gitlab.apertoso.be

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:ef:25:da:52:f4:93:88:7a:e1:3c:fd:40:f2:8d:e0:22:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.apertoso.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ef:25:da:52:f4:93:88:7a:e1:3c:fd:40:f2:8d:e0:22:88
Serial Number (int): 168490086664958660337647192706228294787720
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 12:e1:b5:3d:b8:74:d7:db:36:b3:66:73:66:4a:2d:70:8a:ca:a8:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:a4:ca:22:eb:e0:a7:47:56:63:84:68:c5:0e:99:fc:3a:35:b2:ba
Fingerprint (sha256): 9c:95:52:cb:0a:61:80:59:be:81:ee:ca:11:4f:a8:6e:c0:50:5c:f4:63:2b:b7:95:9b:3e:e1:a2:73:53:ae:af

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate gitlab.apertoso.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.apertoso.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.apertoso.be

Other certificates including the domain name apertoso.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for gitlab.apertoso.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168490086664958660337647192706228294787720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-29 22:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-29 22:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.apertoso.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658779353639746771898360762711110873202946023591065750749087618770802086859583193505535062265266643605273491122038115501518242060019301961580872899335264304008300591748254281187148873894905456555949151171025882984508516553514749002075369211275491112538680979493379016294655732592856615518459157957395776485739219277047685489737340281858394589464452651401795813904412771186110392272562079814692519700572091075123046178618579795783173009658895655822439633553280893621422702507067465751421669795201324993424004119538885003912535301693614722132802031661914614430751724535677485376783888570787551322937257583177095170622610039657448873948822548384555643243731918240905706451867104734256092083076194411390393910121875956321845873183504047298993661925891904988567939082269816909177863586842917428767117296665760498647853275343774178708687552756598804347546181171935918953818718838759476747899782078751840736470336804261928588669562569213910881878974665221311553773588637821554395054883999548844700757171212630377102043253240030509718383306324250330258770082338022535253162650302755140199450007875703389064390278169308781508206276603117962882315222352753188148496415225300715656188652790065820870870625580233202236391254014594482319294085963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12e1b53db874d7db36b36673664a2d708acaa8f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.apertoso.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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