redmine.engined.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:a9:6c:ee:0e:ac:94:ce:84:4e:42:d8:f5:a9:24:07:ba was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redmine.engined.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:a9:6c:ee:0e:ac:94:ce:84:4e:42:d8:f5:a9:24:07:ba
Serial Number (int): 296611146715861865482759848699664598828986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:5b:3b:9d:d0:3b:46:e0:b4:5a:9a:56:00:cc:c4:de:e7:1a:85:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:f9:f5:b1:27:2b:45:3e:98:86:fa:ce:02:f6:17:29:ba:32:ff:39
Fingerprint (sha256): 62:ef:8c:4d:ea:17:6c:56:8a:7d:d7:82:74:08:b0:3f:35:db:34:a9:1b:cb:01:68:3d:21:4e:e0:7a:d3:97:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redmine.engined.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redmine.engined.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redmine.engined.net
redmine.freya.sk

Other certificates including the domain name engined.net

(limited to 100 certificates)
engined.net
redmine.engined.net
*.engined.net
engined.net
*.engined.net
redmine.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
engined.net
munin.engined.net
redmine.engined.net
redmine.engined.net
munin.engined.net
munin.engined.net
engined.net
engined.net
redmine.engined.net
munin.engined.net
engined.net
engined.net
bauernpflaster.h1.engined.net
munin.engined.net
engined.net
munin.engined.net
engined.net
engined.net
engined.net
redmine.engined.net
redmine.engined.net
engined.net

Certificate

The complete raw certificate details for redmine.engined.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISA2epbO4OrJTOhE5C2PWpJAe6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTMyMjAwMThaFw0x
OTAzMTMyMjAwMThaMB4xHDAaBgNVBAMTE3JlZG1pbmUuZW5naW5lZC5uZXQwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDhhYdji16dqNVm2Wzbpl1B3Bh1
T7wlMMrYLCZCsQ9bk3BdJAkQ0ggWHP5TJtE+YxEvV9FjGPPWf5xQbchCSDYnNEwu
jAjejnxQGGuIDBO3MlT0FpLvv94+WkswRuLkndN83UJg1S8Zk4JvojYvD2Ya+0Sf
hkYAVQAoOrj+rLYzDPg1thFekE/Ni4v5+a7pSNlTftSiJUwlun6Mfj0KpYFtWq4w
lksUgX9asl/z4EoYMSTOLJcjiFN7QREPkW4jJkSJe4sLz4kaQVDGS546+ZPx07nN
8lXP7svoV6OAj8RUJ9LJBq0L4PL31ApZ9v8NAfqkDOGqktGhV3mG07c6ZMH8BKGF
EBzoXuapJQcluAyxjPWSVRXKVXdCMUOIXTztXI0QslHK5gON1KQ4QZnYySiI9OGd
4e+Gqz+ZAD9T1CUAkofsH9dlczRwGYHwnjHG6jN1dRS3x7NXsRuZWcu5W2LxYxDf
dqTMj+C3Tf4aBHxbROX1P8ylRTKSqMAug90Bo0H75mq1ftXC1DQEt1XN26M6GUWO
dhzlQQ95U/kRqLnDn91HgwRcgscBOXEv973IIxFQ5cPXSsZO5DiM85wcU1aNKepG
iIfGh+pl/OIWzq0nHs0tzoXmoh0Nrfkx8lW0XvIfOmC5RkrE/AmE88CIPdCB1jpN
8ISngswynAbJL6BvywIDAQABo4ICejCCAnYwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTjWzud0DtG4LRamlYAzMTe5xqFCDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDAGA1UdEQQpMCeCE3JlZG1pbmUuZW5n
aW5lZC5uZXSCEHJlZG1pbmUuZnJleWEuc2swTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4l
T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWepzJwkAAAEAwBHMEUCIQCd58o1iNCzSiN9
lcKjFWH+drII/yHIMXYvpQGipIVWQAIgFrYuOb7CoAk7qHvfm0RZXoPKsHdV0VVH
KjvtTaciPEwAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWep
zJx+AAAEAwBHMEUCIQDYiaV6TTfT3IEVyOGHOZlaHKrKtPYtBYWZfppo737qcAIg
VGPp9KhZK1/evOTMaPioUX0CxZSiZclOCK8Q4cp+WwAwDQYJKoZIhvcNAQELBQAD
ggEBAFQWhomiMBexOQSoVlWLtpsWtFXPd/Gi6kR1fHRolc9Z+HugO7gNO73EKgOb
Arx7kWXZKpUIUAtGLXnGCpfUjf6bZMsBRapOkvMRni3VZKN1qCiyrFSGgB4AHEuA
JCpNkLKS2gbfoT6pDjWjc4Cv+oAdxN7TwjeNcD+eFXYoH4C7MIVcOvYwd5zrUORe
ZHk/bx4KGLI4zSFPMaphoVxES5aqc/3gubLLfoSO7agS7p/HIB+tJLPGXePFjE1R
dlLwtDvpqbca3E6nfWNCv2ledtguMymyFfDIQJlX5pElKafZyNJn2vmgrQ+d74Ji
ZUb6r+8Begfkt4/OnSDpZPjg4GQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296611146715861865482759848699664598828986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 22:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 22:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redmine.engined.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920047845900350764185727658407573951010184626675446612066185984539105428891461551450636927072539359620764403938189771971558532919561730358704458261396694191711200222654991360256964376624997839027704786726915509765363107755587325884031858506615813998445869015808832459162748384071583878694735615400348587309333634056970402465817297524579585336781012285159599293646694916687598915087096059497729771603527773292009884888172635749961627026917112379248978679141925667947183478961695459356392576414944020124401244968431513499378178755955681026188800143957004344519885076693031574702573838321674298643398642565394283105190957547914343946598115806633461824818017254826880687310331664373088874355072567780130869350676625736954841364502395556553590985932333917358997317027031402528008913063544027688465896698432328008400870550093706742755822160445300306972006393083743313066330442190041262903659166967835717499034969807874198668861806346666921507969109201818640649002900107802916472596385778589423152351282325267137818526691374758200718914835496100883030004490553421373400158641300754933600840217306203103410921010114133118760039292120768000717573714777800236393812478112780895385469820820522762694369011729037070291942834050333577403535749067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e35b3b9dd03b46e0b45a9a5600ccc4dee71a8508
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.engined.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.freya.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167a9cc9c2400000403004730450221009de7ca3588d0b34a237d95c2a31561fe76b208ff21c831762fa501a2a4855640022016b62e39bec2a0093ba87bdf9b44595e83cab07755d155472a3bed4da7223c4c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167a9cc9c7e0000040300473045022100d889a57a4d37d3dc8115c8e18739995a1caacab4f62d0585997e9a68ef7eea7002205463e9f4a8592b5fdebce4cc68f8a8517d02c594a265c94e08af10e1ca7e5b00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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