gitlab.brewedlogic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f1:9b:a6:28:16:91:18:1c:0e:bd:bd:4b:ec:26:71:b2:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.brewedlogic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:9b:a6:28:16:91:18:1c:0e:bd:bd:4b:ec:26:71:b2:2a
Serial Number (int): 430664087228696643217377890833837591736874
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:4b:1e:33:80:21:dc:f2:f0:e4:ed:b2:4f:b3:2a:d6:8b:69:f2:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:93:0b:30:29:bc:f0:23:2c:39:02:34:c3:d8:0d:b5:62:8c:f0:23
Fingerprint (sha256): 6d:00:36:68:7b:c8:7c:ae:0d:9f:96:bb:77:9d:5b:84:fd:02:9e:17:70:fc:9b:a4:2d:6c:09:b9:c4:ff:a0:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.brewedlogic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.brewedlogic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.brewedlogic.com

Other certificates including the domain name brewedlogic.com

(limited to 100 certificates)
www.noiseboyz.com
service.karyampat.com
hr.digital-studios.ca
www.fashio.se
employees.boldercontracting.com
employees.boldercontracting.com
ayg-villa.pedix.app
hr.digital-studios.ca
hr.digital-studios.ca
www.hyfabi.xyz
hr.digital-studios.ca
hr.digital-studios.ca
hr.digital-studios.ca
people.allyallpdx.com
hr.digital-studios.ca
events-kala.melzo.com
hr.digital-studios.ca
hr.digital-studios.ca
www.brewedlogic.com
hr.digital-studios.ca
brewedlogic.com
brewedlogic.com
hr.digital-studios.ca
studentcare.morningstar.org.sg
www.brewedlogic.com
hrsuite.brewedlogic.com
hr.digital-studios.ca
hr.digital-studios.ca
employees.boldercontracting.com
hr.digital-studios.ca
www.brewedlogic.com
gitlab.brewedlogic.com
employees.boldercontracting.com
restaurant-bali.de
hr.digital-studios.ca
employees.boldercontracting.com
hr.digital-studios.ca
hr.digital-studios.ca
www.housle.house
hr.digital-studios.ca
hr.digital-studios.ca
portal.acads360.com
figure1-admin-staging.figure1.com
hr.digital-studios.ca
hr.digital-studios.ca
hr.digital-studios.ca
gitlab.brewedlogic.com
employees.boldercontracting.com
employees.boldercontracting.com
myhris.iambradprice.com
hr.24hrbaby.com
hrsuite.brewedlogic.com
hr.digital-studios.ca
www.brewedlogic.com
gitlab.brewedlogic.com
hr.digital-studios.ca
people.c-k.ca
hr.digital-studios.ca
www.inrelation.io
academy.andreaslydemann.com
hrsuite.brewedlogic.com
hrms.webuters.com
hrsuite.brewedlogic.com
hr.digital-studios.ca
go.platenger.com
www.brewedlogic.com
hrms.umbrellainfocare.com
www.convertman.com
fbtest-leo.dev.paisly.com
brewedlogic.com
www.brewedlogic.com
employees.boldercontracting.com
hr.digital-studios.ca
hr.digital-studios.ca
blogtonft.com
spscashier.auxswot.com
employees.boldercontracting.com
employees.boldercontracting.com
hr.digital-studios.ca
employees.boldercontracting.com
employees.boldercontracting.com
employees.boldercontracting.com
blazeui.com
www.brewedlogic.com
personal.sonar.ws
employees.boldercontracting.com
www.brewedlogic.com
employees.boldercontracting.com
www.brewedlogic.com
www.brewedlogic.com
gitlab.brewedlogic.com
hrsuite.brewedlogic.com
www.ffsb.co.uk
hr.digital-studios.ca
hrsuite.brewedlogic.com
www.psyjai-dashboard.com
hr.digital-studios.ca
people.itp.com
www.brewedlogic.com
www.brewedlogic.com

Certificate

The complete raw certificate details for gitlab.brewedlogic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3pXPhKI+ehfKfTfXCoP
DJEwwitHc13gsK0/Iu298+wRKj/JdIvryR76gGCHQq5gU5rJMbK5ZaiXLyboK/T8
GtMMMXSArZuvRoxmuF4St8FYWvKAlYeGs8tOW1jm9SHIRZY3JxzlaXjs53yp3PqU
NZOEY2oaP93zFUWPb6tnqItBOCQlc7pQBWSXB95fZkpQ6wbt4G3Lk/VVh+D3EWHd
KXyh31pPVOIpDQo3o638WoMURZw8L7B9DjEK480W8s4Baw2FvBZR1uXZ89umpddB
O82SR61wJ5BMrAiVlnxW74m3xRb2vbKkwK/bbRObXYtawWzLbKI7qh6jaUZCKxvS
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430664087228696643217377890833837591736874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-17 11:11:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-15 11:11:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.brewedlogic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24676797960847778422380247998246096468093053734574639799400967484275068254015645606216057571834590372723549625882299234833033173202420563827319547081830929406804066092668814931181729228078991071550144084546292833779864157706178749657884139070732582296182997105859765477195087661759209486049601151176399468153931637413575187671578102402736440574632301529233598738802638675423246729435272273879905058565847745948482293915625608345434612729933299835077773863366429462005249416600090553711897007465824985715742857068542896880489098722733010790242895969527887527150794931214556437900250352897585758485673101043079457788639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							184b1e338021dcf2f0e4edb24fb32ad68b69f28a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.brewedlogic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001640da8b561000004030047304502202b1ac0c16e1785b90d0ccf37d728675a1585b62708abc0ba6b8ecaf0a49199740221008090b6f0c11e4d505f2ff2c7af17334f9997c607a34f7671e68630bbeb43d16c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001640da8b54e0000040300473045022100f50b5feaab0c357a93e33a0875748916598644a7339014c07553821d4b3437a90220797b17327081f1af14564194370af3efae184523188e81fa99bdd38bbe4025e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e7174adacfdbf1bcb6956d091c8fd4059e5ffc6038d48513cbfb7fb1c85fd618ae54a761a4451132bfd0901e25d065f0aeee0666b9132ba7ec80f82b3526b4212e8da409104a048a3bc0ad7c6b5ae5e026426c9b4ebad441462c6015fc4d3c5db6ef65ef3a1d5e4324ad2267f0d3bc0da66a2e1a455beeb7efb63619013e6e5e630f657da3e2e7a60d7fef7c9ec2cd0ab1ba93f3849a381b1e93f76e51afb51cdf6654ab671acf78e406ce1101c181e50f0200c21b23c8b47fbeba9cb7a82c72dfc39db7080dc3e85392583f48176f157a6f3cd46228014f71be31e213eacc9dd0686e84bd1459b80398f6a435acc583990c5fdd2af35ca0356793da863310f