caligi.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ab:b7:52:f5:08:1b:f8:62:7f:4e:d4:c1:05:10:3b:c8:03 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=caligi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:b7:52:f5:08:1b:f8:62:7f:4e:d4:c1:05:10:3b:c8:03Serial Number (int): 319768822000165091221497834079720318945283
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fc:72:6e:42:2d:9d:16:d3:07:f0:43:8b:09:d8:22:54:37:eb:1f:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 33:41:cb:c5:57:25:c1:8d:6e:22:4b:2d:af:e9:32:81:a3:99:40:c0
Fingerprint (sha256): 7e:d9:04:d5:57:68:e0:07:87:80:74:29:11:ca:7c:94:43:27:96:64:3b:4e:95:8e:d2:f0:30:5e:b3:75:4c:4a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate caligi.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for caligi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
98.caligi.com
caligi.com
foxar.education
foxar.fr
king.caligi.com
www.98.caligi.com
www.caligi.com
www.foxar.education
www.foxar.fr
www.king.caligi.com
x.foxar.fr
caligi.com
foxar.education
foxar.fr
king.caligi.com
www.98.caligi.com
www.caligi.com
www.foxar.education
www.foxar.fr
www.king.caligi.com
x.foxar.fr
Other certificates including the domain name caligi.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for caligi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISA6u3UvUIG/hif07UwQUQO8gDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDcwOTAwMDNaFw0y MDAzMDYwOTAwMDNaMBUxEzARBgNVBAMTCmNhbGlnaS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDPGq6daNDRuwVw3DV7gNgJX6dvDiVEpTtrQr57 xVmD3W4mp3/okV59XFD2bDBzuyEfY7gDTi0W3y0NyS65okcTDZGaM3rEqv43magZ o3crxzodWkqrBHs09J90mqLclH5kp5kDVBerQnggzn68RUad4YX8Xdss1qQ009HN PcWblS4JsFaVZk58mng+BpoWQL24NZ4JZK8Ltjrw7H6y4u0m+BqX09S4cIgK+I+n qyNXLX1DBYswgniFa4/WXedD+9AAc5x+ZOZgSi9v6sY972+wjqH5wVjPFNCUk3Gq T2OFYPwcGCPtO8kWsMEAmPubpcrVoQI0XHHkRYd3r1Cq1pg3AgMBAAGjggMFMIID ATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPxybkItnRbTB/BDiwnYIlQ36x/LMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gbkGA1UdEQSBsTCBroINOTguY2FsaWdpLmNvbYIKY2FsaWdpLmNvbYIPZm94YXIu ZWR1Y2F0aW9ugghmb3hhci5mcoIPa2luZy5jYWxpZ2kuY29tghF3d3cuOTguY2Fs aWdpLmNvbYIOd3d3LmNhbGlnaS5jb22CE3d3dy5mb3hhci5lZHVjYXRpb26CDHd3 dy5mb3hhci5mcoITd3d3LmtpbmcuY2FsaWdpLmNvbYIKeC5mb3hhci5mcjBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbt/NSYUAAAQD AEgwRgIhALvJMPr8HpUbe22VscY4VgGiFnP153DO0MkrBVmkAGjCAiEA0KKePxRP tB7CZpAju2b24KnX7y+gP43rKcopPOz9S8UAdgAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAW7fzUnLAAAEAwBHMEUCIQC0wG+c7amwPbjZGrrAmS8C g94ZiKVCosOOmBK15qF8BgIgQOA5OQUoxCyM5w9OWrWmK/YZy1sDQQ8s0aU+ghhW eBkwDQYJKoZIhvcNAQELBQADggEBAEKeaJhBER2Sa1+w6EM1rCeMYHpK03nYyJed IlwmZFL/ZRLUO2IF61yD/8CzNZQAkXMtROiSJgCSQALUTvQeTq5spBmupMOfQCJM ApeofhKFnlf1/oDm4TQcHWRuEWwTXwLz4c+kZ2V3ooCOK9rHZhDVQs0K9p2QUUep kV9eDnqVxpJ2woy9N2Yn1Usn4w30X4juMuXocyCNWEYzR7Be8mfZkKCR+FPeQdh3 R+9+1BPHYplg9WbqDX4xebtcejd7FyMZRcwJcR1jK/u3pAYN2bOzTYAdQrhN/pO2 N4XNSpyGzFqt5QgpT5chCNSEnW4XppKEzHBa0C53ltPycPWafgI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxqunWjQ0bsFcNw1e4DY CV+nbw4lRKU7a0K+e8VZg91uJqd/6JFefVxQ9mwwc7shH2O4A04tFt8tDckuuaJH Ew2RmjN6xKr+N5moGaN3K8c6HVpKqwR7NPSfdJqi3JR+ZKeZA1QXq0J4IM5+vEVG neGF/F3bLNakNNPRzT3Fm5UuCbBWlWZOfJp4PgaaFkC9uDWeCWSvC7Y68Ox+suLt Jvgal9PUuHCICviPp6sjVy19QwWLMIJ4hWuP1l3nQ/vQAHOcfmTmYEovb+rGPe9v sI6h+cFYzxTQlJNxqk9jhWD8HBgj7TvJFrDBAJj7m6XK1aECNFxx5EWHd69QqtaY NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319768822000165091221497834079720318945283 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 09:00:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 09:00:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caligi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26144486556630205162391356110539526889196144111384875881301044082442414905623194756997854430151705851199473665935811988160022460780760441193456568185596904993609091889232904956767114040173051468625597773213240517288854155473172462854141492632964707320767308474426404369122517019576340110456046298889625415940193398564125037871267528723597419674389029897453315899891786190117707200646037671016492892034709432813529664515698916734960814913334541087395191423922598293940695908271789896044245583809459200734597366379565663154179470107268719920397697610047681680889145259570855855029507948604503266860163945347698304391223 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fc726e422d9d16d307f0438b09d8225437eb1fcb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '98.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxar.education' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxar.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.98.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxar.education' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxar.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.king.caligi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.foxar.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016edfcd49850000040300483046022100bbc930fafc1e951b7b6d95b1c6385601a21673f5e770ced0c92b0559a40068c2022100d0a29e3f144fb41ec2669023bb66f6e0a9d7ef2fa03f8deb29ca293cecfd4bc500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016edfcd49cb0000040300473045022100b4c06f9ceda9b03db8d91abac0992f0283de1988a542a2c38e9812b5e6a17c06022040e039390528c42c8ce70f4e5ab5a62bf619cb5b03410f2cd1a53e8218567819 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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