auth.tunego.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8f:61:75:b7:d0:f9:85:ef:9a:4a:4c:28:07:74:41:ee:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.tunego.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:61:75:b7:d0:f9:85:ef:9a:4a:4c:28:07:74:41:ee:a7
Serial Number (int): 397239068539296411233556309386654042418855
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:b3:e5:d0:3b:59:e1:be:f7:f0:e0:a9:cf:ac:02:4e:f8:3a:6f:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:fd:51:fc:66:0c:1c:10:67:e9:1d:4e:be:e8:7b:10:bc:ed:f5:2b
Fingerprint (sha256): 8c:c7:3e:99:89:9f:0c:42:7a:0a:24:11:f7:77:16:04:bc:e6:0c:e5:8e:c2:09:5d:3a:b6:e2:b9:a8:01:fa:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.tunego.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.tunego.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tunego.com

Other certificates including the domain name tunego.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for auth.tunego.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISBI9hdbfQ+YXvmkpMKAd0Qe6nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDIxNjMwMzJaFw0x
OTA3MDExNjMwMzJaMBoxGDAWBgNVBAMTD2F1dGgudHVuZWdvLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKpNq+8PYzcuVJkSAEDZdpdvrbDLsxdy
AKn4VJ2mxizgq4PyiqkOHdNLgxdrpniVJBZVn+gVOGQ4KKkpIFt8qpMfpVo+VSSo
00FHgH/O9GDqrBD3E7GaF0hAWA2Fn2AlxT2XUOEo4GVE/Z7CBSzplho9cw29cL58
uqkv+vIiAC2/b9zs80DIMA8o1tZA1FA6UX11HwJSZcTxiJvPdL9K50K3gBH8YpAt
bvVta4heVPBKet2j6ghY/3zPUJCfJBhF0ZI4BUF1TmLGX5RcM95xHEAS+AYXVk9C
LsXDvMaJd83/oWrUpHZqQ3QYk9X2Tt1qKvEfPedcYw3CXsRbQc0w6tPLhUm3Rs/q
EL7QF02U0tk4vvP9gYARmjmLNWeuBopj31pFYr1lhAcoD6mDPHhK2s2CNZ8VjCXu
7M3oYKuAyGIZD8f8r5m3mVSkS3gxjnRDdcce4kl2J0NRE0ivxxgL4aBtT1cvvlPj
ZcAMRWRmcl4XfXYhY2Bw1KblGIFoGbWQKBdWJL5brZYrwS1u2ddeQO3oSa9OjcN9
jmXbmvxb5v5gQEVaPNIJAF7kUznJ5qQT0OyS1KPppJuJE/5K0K0W9qs5AMw625TT
72Vs0Fy7gADwUoljf4lSND5IvGOpmn11m573/fOD001si6t+y1SjoaqwDbLX3/UI
J3egaQVIyJjZAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDOz
5dA7WeG+9/Dgqc+sAk74Om+BMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPYXV0aC50dW5lZ28uY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFp3xo+
pwAABAMARzBFAiEAw3MHUser10iWJgoVXZqj9WcDp+lateYVoU5enSRnEXUCICMz
fbYU9kcNly5S+51jONSc0jtA/4IxZr+qntUoq+RfAHcAKTxRllTIOWW6qlD8WAfU
t2+/WHopctykwwz05UVH9HgAAAFp3xpAmgAABAMASDBGAiEA4g4o9+zkufQWo6J/
QEzUXskqYzG4Oz9EHYlCTgHqyBYCIQD+ZUl0u6O1kXyqVcrNgAT9MYaiN7+X1Pgv
pjiOk3kCozANBgkqhkiG9w0BAQsFAAOCAQEAUVsvLTNhzJs/eDbhTv6WdQ7YACHa
hZJ3QAT8WlCuCBVq3NBbjTsg4PvPp8J+foIxXWFx7hhiUR8DiDTxopt8KvylHxy7
VUTgfcO/aRI995PZu23JuQGLq/VSWJNRg2fd8SocNEO6Axg4TqGEevcxnIF6rLH8
J9Qbv6U7PnbsRevw3c0GTanFJlXK7Y/cOSPn4hS071HpzXoFpAkD9s90v+ZARZxJ
Z1ov4Ml5C8jGqVq/s5PVSt2rfpa2Nh0mdYzriNbKJbCKQ+zoIxjbB1Ron8OcIkdy
BpvK04rIYyp6Bo9XxecDMC3+2qlPvMAJsH0gxqul1JqdWfM4PvdjjXg3mg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397239068539296411233556309386654042418855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 16:30:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 16:30:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.tunego.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694777274960219232951902057595808975294055290742583306225863602806555690070576845268479099407427154912739172191005946784049189268403130214953689466311196579346744277857860090764015395785683778045298333200844017127588067663118835504330832407774535738432911434825582157741357155368637992986681291269827887999681125590789176896527458301577764670176458321541426404376467264230533408039242954490901446217819915133763851556124897295520110244386460845575209581543341089705241911851594629631512077792667732545815222015528431200223962509945586299364868116081663194291879593956635724009433716499920884915084920919247168731949964748533661541809901846258523526518180531674456136436671192800045830981011926477869020345240980806466296812896770609280925806860712417398462345061669809442875985696876392434749765692882024054683890330249565563724923508060676324916123212273814501020763378665112456738821143554617984861728624724093856949646560855655804208775680445273602080820296475198609650605116888972089717040801684426149997682775753210941199591331091995841515292500958950422797044100782284211057096641136260165754672233159251071205648238373244266518258236103142441584933883337794699060152035798867910122057653593232851176983031759407894360826091737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33b3e5d03b59e1bef7f0e0a9cfac024ef83a6f81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tunego.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169df1a3ea70000040300473045022100c3730752c7abd74896260a155d9aa3f56703a7e95ab5e615a14e5e9d24671175022023337db614f6470d972e52fb9d6338d49cd23b40ff823166bfaa9ed528abe45f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169df1a409a0000040300483046022100e20e28f7ece4b9f416a3a27f404cd45ec92a6331b83b3f441d89424e01eac816022100fe654974bba3b5917caa55cacd8004fd3186a237bf97d4f82fa6388e937902a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00515b2f2d3361cc9b3f7836e14efe96750ed80021da8592774004fc5a50ae08156adcd05b8d3b20e0fbcfa7c27e7e82315d6171ee1862511f038834f1a29b7c2afca51f1cbb5544e07dc3bf69123df793d9bb6dc9b9018babf5525893518367ddf12a1c3443ba0318384ea1847af7319c817aacb1fc27d41bbfa53b3e76ec45ebf0ddcd064da9c52655caed8fdc3923e7e214b4ef51e9cd7a05a40903f6cf74bfe640459c49675a2fe0c9790bc8c6a95abfb393d54addab7e96b6361d26758ceb88d6ca25b08a43ece82318db0754689fc39c224772069bcad38ac8632a7a068f57c5e703302dfedaa94fbcc009b07d20c6aba5d49a9d59f3383ef7638d78379a