edg.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7d:ee:fc:6f:e2:2f:b8:70:3a:7b:a8:06:6d:cf:0d:0e:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edg.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:ee:fc:6f:e2:2f:b8:70:3a:7b:a8:06:6d:cf:0d:0e:fc
Serial Number (int): 391302106583231254775086356985414262001404
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:82:5f:a3:90:e8:8c:56:c7:29:a2:ac:05:31:d2:be:48:40:38:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:76:5c:49:39:22:5d:13:72:c5:43:13:d5:22:82:c7:c7:6b:11:95
Fingerprint (sha256): a2:c8:d8:bc:02:c8:4a:d4:db:6b:eb:ac:0a:88:64:6f:81:8b:35:c3:bf:08:48:53:92:a6:1e:21:4c:55:e5:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate edg.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edg.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edg.io

Other certificates including the domain name edg.io

(limited to 100 certificates)
read.edg.io
edg.io
rum.edgio.net
*.epdns.edg.io
investors.edg.io
leapfrog-ssl-37.gcs-web.com
it.edg.io
meet.edg.io
edg.io
dev.edg.io
it.edg.io
dev.edg.io
dev.edg.io
meet.edg.io
api.staging.loris.edg.io
edg.io
dev.edg.io
edg.io
edg.io
edg.io
dev.edg.io
dev.edg.io
staging.audit.edg.io
dev.edg.io
edg.io
api.qa.hermes.edg.io
edg.io
edg.io
dev.edg.io
meet.edg.io
edg.io
edg.io
api.stage.loris.edg.io
leapfrog-ssl-37.gcs-web.com
meet.edg.io
edg.io
edg.io
rum.edgio.net
dev.edg.io
dev.edg.io
status.edg.io
dev.edg.io
lessonlystorage.edg.io
leapfrog-ssl-37.gcs-web.com
dev.edg.io
meet.edg.io
dev.edg.io
ui.fix-issue-wrong-zone-and-missing-permissions.epdns.edg.io
edg.io
dev.edg.io
edg.io
dev.edg.io
stage.edg.io
edg.io
meet.edg.io
docs.edg.io
audit.edg.io
it.edg.io
edg.io
edg.io
distro.stage.hermes.edg.io
dev.edg.io
stage.loris.edg.io
dev.edg.io
investors.edg.io
ui.epdns.edg.io
lessonlystorage.edg.io
dev.edg.io
leapfrog-ssl-37.gcs-web.com
edg.io
status.edg.io
rum.edgio.net
edg.io
docs.edg.io
ui.epdns.edg.io
edg.io
dev.edg.io
leapfrog-ssl-37.gcs-web.com
read.edg.io
edg.io
edg.io
edg.io
dev.edg.io
edg.io
meet.edg.io
dev.edg.io
*.epdns.edg.io
producer.prod.hermes.edg.io
edg.io
dev.edg.io
docs.edg.io
docs.edg.io
edg.io
staging.loris.edg.io
api.prod.hermes.edg.io
dev.edg.io
meet.edg.io
prod.loris.edg.io
dev.edg.io
meet.edg.io

Certificate

The complete raw certificate details for edg.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391302106583231254775086356985414262001404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 07:52:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 07:52:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edg.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720282888759549026513778563960158795027940131317806928785469581876853335813843583324674537075868902234444460752271417164452870789063550961840616622237870302963431484627395632327239795655702005225056632715944817371231640599335452313039784911269646066966543627719506737470973046124966030736945834482742032291594431517772957639845526870320458219571515997033685116666996205047440900461308676742191200772829834309555628127832384282665189376713878270877230653181707045891797168085225815352126673007491722100720258679897497119514869481606493968974679514825657720046262295387988130915326339899659193078450574061701718105837327469325016149057001505076804681463164537369522744397155541931944766079953470719055497698482029296051823718123393990061165066932785871136290428102474263694143145252286360322322044879284734141170411822059434533754743793776293791859008607263696220065892584913348321847802525983678910637415127697773755648820421604518947402595259269352077941870421425261015012726607804239321815233800329396800072345861824439051095564122823577979884868456104184863850518043197055557257105002031190589451851978650698695357615459429994499010168280163631003165719163382513390854596496106161842330690408714193540054292506269183866053767633607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0825fa390e88c56c729a2ac0531d2be4840389d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edg.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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