git.waybefore.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c4:34:17:d7:30:a1:59:05:88:e8:67:77:c1:f8:86:1a:69 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=git.waybefore.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c4:34:17:d7:30:a1:59:05:88:e8:67:77:c1:f8:86:1a:69Serial Number (int): 328101445354964191998029923437772188031593
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 42:19:3c:44:d8:0d:d4:ad:78:00:94:14:2c:d8:06:b4:f3:18:95:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 73:c3:0d:fa:b7:b0:e9:34:93:3c:13:78:c1:ef:0b:8f:71:20:51:1c
Fingerprint (sha256): 6e:fc:03:ee:54:33:f1:ea:72:4d:a0:b2:78:8a:b1:87:20:6a:36:ce:54:62:6c:fb:f8:bb:23:0b:25:37:bc:96
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate git.waybefore.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for git.waybefore.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
git.waybefore.com
unrealvoodoo.org
unrealvoodoo.org
Other certificates including the domain name waybefore.com
(limited to 100 certificates)
git.waybefore.com
unrealvoodoo.org
git.waybefore.com
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
fastlikeafox.com
git.waybefore.com
unrealvoodoo.org
git.waybefore.com
git.waybefore.com
fastlikeafox.com
unrealvoodoo.org
unrealvoodoo.org
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
unrealvoodoo.org
git.waybefore.com
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
fastlikeafox.com
git.waybefore.com
unrealvoodoo.org
git.waybefore.com
git.waybefore.com
fastlikeafox.com
unrealvoodoo.org
unrealvoodoo.org
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
fastlikeafox.com
git.waybefore.com
git.waybefore.com
git.waybefore.com
Certificate
The complete raw certificate details for git.waybefore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISA8Q0F9cwoVkFiOhnd8H4hhppMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAxMTYwMTMwMDBaFw0x NzA0MTYwMTMwMDBaMBwxGjAYBgNVBAMTEWdpdC53YXliZWZvcmUuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3MyFH8f6pXy2E1sGPwftYkp1bU8U 8vn8PMelsR5zZohEq2/Vk4pEsreqPwRN/0jjF2Fq+t3uVy0elyjdNlMokYGe6cCn V0LJNq3z6jSOlweUCrQXhJqXcFS2oomg3wGqYmo8AvaoFUAMhoRkOmA9WJb4c9XK 68kxMcVRIHXGPNkKt52qZ7r+WEO3HA4Vc/rLd4tLAYkdmwxNPGidM+4RvoL0WC/p 4NgApBaNGwqm+N+amdSNYbFXaNznsGWBPa/wzNBR7ljpc+BZWjZ0W3ocNJfgxryT 1wdLTK8/B3UM9zJjUBU/weoe3Z4RKCzzhXseuPFh6p8Bldg3WeTIxUZE/BfGMtEH pbQLSZC5ogqbHVwqSC86Qwj56iEAIkCSAseYx/+GYaqt7ec0M5IwW8DuaJf+zcUy Ul1EA+Sq7/RWEyxYtR+yiBEL8FsjxPgVP6fU6iawkQ/YkbQK+QZ0ATM8haGWrQog 9m9qmfb9xZhwuUqqwA9uA24+5zrG9ldHg9MNYNYKi0jGoiRT20pIhN0OEDi+AY1M 8S8AocTrITGN31uPe2aB4EVj0lo1Md/slbzG48KEgEfPtJPK3ZetFDEQFthUvpR1 HLTwjJUqGTtzfuC52N7UZ0K9JFtVo48Un3SmDZXvipNbk+muXsdvXJvyjBfZwZEq mRdIisBMsdmZf8MCAwEAAaOCAiQwggIgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU Qhk8RNgN1K14AJQULNgGtPMYlZswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLgYDVR0RBCcwJYIRZ2l0LndheWJlZm9y ZS5jb22CEHVucmVhbHZvb2Rvby5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG 9w0BAQsFAAOCAQEAM/Tt1hZGXdUOMbvttR1a7aU5M+NPkuH9icF3zqYoupWxMx2P 84OIfm7J82k808fQgBGRG3+t6bDza/2s0lg+2Dss2/yG1OzqazEC53DYucYZvnjh tJSyTIuZy3Kt4/kmTWQAma2xFLwq08+VPeUhBE11U8veZPDpRbOEhO+0yqEl240q OT/pUK3msB7bPHchUt7dT24HD0AOpJ/3xe1TXGJ1bG//W5uMP6PoBUVWISfUmpTd Brd6EmdOGyDcUk3UrzMLL7OsZkm8uWJo/upXaiulj3FGYE8A6y8Subqs8/GZss+T /N4T5jXsOhbQeAlxjH1J7K7wMbg0+Jq3djZhmQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3MyFH8f6pXy2E1sGPwft Ykp1bU8U8vn8PMelsR5zZohEq2/Vk4pEsreqPwRN/0jjF2Fq+t3uVy0elyjdNlMo kYGe6cCnV0LJNq3z6jSOlweUCrQXhJqXcFS2oomg3wGqYmo8AvaoFUAMhoRkOmA9 WJb4c9XK68kxMcVRIHXGPNkKt52qZ7r+WEO3HA4Vc/rLd4tLAYkdmwxNPGidM+4R voL0WC/p4NgApBaNGwqm+N+amdSNYbFXaNznsGWBPa/wzNBR7ljpc+BZWjZ0W3oc NJfgxryT1wdLTK8/B3UM9zJjUBU/weoe3Z4RKCzzhXseuPFh6p8Bldg3WeTIxUZE /BfGMtEHpbQLSZC5ogqbHVwqSC86Qwj56iEAIkCSAseYx/+GYaqt7ec0M5IwW8Du aJf+zcUyUl1EA+Sq7/RWEyxYtR+yiBEL8FsjxPgVP6fU6iawkQ/YkbQK+QZ0ATM8 haGWrQog9m9qmfb9xZhwuUqqwA9uA24+5zrG9ldHg9MNYNYKi0jGoiRT20pIhN0O EDi+AY1M8S8AocTrITGN31uPe2aB4EVj0lo1Md/slbzG48KEgEfPtJPK3ZetFDEQ FthUvpR1HLTwjJUqGTtzfuC52N7UZ0K9JFtVo48Un3SmDZXvipNbk+muXsdvXJvy jBfZwZEqmRdIisBMsdmZf8MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328101445354964191998029923437772188031593 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 01:30:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-16 01:30:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.waybefore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900780948366184412841457483721521280362749051976062328864324181585815513862825304621322118706577254612126943324455922126433794810844204520551748654049005994756462361771005979506954039027545601876271926832945560104502970391423207757664175362484140411515516017525425390520336378716599305197801771544247627927533091486835989415989138825756686672205477359811004839122842148372598639251498224813033129215574177663218171780296997893764427198308898767978024062965521613575434526675022838718677597937324915954974159525361943064274301781545814579789741175795476793094933393520666146255950436323393269853939100569897748567508090834591263345692261206382514843415274577564429651608429078448178858645176660179607779110644450590766902342231315634252532912740127658746962999280696559802966762520263876475588706849962565521363688997424496900724486771469479892827181127546931154761523624028095209312035811145950662207756959653051947797074353631962123616241768020556525430155197972715607130050992643531895206067216380453447776945290681193554186135791923280146326621674292607056955739343338279918447623397661415907414905268674240623392453864052513481414030863891003981661779081074722829721520930895182052125286371628633323670387437628338154302338596803 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42193c44d80dd4ad780094142cd806b4f318959b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.waybefore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unrealvoodoo.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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