gpex.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:4e:97:57:5a:0c:70:da:a9:43:09:68:6b:de:51:2c:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gpex.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:4e:97:57:5a:0c:70:da:a9:43:09:68:6b:de:51:2c:ba
Serial Number (int): 302615489784915176612385424829539004001466
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:65:8c:67:fc:01:3f:fb:fa:9f:0e:60:16:a8:09:78:48:55:60:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:0b:a6:1e:2f:36:87:0d:1c:85:2a:ee:31:d0:e1:a4:42:f0:f9:ca
Fingerprint (sha256): a3:e0:6e:f7:68:a0:79:ff:6f:34:0a:66:9f:99:6f:9d:f1:52:37:bd:0a:1b:56:18:b2:29:cf:d6:d3:13:be:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gpex.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gpex.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gpex.org

Other certificates including the domain name gpex.org

(limited to 100 certificates)
www.gpex.org
gpex.org
gpex.org
gpex.org
www.gpex.org
www.gpex.org
nigeriarealestate.mobi
gpex.org
gpex.org
gpex.org
gpex.org
gpex.org
gpex.org
121.software
gpex.org

Certificate

The complete raw certificate details for gpex.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302615489784915176612385424829539004001466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 03:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 03:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gpex.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932876973017221859273466321383431218256606548763233880740979873747015128086027860798480630497455244082459757880804371842751512681331685978097892132671596908294549139167921478722464976613339247360816212066831408604115043198255570059894099431520125232078376579180638161119048664897704847246558168143487813870225250717825695992436869934378730897420686932028753710343942081242758598971631359926031880732418315884895825426966673003111645028917033628699247651283406167964585737802039893655178601162990311160944172151962258397261837741284658111100922919493337223545261929603413003490592839052384730622953302367444099796728159916747803258810001264838524227596055112042617239668406642337408129559098037861900455684351597637276056607021216098915330468732192756550357987523913730047185324141644983169059629348040078200347633198392002702403312152913291012620682585774576663276264623144316424319653265175282513482877482669392342063474684037832023959494182412244837052733602840636801498855906262029214540552811916213804306645980033451355693920698126789689252375093492191105853688356450611428174688004896936517936449883718769207834516545088165703413165870175882318515226525692759522637557388380805175543166355444792952986268503978535309590466580917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac658c67fc013ffbfa9f0e6016a8097848556090
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpex.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001715d433f7f0000040300483046022100ff6a0fe1f12a828eb33168ef93823d63a6c765cdae78e123b19f93c147ebfe91022100f93c27dd71a519538acd802d859c189db6d3e0955368031b70a1027f48f01617007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715d433fee000004030047304502207de2cb5429a14543b4b5bc7be844d23a4b392be19160dbb94c84bcae82ae6152022100968d8dbd2403d685ca5f6ac6bd7c7f963795ada781f30d4fcbadef362c262ac1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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