhPNlvKCsqc+SVja/Nb
IvyvgCdwIBfZX8ScZqHHAAhTSJ6+dFOlOrNS+bimdHmGrNMgrI4ii+Sh3W5xus2v
w7DERYyeojlBwSl0s2My7pe+GONpF1EDPw/BTtWxMpQ42VQt0mShAyWYQgTZQMXO
dTG00293CBtlVDpu5J6ATKal/OMoS8TPASJ1dgX6n7r60NseZEBb6kHeHStCVTSJ
8kDrPXEHOEH+kgmNBozVari722PA2FmnowZHIGz8ihKbz7XwF0Z46HNNcN7VK54Y
ulpS1m89ABxqZ+LDKN0aDHSojthkjqysmHEkGhDgjx9erTT0N4DL+dwxh75ghDo5
ScokDsKTKt8H4TnwpUWhO6H3ehDtLdQE/qRGF4s5pDuMps17EyD2zc5b5PTErSD4
q9gmJGNByulsjVo3qq9b42t6xt4Vt7GR1PrjfbFxM5GwM/NA+alfX0d+TsaoYI7E
OYzGbDIVsEEaiSXdgJ8rPvkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330173252463693102938945343093910753687963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 19:42:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 19:42:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ely.by'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866028865569707657436953505099779091877722513200316917588028755762183798582392114976442775534624070644612977743033905922151201557670475310870573843589220344913590819303407272391267165550206885606009627839660853372104043428658504016099866943002836436532506030184818262739924245876583393427042675837601276285724771366225340272194786245086959731513841423401714121213279508969257615589019634407111859144284010007474645134583334422507028250839713495329238101313561511487172183742097712701481761793640693758064244616891688013545173906235542692210442988311395087093339341315682040412756876171822589283613495551177294997839525565123606338015807330162160786317503017731711502539676119635619446195164484707086331511669988421976876394649769082092765781477927607102079085253376068760232654988371349627928459656262225776546022649429917540679264580644572374053007231552038334090068229730836294302217495684069317705180415253520704298168265688393125408550478324193332936609403024726479145936607997931516078050021206356564290769296713787678203384740677520850822722573210274230144023409869313696172554115033086974102140424584732969760952351734050716249110842865027420842261353450560100734173279937888830048810051865022773263008659142405248920765284089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eba92c96336d794b9084f76c27fffc4a48e3a8c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ely.by'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ce444014100000403004830460221008494a5ba952edfd33a3f8f8dcf78f53fb0641a795333f8231a19e8b6daae213e022100a70f5cad8e6d8d4f8f3dda13a32e0a4634dbfcf928f78fd7514c415a5f6d0dd9007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce4440092000004030048304602210087b6c502f4155fdf7c64458834c5f36097f9bb90eebcd067f021a66436ac8454022100e8b5dc2c3021ac4e09b22decb80c0439170bbcb2ab5edee00be3ed2ffa43e536
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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