staging.autospf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:9f:e5:8a:48:a4:dc:af:fb:86:2a:e1:16:00:79:98:21 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.autospf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:9f:e5:8a:48:a4:dc:af:fb:86:2a:e1:16:00:79:98:21
Serial Number (int): 320077963997720537096193271464974953846817
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:d1:56:35:79:7a:40:39:59:16:02:e3:81:0d:90:86:11:3a:c0:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:3b:6b:95:b7:ea:7e:03:67:44:2c:f9:38:b3:05:4e:d6:d2:0d:83
Fingerprint (sha256): 5b:9c:62:6f:0a:44:3b:3d:b9:33:c6:02:64:3a:6b:90:43:b4:cf:9d:fa:81:e8:a8:1d:cf:83:f8:7e:39:3d:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate staging.autospf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.autospf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.autospf.com

Other certificates including the domain name autospf.com

(limited to 100 certificates)
help.collage.com
help.collage.com
status.sporify.eu
status.autospf.com
staging.autospf.com
status.autospf.com
autospf.com
help.collage.com
status.mediaconnect.no
fdus-75.freshdesk.com
ats.codegod.dev
autospf.com
status.autospf.com
fdus-75.freshdesk.com
status.sporify.eu
status.waps.solutions
status.autospf.com
status.mediaconnect.no
status.autospf.com
api.staging.autospf.com
status.autospf.com
status.waps.solutions
fdus-75.freshdesk.com
staging.autospf.com
fdus-75.freshdesk.com
autospf.com
status.warrantywise.co.uk
status.warrantywise.co.uk
status.waps.solutions
status.synccentral.eu
fdus-75.freshdesk.com
status.autospf.com
help.collage.com
fdus-75.freshdesk.com
status.zoho.sa
staging.autospf.com
traefik.staging.autospf.com
status.virtual-developer.com
status.autospf.com
autospf.com
status.autospf.com
status.warrantywise.co.uk
fdus-75.freshdesk.com
status.justaftermidnight.io
autospf.com
autospf.com
status.diatem.net
fdus-75.freshdesk.com
support.autospf.com
status.skynetexpress.com
status2.stamateas.de
status.autospf.com
fdus-75.freshdesk.com
status.wundermancommerce.com
autospf.com
help.collage.com
autospf.com
status.autospf.com
autospf.com
fdus-75.freshdesk.com
mta-sts.autospf.com
sni.cloudflaressl.com
autospf.com
fdus-75.freshdesk.com
status.limonadadigital.com
autospf.com
status.autospf.com
staging.autospf.com
status.virtual-developer.com
status.warrantywise.co.uk
status.autospf.com
status.allgreenhosting.global
autospf.com
autospf.com
status.justaftermidnight.io
help.collage.com
traefik.autospf.com
status.synccentral.eu
status.autospf.com
help.collage.com
help.collage.com
fdus-75.freshdesk.com
help.collage.com
help.collage.com
status.diatem.net
status.autospf.com
status.justaftermidnight.io
fdus-75.freshdesk.com
fdus-75.freshdesk.com
help.collage.com
fdus-75.freshdesk.com
help.collage.com
status.autospf.com
status.autospf.com
fdus-75.freshdesk.com
status.allgreenhosting.global
drift.awork.dk
status2.stamateas.de
status.novus-productions.co.uk
auth.autospf.com

Certificate

The complete raw certificate details for staging.autospf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320077963997720537096193271464974953846817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 09:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 09:53:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.autospf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665713838216598190930793441613289603598281356210497730016289195678949725181999301041657371997315934933613051951887318172237855241079471975857542029769831449112789486247624731736323485887066832708070918410838163525660768441035099117434179176203826920963832419650797223518858686080041964577309753701563366875664550469867900969986555272795923692606985677202182397143790802481902601596304733187290670625113203430936121313477836899226409354448236939631981024197708754671398477439814691565792105363491163731338479174832060480182458977718917497473824640792377384704641744325691044907172453245875039016841342179152967273130628644037532624152955352907294360521320896673090812265336341082817259694329790563821363841419813771378628396081386973948775940585753093015692744966317733810035280922008873330470615243293636359974801816796736189492169302068436041164529350197048048492180626973002630905479956575258896712367246051534273896655607287313750765707256546332955695844093526928507874148364490180141652266454833723858091247777768248855119140593092916404361922374444244822995708663671472269415093515898061670736293415557902501719767132720132900752325381462563095785132622227560109117676043655992456842376939249118173573256998171708058890756152201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ad15635797a4039591602e3810d9086113ac071
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.autospf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168d1e3cd1b0000040300483046022100b5295ccf7288e1936fe92164a49d059955c852d258cfe2e3d31a4abb94ba1f70022100fe5c5b6c974bf92cd16d0932246750e36b857a0a4b2975296812a7964a6dd087007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168d1e3cd5f0000040300483046022100f77aa171d4f443e31dbaa6c3d86d43ffe6b4dca00c19d91d00ef7e1e14760e7c0221008c6b8f05a60a4818d6173a08adf668bbee7ba72e261789ec60c6b354173fb2d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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