dev.mars.gichd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:cd:b4:58:ab:76:a0:3e:a3:14:ef:44:cd:c9:fc:16:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.mars.gichd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:cd:b4:58:ab:76:a0:3e:a3:14:ef:44:cd:c9:fc:16:cc
Serial Number (int): 322520829625135942789105474991196332627660
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:02:3b:c3:d5:2e:75:1e:6e:83:fc:68:f6:5a:40:42:d1:3b:c4:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:f3:76:01:ba:f6:e4:fe:c5:09:c2:fb:43:a0:16:fe:cc:80:0f:00
Fingerprint (sha256): a1:a0:60:b9:71:ea:e1:b4:26:99:e8:5a:e9:22:c7:fb:67:67:fa:f1:0e:07:3b:c5:24:b3:36:2a:8e:b0:46:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dev.mars.gichd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.mars.gichd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.mars.gichd.org

Other certificates including the domain name gichd.org

(limited to 100 certificates)
staging.mars.gichd.org
mwiki.gichd.org
owa.gva-centres.ch
owa.gva-centres.ch
owa.gva-centres.ch
amat.gichd.org
*.gichd.org
www.gichd.org
asm.gichd.org
amat.gichd.org
dev.mars.gichd.org
www.gichd.org
www.gichd.org
lsweb01.gva-centres.ch
www.gichd.org
staging.mars.gichd.org
owa.gva-centres.ch
gichd.org
www.gichd.org
staging.mars.gichd.org
amat.gichd.org
training.gichd.org
dev.mars.gichd.org
tableau.gichd.org
staging.mars.gichd.org
staging.mars.gichd.org
www.gichd.org
centralrepository.gichd.org
lsweb01.gva-centres.ch
www.gichd.org
dev.mars.gichd.org
www.gichd.org
training.gichd.org
gichd.org
training.gichd.org
gichd.org
amat.org
gichd.org
amat.gichd.org
owa.gva-centres.ch
staging.mars.gichd.org
lsweb01.gva-centres.ch
*.gichd.org
www.gichd.org
training.gichd.org
training.gichd.org
*.gichd.org
gichd.org
training.gichd.org
gichd.org
www.gichd.org
*.gichd.org
gichd.org
lsweb01.gva-centres.ch
dev.mars.gichd.org
dev.mars.gichd.org
staging.mars.gichd.org
dev.imsma-core.org
sip.gva-centres.ch
training.gichd.org
gichd.org
sip.gva-centres.ch
training.gichd.org
gichd.org
gichd.org
www.gichd.org
training.gichd.org
training.gichd.org
www.gichd.org
staging.mars.gichd.org
training.gichd.org
www.gichd.org
owa.gva-centres.ch
gichd.org
www.gichd.org
dev.mars.gichd.org
sip.gva-centres.ch
training.gichd.org
owa.gva-centres.ch
gichd.org
staging.mars.gichd.org
gichd.org
owa.gva-centres.ch
gichd.org
staging.mars.gichd.org
gichd.org
*.gichd.org
amat.gichd.org
owa.gva-centres.ch
owa.gva-centres.ch
dev.mars.gichd.org
*.gichd.org
lsweb01.gva-centres.ch
gichd.org
www.gichd.org
training.gichd.org
owa.gva-centres.ch
training.gichd.org
staging.mars.gichd.org
gichd.org

Certificate

The complete raw certificate details for dev.mars.gichd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322520829625135942789105474991196332627660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-02 18:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-31 18:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.mars.gichd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896323228198288169690120098645033371436558791340927195745042665900421320622338023734786104972370349315305472860950715124325639380997026743329698171124873697038574307265808593889640794451860773956179654918727561459619642049002755728608479531677274290197533143128057116202879711612380756985073010711178644163588965947029528976335529684886137217012132033479451152747200087847275380897332619444848304945354712120736551711824478918254119986566177569934046409221508479836849797617304110208389360924041349108220562120478146459653215399700908991984626117945574283279833852470358451217571473646624314648871738793081402317427359264018483110329452103789246752809798968277250088830611253879653639865456231428040006514238708027891262682121053094231486552544156919000782367621970671407242468462615127622103403278306291145929610703584811978010943312298296122334225265016793296744592417076679437998138588397218606427601079221376480050090539064656921131867185543334380358049606122632072362066082924296235417493694953463683098379753342344428089512370946282901556422872789659395972320314790060353118410356791191880286045326954990715107465762500552388899488244055112796456860763527846714232362021205848154945856197870665493629103758544073727473615821131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99023bc3d52e751e6e83fc68f65a4042d13bc4fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mars.gichd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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