git.ideolys.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:fd:aa:0e:bd:33:69:25:30:b8:c0:74:6d:e5:61:5b:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.ideolys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:fd:aa:0e:bd:33:69:25:30:b8:c0:74:6d:e5:61:5b:1b
Serial Number (int): 345383497730174904603060975531678280801051
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:05:d8:32:d9:8c:35:46:24:2e:ca:5f:5c:2d:77:f6:f1:33:a9:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:01:07:35:db:96:69:51:19:33:33:ca:39:9b:e4:2a:0c:da:6e:e6
Fingerprint (sha256): 8f:6f:0d:3f:30:b4:cf:a1:6d:d7:57:d4:44:b8:f9:8f:28:d9:60:83:6d:fb:9b:4b:db:68:c8:a6:51:30:a0:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate git.ideolys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.ideolys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.ideolys.com

Other certificates including the domain name ideolys.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for git.ideolys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345383497730174904603060975531678280801051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-30 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.ideolys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877568227871800775948013226069562834066730815816487665825655286048229480532400861718363030977400726434760055655764619437404191015951916175893773777004084076902563017117954935832567295911591857777513624955767344661768544691045147017414581073743407413976647498198314956780577306071242827627434090157126987350719498586781990026426040203527199731341339617631382337921036931509988760459228085024261856768024208623537866218967916189347950773115208464592955340025128690088611882110083998142702653482646375056459886729880966901100239282980770343347983919671185649563481648702211548970928836076805371503574189879285991907571638411565986472508891603757994334140874835047684642181483025890960488424954559571715653062723544277578467155620519389126276664521113983569494668068842966894882727918713757724918625375698006166865290585588405192451196508548035167274294173499957303174560906298229354424448605072290564849012367603096666322993362524943911095821309870688083544381362021532345184796498110929348990524345145797305954484910942538590746320226908898668923401882062465193918974537864110624449325958120950790311514528052757575437367467887357124316852015956405365339812385747342226170770181615331515766611926067426671230339146668286595195495241451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f005d832d98c3546242eca5f5c2d77f6f133a96c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.ideolys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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