caligi.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8d:28:39:05:4c:bb:de:e2:ed:3e:88:ff:da:26:fb:87:6f was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=caligi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8d:28:39:05:4c:bb:de:e2:ed:3e:88:ff:da:26:fb:87:6fSerial Number (int): 309370136719376927927640694035301787207535
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cb:56:35:5a:1e:ab:96:cd:43:ed:92:f2:7b:67:4b:05:16:1c:af:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8a:90:58:c6:a7:16:eb:6c:d9:fd:20:31:0b:9f:f6:3c:c1:85:82:01
Fingerprint (sha256): 6c:2f:2e:33:ff:70:56:af:10:94:d3:0c:bc:87:a9:d5:48:8c:cf:5c:78:d7:60:52:42:13:f4:94:d7:9c:be:9f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate caligi.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for caligi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
98.caligi.com
caligi.com
foxar.fr
king.caligi.com
www.98.caligi.com
www.caligi.com
www.foxar.fr
www.king.caligi.com
caligi.com
foxar.fr
king.caligi.com
www.98.caligi.com
www.caligi.com
www.foxar.fr
www.king.caligi.com
Other certificates including the domain name caligi.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for caligi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISA40oOQVMu97i7T6I/9om+4dvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDYxOTUyMjJaFw0x OTA0MDYxOTUyMjJaMBUxEzARBgNVBAMTCmNhbGlnaS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDU218Z79JAg78AetdYuxi4qA65A+r2z1SHohHl f+0VBUoUHRLesWPpGmHIbjze0EnXU39ils/c74YtYho2Q4A1liR74vImd8HpUHR0 xX4nI0FgkS53TLty8RynIbZJemY29oB6vOoUjBvonAnb5oS5KO4aJl5q2EgZeYnS CQkGp7TW9wAAQ7tmQUpDvAmVFjMk+4Ohy9+ompMevaeyVBS+4XY3E3eeZmcYFGNT gxhewMUltgKgOtolXWH5IAO6yR3oG+zKRpdhwrHapDcTkYR8ElwoJurrwtLLYkkZ q1KXkXRHxoBfRe/ZhPrr/foCSttmH2yT+pQVbFZQ23oB7UFxAgMBAAGjggLQMIIC zDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMtWNVoeq5bNQ+2S8ntnSwUWHK/cMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gYUGA1UdEQR+MHyCDTk4LmNhbGlnaS5jb22CCmNhbGlnaS5jb22CCGZveGFyLmZy gg9raW5nLmNhbGlnaS5jb22CEXd3dy45OC5jYWxpZ2kuY29tgg53d3cuY2FsaWdp LmNvbYIMd3d3LmZveGFyLmZyghN3d3cua2luZy5jYWxpZ2kuY29tMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA 4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFoJPAeOwAABAMASDBG AiEA9IVbdT4A6UZPuUBl5PK2NZmz9BGG2arrq+v/irCzMNQCIQD21kzBniSX9ubu 8MWzu8OaQHVL0jQR4WhQxQaR+W3EvQB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc pMMM9OVFR/R4AAABaCTwHI8AAAQDAEYwRAIgB42sh41DPvE+jDxK4OGxqY3XpRVs u9SKATuQq1DuhPECIAnXlR8fDIHHmIpJrINrlU/UOYDudah9TfGCs03AQDxLMA0G CSqGSIb3DQEBCwUAA4IBAQBaUJ1l66Dy+8Ofzjm+W8Aiane0Xy50HyyaKeJwnawp STVrvUjBoUIWse3JvNqy3V5ChP91Lur0Ck30BO4jKHkYsuEdf2cLWuVIwHhCEJot lgUMRka4K6VVtpioqIJmCsGxgKQvL5Q9tYwPCfINfkkn4jjbBDPhLAQv3/hizkPw vRktB8ondJ54geQrAJxLNYY04WwgTdmZB6B1Xv4w4IWTJ0bK3PzkBXZ/YQ0OOe6I KMDT1aPpPCz/I9BiKz8LuivcuY3fswTZYSh25Ol3TuwJvJ8YnUd3KssoK8dj4GuO 9ikpFmRlNkGgibziYr1HPOs6GES7pC8SFsHn0MUoucdD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NtfGe/SQIO/AHrXWLsY uKgOuQPq9s9Uh6IR5X/tFQVKFB0S3rFj6RphyG483tBJ11N/YpbP3O+GLWIaNkOA NZYke+LyJnfB6VB0dMV+JyNBYJEud0y7cvEcpyG2SXpmNvaAerzqFIwb6JwJ2+aE uSjuGiZeathIGXmJ0gkJBqe01vcAAEO7ZkFKQ7wJlRYzJPuDocvfqJqTHr2nslQU vuF2NxN3nmZnGBRjU4MYXsDFJbYCoDraJV1h+SADuskd6BvsykaXYcKx2qQ3E5GE fBJcKCbq68LSy2JJGatSl5F0R8aAX0Xv2YT66/36AkrbZh9sk/qUFWxWUNt6Ae1B cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309370136719376927927640694035301787207535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 19:52:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 19:52:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caligi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26870696766062829561598520553319657049028681915666644280696870693063710597316975748994591561322446935219438580987705120016984227324882087856606909988769468470872329989323377849463414941393709041268614431622369699810237885754484217121634702712183886229529547858216384726937069284448628239286379583719351475480162866291371842104086237366679084040504159334800142597024100061540188722825601263501249235553577901790856795438034033102604055043418169580341577068113186013695625895835806955989936711424561604121928047858709007048657373075887211977463257149659221321537730563107663898530209546371575882805306393193219313451377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb56355a1eab96cd43ed92f27b674b05161cafdc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '98.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxar.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.98.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxar.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.king.caligi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016824f01e3b0000040300483046022100f4855b753e00e9464fb94065e4f2b63599b3f41186d9aaebabebff8ab0b330d4022100f6d64cc19e2497f6e6eef0c5b3bbc39a40754bd23411e16850c50691f96dc4bd007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016824f01c8f00000403004630440220078dac878d433ef13e8c3c4ae0e1b1a98dd7a5156cbbd48a013b90ab50ee84f1022009d7951f1f0c81c7988a49ac836b954fd43980ee75a87d4df182b34dc0403c4b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005a509d65eba0f2fbc39fce39be5bc0226a77b45f2e741f2c9a29e2709dac2949356bbd48c1a14216b1edc9bcdab2dd5e4284ff752eeaf40a4df404ee23287918b2e11d7f670b5ae548c07842109a2d96050c4646b82ba555b698a8a882660ac1b180a42f2f943db58c0f09f20d7e4927e238db0433e12c042fdff862ce43f0bd192d07ca27749e7881e42b009c4b358634e16c204dd99907a0755efe30e085932746cadcfce405767f610d0e39ee8828c0d3d5a3e93c2cff23d0622b3f0bba2bdcb98ddfb304d9612876e4e9774eec09bc9f189d47772acb282bc763e06b8ef629291664653641a089bce262bd473ceb3a1844bba42f1216c1e7d0c528b9c743