build.tigase.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:94:7a:5b:00:2d:74:a2:d7:fa:38:18:cb:ae:e5:ec:ee:b6 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=build.tigase.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:7a:5b:00:2d:74:a2:d7:fa:38:18:cb:ae:e5:ec:ee:b6
Serial Number (int): 398973572349441130025071971476179075788470
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:eb:e0:1c:3b:6f:0b:34:d9:f9:5e:98:72:bb:c1:7d:ae:04:67:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:ba:e5:c6:0d:68:9b:5f:5b:9c:3d:54:7c:c1:90:65:cb:18:25:dd
Fingerprint (sha256): 74:ca:98:c2:09:ef:20:f5:25:1b:9d:26:36:a9:21:fb:2c:39:a4:4a:aa:94:78:24:17:b2:43:1e:92:bd:3f:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate build.tigase.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for build.tigase.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

build.tigase.net
build.tigase.org
maven-repo.tigase.net
maven-repo.tigase.org

Other certificates including the domain name tigase.net

(limited to 100 certificates)
projects.sooite.it
projects.robertastylelee.co.uk
tigase.net
support.dailymenus.com
license.tigase.net
projects.innoneur.com
license.tigase.net
subscriptions.mitustudio.ca
projects.koodalingam.xyz
projects.lifemesh.ai
accounts.phil-taylor.com
tigase.net
mail.hyltondaniel.com
mail.etrackmedia.com
support.dailymenus.com
dev.tigase.net
projects.stratusclear.com
billing.steadyconnections.com
projects.moreresourceful.com
mail.whiteeagleinsurance.com
tc.tigase.net
www.tigase.net
hr.tubesock.net
projects.brookhouseps.com
projects.robertastylelee.co.uk
zohopeople.roundhill.com
people.kvg.com
subscriptions.ezarmskeeper.com
tigase.net
subscriptions.smarthomesentry.com
timesheet.remoteadmin.net
source.tigase.net
checkout.renttocredit.com
support.dailymenus.com
tareas.geneticaweb.es
mail.etrackmedia.com
mail.labspot.com
my.amigoz.pro
docs.tigase.net
accounts.phil-taylor.com
subscriptions.scyllatechnologies.com
license.tigase.net
subscriptions.scyllatechnologies.com
mail.bizdemo.net
project.flexitnet.co
license.tigase.net
build.tigase.net
stats.tigase.net
mail.aidjuris.com
*.tigase.net
facturation.simpi.fr
mail.sawtoothxr.dev
pay.lyfepix.com
subscriptions.scyllatechnologies.com
license.tigase.net
subscriptions.jollywagger.com
projects.robertastylelee.co.uk
subscriptions.smarthomeassurance.com
billing.rizereviews.com
www.tigase.net
projects.alltres.com
support.optimusinfo.com
www.tigase.net
tigase.net
member.nomadinternet.com
subscriptions.abovethebardigital.com
subscriptions.navixy.com
mail.tigase.net
subscription.cabmastersoftware.com
subscriptions.scyllatechnologies.com
assinatura.belezacerta.com
*.tigase.net
subscriptions.agri-companies.live
tigase.org
source.tigase.net
docs.tigase.net
mail.aidjuris.com
projects.sentrymarketing.com
billing.docnowmd.com
projects.tigase.net
accounts.phil-taylor.com
projets.yeddir.fr
cloud.tigase.net
projects.robertastylelee.co.uk
mail.amor-jordan.com
subscriptions.entice-design.com
docs.tigase.net
license.tigase.net
accounts.phil-taylor.com
people.jettbusiness.com
mail.gypsco.com.sa
cloud.tigase.net
subscriptions.artchiv.ist
www.tigase.net
tigase.net
stats.tigase.net
support.dailymenus.com
mail.sve.tiss.edu
support.iij-engineering.co.jp
license.tigase.net

Certificate

The complete raw certificate details for build.tigase.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RVeOfdmrC1KiCxhpc18
uEmKsTkMaoqKWnKPH/+Rn8yque57mW0JNg8P8T6s5iDxcLLkK39Vgj+hQHQvOhro
4ib1qKdUEwqLaubUXLaggaRtDJ4+hcMTOUrBfBiHV2fs/xccy+D7Ef1KR+LPnpZP
L+vwTTvlwW0k5xpqMEYiB88PyNxsGpJzsF7WhO0SwAB20Tfi2cqz+PpUSP432Y2G
LNQeKlzkGnuq56q9bhiK/oBGlk6aRFZgdSD94Yag5JcYkMNRCvVUQCyJe0dODGo6
IlpadHpeaZgTfpo2UscEgzyJVTLzJzorPVE4ULnkOx+W0eubruaCu/oSFKxkM+TQ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398973572349441130025071971476179075788470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 10:16:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 10:16:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'build.tigase.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28414155606383982626557561441288079741397676161616604140478851332323258769305204957690101382105566069294032766619561265443135858163157916646904549231705890318984923996957333801427200856052394158780541989388883461049604759016974787991228015084282050340506384984498949853002121462804272556143264958339623719089595925585496928270453844464548454556809511287762604940695404474111328835886563714883520555623658119141284846767555287716328803075908445466185929057509392581857370999557771214644455728104008231179877711522481495729076105445161087788662876239341779556594895042360128616118865130443178265466222825771251827789937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95ebe01c3b6f0b34d9f95e9872bbc17dae0467a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.tigase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.tigase.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven-repo.tigase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven-repo.tigase.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650ef41eb9000004030047304502205c87e6748636e4585e17cd55c660a9568328d087e922a134f223a4f6a7bd313d022100f25b80bad17d1b0faba28c8227b57fc71be8eda1bcfaf6cd2182085bc738b0890076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001650ef41ef4000004030047304502207caf1910f66096012db4a4f22c3e23b17b36f43000f2952c0ed0808e586b68bb022100870e60e973980e22c3539bf603367ff995facacd847a0c27b713492d40a92a7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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