git.ideolys.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:fb:b0:d1:d9:8a:b0:be:d3:58:d7:7c:ca:78:f3:49:28:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.ideolys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fb:b0:d1:d9:8a:b0:be:d3:58:d7:7c:ca:78:f3:49:28:34
Serial Number (int): 172758193758488450423609771852567654508596
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: cb:d7:7f:ce:73:7e:4f:ed:f0:c3:7d:a9:bc:3a:07:e9:92:1f:e3:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:09:82:c8:5a:e8:ae:1b:e9:d0:79:39:d0:18:c0:1b:7c:e0:e6:ad
Fingerprint (sha256): 68:50:f9:40:ec:90:ad:b9:77:bd:d4:95:af:d3:92:a5:9e:3e:21:46:a7:3c:b0:46:29:97:a6:c0:f7:68:9d:98

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate git.ideolys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.ideolys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.ideolys.com

Other certificates including the domain name ideolys.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for git.ideolys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgISAfuw0dmKsL7TWNd8ynjzSSg0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMTAxNjU4MDBaFw0x
NjA1MTAxNjU4MDBaMBoxGDAWBgNVBAMTD2dpdC5pZGVvbHlzLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALxtxXihNDgfM5xN8F+DC+mazb60zZ+p
RK16xytTeptKSqekO1Q9pOrLnYuxFSWFL64MjM8iVWA3TSEpNl5EpP74+tsWe6Uf
VhQMb0YrAZ78Dqe7qaOZ8JtTIDFX4I3ygjkbCDzM5z7ZSFPqmny8LpYSwDpTV2/F
KqMg1bOu6JoWP8yU8OWRDqVAx+1NpaNMP0Sp7X04XwTr+orXokMIUd99W1k1PrEp
ywEeeMoZ6EdLTW4++oQGMtKapsCG546HTc7C5ZoncwDlAUUV3dfC7B9zCDIBVQk4
NXF1HQK7YQapui6hcAX+MzIIl2YEPiI2u+UHbPCIqxtrfS+AuYUnANOeGulz/eRO
XW7ss35niyTHLNbfNKi2g0aV4xQ/EEEj8Z3i8tvO96UciLUerO87neq5YvggYOlF
BMJ4iuA7lrv9dkGvNTpkCAUolglmLjC5lZ0ScFWlPAfiRtR+j4C2ZlJBBna2JYNc
XIzcmE0FGlsAIeAHmxzEH8gOZxEnJhlBG6ERrkAW5847KWpmw7G3RONEX1Io0syv
cOe+yvXPhYECj9NznooT2vgqQK0zUgXgV8YMkhRRuEsfO5ngsZ14RQ+6chqiOwYV
Hsv+rTFmtHGc5hux2leByzSgcfhApQSkb00xhwbkx+wujtMEDdUsFSuNtVJ7QiEf
Js2IJyiZwSP9AgMBAAGjggIQMIICDDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMvX
f85zfk/t8MN9qbw6B+mSH+O7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50
LXgxLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14MS5sZXRzZW5jcnlwdC5vcmcvMBoGA1UdEQQTMBGCD2dpdC5pZGVvbHlzLmNv
bTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC
AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g
YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0
aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5
cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQB2CVTdqA4nfSAw
k2483U89rB3SrBWS3zd3peaPgM+lUfEc9pfHqIQ9eEaJiBF5gybX0W/MAJt27oy8
jiYrY/+EXUSM71xaYFn6MA2Pbt9liWWoNG+iqe5TGBskSU45QoxBjUpP2pLO0bFS
M4Tccpt+G2Hh29nfK47oeSN/mygUa5+qoK33zoSP28eryyxc9BnK1uWp4vcvlEK3
Nq1p9ZDZiLnnSP3F+uPWGGYroLEfalofvxgTKgfRDIj6P8xHkIBlTjKFUWUS0Y7h
b06/V6Wd5VzmawQrk7oybHvtIqCyqRWU8ljwAR5MbYl7UT4zfD4EY+NyimjAkMhU
YMUOv8jP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 172758193758488450423609771852567654508596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-10 16:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 16:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.ideolys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768722413406002978439086706836699280323150476824641431883847986160015984005570882153433512013873263525307243383403751096759132743387525641676384937821759280933228281864659043215755289249587290543329030097052612254617479781721539911810737302295009094646333738889519654823485192505069144595131840834706347868074679929512440169195547182394103546150475669054218268108975850143103947544284840525135412513635934747224988720974449888992172979540802730892619738769631309050881859214284296472154020803894171335645324262513334821585348789402119116390090614130056596590249762045139026419966791325655665390820235787933636408554821685699873297122123882577930395239024069742184512213037343545000631839945460047478322632750541778436666881184301533254948198193923881635796537053454137793078685297712947337507742091756442369668354377762037112696008938872165131999135226978470571362182895142808720651833524513925468546617984418870354860416158088502069237832704639498921338209505742381045003917397540334382182789865559311390194158289671503670431035127293551157086339573251485518868540826008761059527214291571628783258819344719045039714830313022505715755422572623107441284872738510004016282833269170919703885461410428544257068255963569153325220812104701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbd77fce737e4fedf0c37da9bc3a07e9921fe3bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.ideolys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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