staging.mars.gichd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:c7:c5:9e:da:52:bb:31:60:35:73:ef:72:e3:b9:c2:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.mars.gichd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:c7:c5:9e:da:52:bb:31:60:35:73:ef:72:e3:b9:c2:b5
Serial Number (int): 289505554358358084441796962017196801376949
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:38:14:e4:d4:37:b6:20:f0:17:b8:38:1c:64:b8:91:44:a6:f2:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:cd:dc:73:c7:e0:75:8f:98:45:2c:73:90:12:ba:d3:7e:89:6d:5c
Fingerprint (sha256): a8:80:56:52:06:24:2f:ec:6b:1d:ee:88:d0:e7:81:32:9a:25:19:51:f9:e7:2e:21:b5:41:f4:1f:e1:8e:f8:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate staging.mars.gichd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.mars.gichd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.mars.gichd.org

Other certificates including the domain name gichd.org

(limited to 100 certificates)
staging.mars.gichd.org
mwiki.gichd.org
owa.gva-centres.ch
owa.gva-centres.ch
owa.gva-centres.ch
amat.gichd.org
*.gichd.org
www.gichd.org
asm.gichd.org
amat.gichd.org
dev.mars.gichd.org
www.gichd.org
www.gichd.org
lsweb01.gva-centres.ch
www.gichd.org
staging.mars.gichd.org
owa.gva-centres.ch
gichd.org
www.gichd.org
staging.mars.gichd.org
amat.gichd.org
training.gichd.org
dev.mars.gichd.org
tableau.gichd.org
staging.mars.gichd.org
staging.mars.gichd.org
www.gichd.org
centralrepository.gichd.org
lsweb01.gva-centres.ch
www.gichd.org
dev.mars.gichd.org
www.gichd.org
training.gichd.org
gichd.org
training.gichd.org
gichd.org
amat.org
gichd.org
amat.gichd.org
owa.gva-centres.ch
staging.mars.gichd.org
lsweb01.gva-centres.ch
*.gichd.org
www.gichd.org
training.gichd.org
training.gichd.org
*.gichd.org
gichd.org
training.gichd.org
gichd.org
www.gichd.org
*.gichd.org
gichd.org
lsweb01.gva-centres.ch
dev.mars.gichd.org
dev.mars.gichd.org
staging.mars.gichd.org
dev.imsma-core.org
sip.gva-centres.ch
training.gichd.org
gichd.org
sip.gva-centres.ch
training.gichd.org
gichd.org
gichd.org
www.gichd.org
training.gichd.org
training.gichd.org
www.gichd.org
staging.mars.gichd.org
training.gichd.org
www.gichd.org
owa.gva-centres.ch
gichd.org
www.gichd.org
dev.mars.gichd.org
sip.gva-centres.ch
training.gichd.org
owa.gva-centres.ch
gichd.org
staging.mars.gichd.org
gichd.org
owa.gva-centres.ch
gichd.org
staging.mars.gichd.org
gichd.org
*.gichd.org
amat.gichd.org
owa.gva-centres.ch
owa.gva-centres.ch
dev.mars.gichd.org
*.gichd.org
lsweb01.gva-centres.ch
gichd.org
www.gichd.org
training.gichd.org
owa.gva-centres.ch
training.gichd.org
staging.mars.gichd.org
gichd.org

Certificate

The complete raw certificate details for staging.mars.gichd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289505554358358084441796962017196801376949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-11 19:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-11 19:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.mars.gichd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814002153943029166346677547462115421253580239090384439373411066350199229554308983344867772852866510948777363960793389746334857981556239263482673632433581396973180313959855747874782403981989095663408749705723631595254967456164797614624928984031030007478010012888040409712534572537833249969837676307016916005498040978660904519247694948764426219982090543144112781534821005895807800259682856803614278844408721593830192551710805449186194476344489388789266627538221827384365159558579230176509659576033847158253298074754113186471730527524095095559466741646559927596077799668339665832952474933586692741333843094739950323696292929814805268818257556698546023204113157460294558434520092237803698282338115671059256333470003860866124110383660022237454708895773164490777045654492691313326395888961269099974099916087299033907179690836655153774967075882967890046883124711586619157486194113248222456622614378781919319451722674455634872742826435253396940805150375637817764333469664822856195713416324652794678014600713281854935849777022884147539015884470823672704847830923978295708030309647085572809917085214855974117664054432901664198580448866381243742717991561446534358637924182227727822113177870167368053281644778871063858301537942521209824866275413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba3814e4d437b620f017b8381c64b89144a6f25c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mars.gichd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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