www.mygifter.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:47:00:0b:54:70:80:1a:fd:83:07:da:bc:ba:1f:17:64 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mygifter.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:47:00:0b:54:70:80:1a:fd:83:07:da:bc:ba:1f:17:64
Serial Number (int): 319279235589337496238051028974694689609572
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:37:61:3a:87:11:b9:94:49:f2:0b:b7:28:1d:6d:ae:16:a3:54:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:b2:b3:81:65:5f:fd:1f:ea:17:e1:c5:66:44:be:bc:be:d8:61:64
Fingerprint (sha256): 8c:80:70:a4:d2:3f:4a:f7:b2:10:fb:81:f0:b4:0b:53:26:aa:8d:a5:3d:01:91:33:7f:59:f0:c6:ad:de:f8:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mygifter.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mygifter.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mygifter.com

Other certificates including the domain name mygifter.com

(limited to 100 certificates)
mygifter.com
www.mygifter.com
mygifter.com
mygifter.com
www.mygifter.com
mygifter.com
mygifter.com
mygifter.com
www.mygifter.com
www.komalacrylic.com
mygifter.com
mygifter.com
www.renardanalytics.com.ar
www.status-global.com
www.mygifter.com
www.ludojack.com
mygifter.com
mineco.humanbrands.us
mygifter.com
lospaysanos.com.br
www.mygifter.com
www.mygifter.com
ahuncash.com
offerwall.mychips.io
mygifter.com
www.mygifter.com
www.mygifter.com
mygifter.com
install.zerobase.io
lucid-mind.eu
medfit-health.ie
app.cyberpolos.net
mygifter.com
mygifter.com
empathyfor.com
mygifter.com
www.mygifter.com
www.mygifter.com
mygifter.com
mygifter.com
mygifter.com
gowinquiz.gocrackit.com
prepaga.ballesta.com.ar
www.mygifter.com
www.mygifter.com
www.yaia.hydrocode.de
www.mygifter.com

Certificate

The complete raw certificate details for www.mygifter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsF8zcGACuewCC/XgSZcG
LvShSFVOQugAG7yze0Lf9vu2mmJFBa51iGc70EHDb6zPU6WKuhDy12+FOgTQ/+W8
yf9UY8GJt9GgT3JScg/dn3aPvGxt4Hv/qwcpCdT4m+iKhlz0vNySIHS6TGwSxwM6
eDmNY8dc4s+AuXFcwLWh31A0QkD/BZqW2ylf6jmfxXBhkE9mjdmJ80AhEVSeENuD
I29TvFGJbM7M+bD6flhRkCqdI6bhB3OJ8uBXIocvl9v/MZFZYdTLpSWv9gnCBH/i
DLUeuotPNJbb2SGEYYhIgMdtxqT+2aCpNWetscAGohL3MboVINDvNgNf0zhlL0vx
iwMKmsYJQsAZJfDETlokkPJCs/RO6wHGHtAOTPKT5qqFomCI6fC3ECvh40i+0DVM
tby+48dmbeZ7Q4AqYa6Pf8zqfwmIGe3K5OdHP6J5YxzPgqwx8aIKn//XxycQWHH8
8z3LH2udBay87/qsJUlQvkWEa5MkPN2a8xiok8mRWhIL1kVhHwuNjY7PZpEjkIUr
6YSN5am9IKh/tLbgsOffKQ6IOr9KwUOjX4ameQ+J/DSNEOsAX5V5UxJD6/bkCYhl
mJrhXaA8CRZYpRa8ep23G8Mx7+ewBCbWgaF1rQ3p5JCYKBCp0YXXFnMvabjhdUc3
XEgdWDcubEa+sISVmp58iCMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319279235589337496238051028974694689609572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 09:17:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 09:17:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mygifter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719534488485011316872889839490177675318054219704036771164886956512225634740114208485380310423579130245857536141897192132844865829363357536733741663190903494149063336302408622094338619705741501714372861030228852148276615846335587995157851067529619606112785577468987988334676182172812159437845025073711610993675669048835406882893539820050448272532420240652809553118117712074422049068531600228631634763617705600728517636003675176827463659275868528529938016833166764725394432073857756077226785843126114234620754907220589512143843757849437094030466293121521332050617401844311843137798729509395834563236537154827674654792736180200860501715804936466730912633100347000995441167475337042280276319058952107457250660361398543147543335295268064706736628739076590198192034574688140955502269265374709227223095071694412316251618820637909519540056079716244665974731059355513313508280101535406758099160223196969364911713669324272914770207241953580866244069078492073831488624634704045603332146273902076138025297418799244973230027876250460867322801701376555000217965435823304034416916341388324946699335023268931966504717156055694186693168299581468351452635501815645662706924341209428055934056609944072689383187733402388102024743941104464058545184999459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5837613a8711b99449f20bb7281d6dae16a35450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygifter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2ff3effa0000040300473045022055a8d7f68e9a392de393553005f7f85f87fb6fed445bec7f8282b2e33118a53702210098caa30ccc4be7cc604cf4630ec882df3bf8fffb33cb62a97eb8f528d76c587100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a2ff3f1f4000004030046304402202ed911ab38c398f3be0124076bf7114262284152529c0ca1142e77cc7578d77f02203f772d47c65805c1c69177387209e075b00ea5b2d1c5d1c40a7e570c7f3250f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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