engimatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:22:0c:f0:d4:6e:60:ad:9a:42:29:89:e0:fa:3e:2e:a2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engimatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:22:0c:f0:d4:6e:60:ad:9a:42:29:89:e0:fa:3e:2e:a2
Serial Number (int): 289965837560667395985604377234083927699106
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:84:a0:07:0f:5c:f6:8c:e7:89:9d:d6:6c:6b:26:58:62:d6:3a:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:0e:0e:bf:88:93:cf:4c:b0:21:f7:f5:0f:46:29:cb:7d:64:71:e3
Fingerprint (sha256): b1:06:65:9d:0e:20:b7:64:62:5d:45:4d:8f:4b:b8:2b:45:3a:35:2d:54:34:8e:2a:05:9a:02:b5:68:65:33:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engimatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engimatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

engimatic.com

Other certificates including the domain name engimatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for engimatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289965837560667395985604377234083927699106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 00:19:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:19:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engimatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863293653185034501805340104947131434207648768400370007406157086279489383302260391772929201452921590176945694694509662729722798324993631385299386258837007859974216706850965893715099969946775831918779155136586275124362771315324396573127851070265693826234588804872791184974955930832611457585131777166508245966367781436172390454247086423187632014278373768905163233306116196070203819122940960873412528263911498461771766935285088344527885032391640742827703243971292502356703146666503653796942030278703864996973978096823029021979701710210328985190249624771318327107891156976961954540757570951426399481734165124375814177101644547081236416897800558297827167804569822995020348515509380821420850457209314232497008720277724109940861060139495642892559754712437276326003273589724117313247094077229089946020492849795448163126008159982212768881582338722662920646813014716763819334537453459964457459859508871515436671776961756105969026340342340920950326997901782587687891229735201760526627424763639124386218462380640524866116621426477794128751649053058958619829080575515688555227625710474010961450187168354031209094820184982254104449720683087867278948282539042597448237342295730927569111972116039628421762037868209620883070757352971291133519831282613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b84a0070f5cf68ce7899dd66c6b265862d63a09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engimatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbd8ce194000004030046304402201a6d06f6f85f6dc76a99f6e2b96deedcf247ca430ee5f3101b5105686ac14ed4022048529f5037b907863fdde1cc301dc70159179f2813cde7d1bcef18518c7999d5007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbd8ce36f0000040300473045022100e32fa1833a820f2fb95e9294b9bbc047dc909c8304f78cbf852f29bb72ca15250220664157b7c406669e8241a0871e41da35e3b418aec01e6af64f2cded021ced181
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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