chic.givengine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:78:e0:ab:c9:1f:63:60:68:63:76:b7:98:8a:a0:df:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chic.givengine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:78:e0:ab:c9:1f:63:60:68:63:76:b7:98:8a:a0:df:55
Serial Number (int): 332616546399973997573890427892824526610261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:49:0b:6d:bf:ca:82:84:23:c1:01:6e:28:98:9a:e8:9e:5b:e0:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:29:8d:7c:ac:82:c9:75:85:62:bb:03:40:91:9e:68:ea:1e:32:38
Fingerprint (sha256): 7d:58:9e:e1:15:38:c1:14:41:77:f5:e4:e6:3a:73:c8:cb:50:27:80:d8:b2:ff:43:a8:a3:13:ef:23:2b:e4:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chic.givengine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chic.givengine.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chic.givengine.org

Other certificates including the domain name givengine.org

(limited to 100 certificates)
chiapet.givengine.org
chiapet.givengine.org
give.genomegitar.org
give.genemo.org
give.genemo.org
encode.givengine.org
beta.givengine.org
encode.givengine.org
beta.encode.genemo.org
encode.givengine.org
demo.give.genemo.org
beta.4dnucleome.org
4dnucleome.org
beta.4dnucleome.org
singlecell.genemo.org
chiapet.givengine.org
4dnucleome.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
mcf7.give.genemo.org
chiapet.givengine.org
beta.4dnucleome.org
chiapet.givengine.org
demo.give.genemo.org
margi.genemo.org
encode.givengine.org
chiapet.givengine.org
beta.encode.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.givengine.org
singlecell.genemo.org
demo.give.genemo.org
beta.4dnucleome.org
give.genemo.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
chiapet.givengine.org
singlecell.genemo.org
4dnucleome.org
mcf7.give.genemo.org
give.genemo.org
beta.encode.genemo.org
chic.givengine.org
encode.givengine.org
mcf7.give.genemo.org
margi.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.encode.genemo.org
beta.givengine.org
margi.genemo.org
chic.givengine.org
singlecell.genemo.org
demo.give.genemo.org
chic.givengine.org
margi.genemo.org
chiapet.givengine.org
beta.givengine.org
chiapet.givengine.org
demo.give.genemo.org
4dnucleome.org
chiapet.givengine.org
beta.givengine.org
mcf7.give.genemo.org
singlecell.cepbrowser.org
chiapet.givengine.org
beta.encode.genemo.org
beta.give.genemo.org
chic.givengine.org
encode.givengine.org
singlecell.genemo.org
chiapet.givengine.org
demo.give.genemo.org
mcf7.give.genemo.org
demo.give.genemo.org
encode.givengine.org
give.genemo.org
chic.givengine.org
chiapet.givengine.org
singlecell.genemo.org
mcf7.give.genemo.org
margi.genemo.org
give.genemo.org
chiapet.givengine.org
singlecell.genemo.org
give.genemo.org
margi.genemo.org
mcf7.give.genemo.org
give.genomegitar.org
margi.genemo.org
beta.give.genemo.org
chiapet.givengine.org
beta.givengine.org
beta.givengine.org

Certificate

The complete raw certificate details for chic.givengine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve2FG8TtPLKZx8RbDnLz
HipF2lBhY5W4GloSVqwV01ec5wHjsAbBy0JpqAzzObK50DwJGPLXQfWmpqj5vI4R
uMtn/MTbXFuqF4F943Itqmt+Z2CsRYmnlOfBdp4JQuDvzfMoiu+/peQIkYy42ezK
UEaDkQBYj+71FNKjxirE1QGbs7gHxBiDpH1dLR0vjutRjhVh6oen9gON2I63lrlp
LkHoeErs/xEgv2LWDZClMWeQLHCtgjdY+vLrpMQwkgDumDxdpzx0vz5AMzb1Y18i
qVRJHlAS2V6gp3LTa9NSkAn6lB5JUxtjnULcfeWoXpORcIYyHXgJNtd68p1MQhOK
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332616546399973997573890427892824526610261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 03:51:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 03:51:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chic.givengine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23976165093708771083172068504335831164560704261984638489505630324115944311019882412292154921925244083882834991066865741696009192725181174359677084930077139591715707731057260814989125501330128943727157532095871110458511993240967286788463818167554695554247184106492665278084920616604720937903049610569301762328942646475273203913782156670240431938126532260399334425747120750675306039567176494578423761472131319339553968941883817638159848987905162656340562246339321371566006660279869082321798643556603499261245546379366194694847741842995186744776745116613288883527774567698784728421520103246957989596710948930804274924133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb490b6dbfca828423c1016e28989ae89e5be007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chic.givengine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bdf5f579a0000040300473045022014971043b5f01e5c080ce4b1af2b6ccb86ded607065f88cc6210d61ab2a62c9b022100e95f6f66956d5278920614258db482194344104d2dacc48fc27db75ae5c72ddd00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bdf5f57bb00000403004730450221008f697a2a58a1a0e7c6a42195662551cc308750ee74146a6150e99da8ee175ee702207d85342d488fc4596476c46f17a8f16360a8a4cf07622aa099625ef680a63a74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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