stg.consil.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:25:bf:b7:20:93:df:d6:3c:24:d0:06:a5:3e:54:57:81 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stg.consil.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:25:bf:b7:20:93:df:d6:3c:24:d0:06:a5:3e:54:57:81
Serial Number (int): 306644589474571601187184554260815261489025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:89:ad:e7:39:da:58:4d:0e:c2:90:1f:01:ae:e6:7b:d5:9a:3b:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:f1:d8:a1:75:4f:41:34:78:85:4b:eb:b9:f0:c5:84:78:09:0e:cf
Fingerprint (sha256): aa:bd:b0:f6:73:c3:bf:d5:4b:db:bf:6b:57:59:3d:d9:b3:db:27:9b:6d:09:e8:07:3f:3f:48:c4:54:34:3a:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stg.consil.info

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg.consil.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg.consil.info
stg.crananidin.com
stg.denamarin.com
stg.denosyl.com
stg.marinplusliver.com
stg.mycequin.com
stg.nmxloyaltypromos.com
stg.panzquin.com
stg.proviable.com
stg.welactin.com
ww4.nutramax.com

Other certificates including the domain name consil.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for stg.consil.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWypKHpP0KZ1/HE96Qb9
CKP1Wn1ZEaR5fLE/QIpZ70JUgK171PTu91gawEVHSJyS5BFfT0sZEPBPq9fdWqKz
nZ37ZbnEfo0s0ZPbl5mkgs8HNRmiCQagGCpEZiqm4UKEvbN7VBlHs388aBNJo25H
ch615mkyAfMQ59Jey7n0Mxq3tXGFQ8TIneFkwixOaA9n6r8uNKnEKPyDuDYM3AUx
CQuV2PWHsn7aLK9PSmq+0GIhwLK8s38RsHl9xcHPaB6p5KsWBXePb3nm8Y33D5Nn
eeD9Gh3F1FMMu/7iHv5+rIoz4v9Jf83gYP8WoxYOCFrtWhA7KjBCI+nEPDHZsf2A
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306644589474571601187184554260815261489025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 17:56:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 17:56:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg.consil.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24922528702971420450609267448247414820228166319254671757822854806438635782312259038149023911607227425197720329424341197046547878503467713572891521017691409932869691836717879860717587560658821566454940466668670075903578765243698096111508540526131051462372907168254933687745584951477652115094330591841894222598023746745435424376516898428224025663988939546928974563973795079576859136935556655434264009111132880451907031278728150391189715711122482761188137270428265379498033975304677388744336420245007933302757517332144649522448725433630438176772276471483430330961061150243413876689727922382260022193747450497042868961419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0989ade739da584d0ec2901f01aee67bd59a3bda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.consil.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.crananidin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.denamarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.denosyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.marinplusliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mycequin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.nmxloyaltypromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.panzquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.proviable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.welactin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww4.nutramax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168f7aac8dd0000040300473045022028944f4bf19fccfbf6fbe8faf50ea820b361e9acf3091a01fcfd65aafce1818d02210085def52e69fe0dff960c6e5f42663b84d9400b330b716832ce74cf70850b1a05007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168f7aac93700000403004830460221009fb6bdc528eb8d9231614515359893c3c8a311d59453aa9f839caf5013cd3a80022100ef94ab5fd0dfa309253f4c6d547d50e0aaa2ffe7c3cfbe182828d37304be61ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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