chic.givengine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:e7:81:d8:5b:ff:dc:34:71:e7:70:d9:ad:ef:e2:52:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chic.givengine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:e7:81:d8:5b:ff:dc:34:71:e7:70:d9:ad:ef:e2:52:e7
Serial Number (int): 274575313599886890177292634217830399759079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:7d:a8:6c:e5:6e:e2:b8:ef:06:bf:42:96:c5:24:34:32:b6:1e:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:4d:ad:39:61:f8:75:4e:ab:b8:25:64:a2:89:67:b7:47:4b:2f:d8
Fingerprint (sha256): 60:8e:4d:cb:db:83:5f:1e:ce:f7:88:e7:9f:35:e9:e0:aa:d2:0d:75:c2:8a:2a:fc:9a:1f:ed:21:dd:48:30:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chic.givengine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chic.givengine.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chic.givengine.org

Other certificates including the domain name givengine.org

(limited to 100 certificates)
chiapet.givengine.org
chiapet.givengine.org
give.genomegitar.org
give.genemo.org
give.genemo.org
encode.givengine.org
beta.givengine.org
encode.givengine.org
beta.encode.genemo.org
encode.givengine.org
demo.give.genemo.org
beta.4dnucleome.org
4dnucleome.org
beta.4dnucleome.org
singlecell.genemo.org
chiapet.givengine.org
4dnucleome.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
mcf7.give.genemo.org
chiapet.givengine.org
beta.4dnucleome.org
chiapet.givengine.org
demo.give.genemo.org
margi.genemo.org
encode.givengine.org
chiapet.givengine.org
beta.encode.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.givengine.org
singlecell.genemo.org
demo.give.genemo.org
beta.4dnucleome.org
give.genemo.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
chiapet.givengine.org
singlecell.genemo.org
4dnucleome.org
mcf7.give.genemo.org
give.genemo.org
beta.encode.genemo.org
chic.givengine.org
encode.givengine.org
mcf7.give.genemo.org
margi.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.encode.genemo.org
beta.givengine.org
margi.genemo.org
chic.givengine.org
singlecell.genemo.org
demo.give.genemo.org
chic.givengine.org
margi.genemo.org
chiapet.givengine.org
beta.givengine.org
chiapet.givengine.org
demo.give.genemo.org
4dnucleome.org
chiapet.givengine.org
beta.givengine.org
mcf7.give.genemo.org
singlecell.cepbrowser.org
chiapet.givengine.org
beta.encode.genemo.org
beta.give.genemo.org
chic.givengine.org
encode.givengine.org
singlecell.genemo.org
chiapet.givengine.org
demo.give.genemo.org
mcf7.give.genemo.org
demo.give.genemo.org
encode.givengine.org
give.genemo.org
chic.givengine.org
chiapet.givengine.org
singlecell.genemo.org
mcf7.give.genemo.org
margi.genemo.org
give.genemo.org
chiapet.givengine.org
singlecell.genemo.org
give.genemo.org
margi.genemo.org
mcf7.give.genemo.org
give.genomegitar.org
margi.genemo.org
beta.give.genemo.org
chiapet.givengine.org
beta.givengine.org
beta.givengine.org

Certificate

The complete raw certificate details for chic.givengine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7usOvxFFrnYklo7nAq
E211WLh0qpJN3u4PHcToKomR1pYRr1Q4Wq9eI9GdCb5KqoXPq1BhaojB7DnIoy/p
Fbrlc+OHSumwfAmq1rW1ky6KDGHFvMGJNrfBa2nYYPCoL4CT8zCHfY6lMdnNywYi
yQIIgqAKVtkAOJY3d4ut3fapqQk7zmcOeyQIm9Yg8nk6ClBiUX8XYLasGBxuimKL
wwWlGLUHZSGa/15ZGgR6T36u/i2MF1K+WApWVwabloOreMG8GbZGc9EV1OWeKP6M
/2viYDKQ0O2OUl24ub20/rshA7wDQXAFCeDHkQKYvEye1HbskTodHhFc7haoGjO/
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274575313599886890177292634217830399759079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 22:36:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-09 22:36:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chic.givengine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20718335343016944652124151050135866076927444769950509578893741988781876872228006390911533385526283992940654705283409364198933869383481511522154115254464508994394535549332393508550507396317590610751025048038738036813311503331283385906181698895975194108115924143318739613482225094582278440190550186515054937757359607186795553203413015870824238184535965232571756711106970397622216761577631162782263165935773118653293472953010582164790682387797588998857634144344508366272005425650493673236540700516321615479140498171872007329754738019450857645147068876333762306807454218219599989926282245648520852689403235204865996340999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb7da86ce56ee2b8ef06bf4296c5243432b61e9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chic.givengine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696f1ceffc000004030046304402206d714ece28aae29064539316674956fbd279f0f360511b61a2147eb74f427c49022054bb4a5e93d4a1929889732aea9e793f6a1684fd02067224b91e8aef37ec2a43007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001696f1cf21d0000040300483046022100e37596048a39c541368b69b088dc509db46102cd967ae68bcd841d550fa5bf7c0221009450c83a4771dca5b81f4822319c22ac5beab5758df46bb5470f872d66f22ac9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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