gifistan.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:6d:45:79:f7:90:f1:7c:ac:49:02:d5:e3:e9:51:c9:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gifistan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:6d:45:79:f7:90:f1:7c:ac:49:02:d5:e3:e9:51:c9:77
Serial Number (int): 291426952678132895422065305893164717033847
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:cf:43:3e:26:c2:46:57:53:c8:31:fb:e4:7a:48:5e:c4:a6:f0:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:ac:b0:39:c0:3f:1e:8b:f6:e7:d1:c3:7a:36:cc:a7:dc:54:24:e1
Fingerprint (sha256): bc:46:a4:39:87:13:7f:ef:ec:21:73:0c:80:93:d7:df:90:5b:a7:03:72:25:d6:65:bd:ea:5f:ae:d7:1b:d2:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gifistan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gifistan.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gifistan.com

Other certificates including the domain name gifistan.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gifistan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291426952678132895422065305893164717033847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 08:28:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 08:28:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gifistan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888618510113978856207759215190493636617022803041459882462766319950837795131809805154367780972545615889702141570093101055686739955561845201082215338705075026148851834242605309672007854066007483587013979409506313158816101200400843879576652194411143594048187019304799386284031655256417934972232253987962008618882176967640646069834477085504261222658291031384129339066236836224472914453762769218687204510596370528792103715487898574487230553865745470307631537417925049427061806327895891255448898260580140905825882827476416774528072038072876885003123004201065622535298408139762768546857664540552101241452788144094350518236491926214790419781629648908098313193084109802592195235670394266134787748226612177267505902769289645667575547006364903320029542204006183460753126409312889312038899571762897530992360931779569189141214250979163140007845756934638422962861368766470643562189233415073559488971692852189976516479083939723361972926390522835767723746327953938699475568487034567616735437833451157578176771362918232681619367744259231814728959929277074890201316419068780952484525814082045101441093237094202085036455853006545382800567005415174127498894853904194093529310535122623466891874616813997393537924351538828726500308890726237997912085030849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58cf433e26c2465753c831fbe47a485ec4a6f042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifistan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170fc6c8a9a0000040300473045022100ce317aa43b826f0e37af7fa4a3d9afd08d7ec657cea60e350a90ee5614b55b4e02201fcfaf5e5cc82dbbe8183dcf0ccfa106aa46e3a8a3ce68385358c5cfb1855a7700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170fc6c8acf00000403004830460221009d50a7bb184bf6b6fbc7c1a94da1def23b2f6cd89defa2a47dece41f5de93478022100f8ccbc528e83fbad85df8ef2e0e69cd198852757520bc542700aa09dd2b59df2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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