engimatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:04:c9:79:d8:5f:c5:17:ed:68:b1:35:d9:af:2f:b7:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engimatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:04:c9:79:d8:5f:c5:17:ed:68:b1:35:d9:af:2f:b7:3c
Serial Number (int): 299454845925392037503861165800789380151100
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:73:b7:99:da:16:6f:03:78:58:b7:71:7e:17:0a:7d:9c:32:93:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:96:f6:a9:e1:01:12:e0:0e:13:13:73:44:71:1b:25:02:b2:e2:43
Fingerprint (sha256): bf:8c:d2:9b:ff:de:a8:b7:d5:60:6e:18:91:68:fb:28:46:d5:8d:52:66:ec:bf:7e:cb:a3:36:39:24:4b:61:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engimatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engimatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

engimatic.com

Other certificates including the domain name engimatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for engimatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISA3AEyXnYX8UX7WixNdmvL7c8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTcxODAwNDlaFw0y
MDA1MTcxODAwNDlaMBgxFjAUBgNVBAMTDWVuZ2ltYXRpYy5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDNyxs6fTVkESl7YX2IKBMw7QdBDQZn7iSO
wIyhECWyWFjmjbV3PIffYY061haX29iVINt64Alg5+3oL6VZpqT0jPxkx2Uq+KGY
7YfisSdAnM3Xz5RugYmTunwnzsspvrqeA9PmjFNKh0PF/W/4yth5pu6z+thqKa2q
I5jKR4//frukhbpw7WHzUE/aCbVSpZj5qT2nV14t1mJ5zHoDGnU+i/AD1i6YKFnY
uLJC23NvapAO288IjsRGFoBg3uSMUfchHGd/EzNLMntFlIAMdgrKqjZsTsbqzlyU
s9AcztojxgIQlGD5yx0cf8wNDIyYlQ4b8R184ksT6jaessaK73j1UQfApKxlpYLX
XAsi3g3MxtvxDha8dKEVGkQITj8sTb2jcW/1WObqikj10zZ1oBLN9SIn8kWnIcUm
dp6qXMRfHh8s2K6DETMI3dtVcIxXHdqg12asV61H1wfg6d+Wf4dG2rtEGskiGUfU
HIe2PsS7ujbEO0vi63E8PG4xfMVIXvlYt6qrUHAvgfC3+tOTHlpMFPh8PPzZ6Vco
RBItVGBQRHVswvbqg2UyUTyL2WRFPcKKQ5SZJXDjecVcoWsnBvEZKYfpgKHBGXLs
F3lC6eCzT4Nh5Xq6xa6AMmNRub5N7/fTHMTfz4QGDVCPXc0eHJb7zb4Ji4rfAcOj
gEkbwrY66QIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQkc7eZ
2hZvA3hYt3F+Fwp9nDKT1DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWVuZ2ltYXRpYy5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBUhj+KAAAE
AwBIMEYCIQDHnXFKB6N4m4uwnumPuWGvCWxbj16sRuRoQdLI1sbJpQIhAPWGc6GK
u7t2QP8pp6j4Evp9C64YQUcz4u8l/QYZu+BjAHYAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFwVIY/eQAABAMARzBFAiAoJtmieR1mFsk3CjES5hO0
gPgqOo1UPWOLllAaMsMtfgIhAIq+WwwINiipdL0x9GqLpMO2hjzzL0Abu8CtUHz/
X1HxMA0GCSqGSIb3DQEBCwUAA4IBAQCZF41uWS8SVs8sQa5vZHkF8k78X4r9RKzZ
dRFBsbS/i9XTXDzAlMYg3t8+sEPmDnUWydntA2wGtLCDAkHM/PIFwDKr6Oe2rPFB
5M7lIKIgProcBedEVnFfntvgWgxbVPKr2sH+fmtk1zUF4ObnVWNimGxsXxzQ4S7F
EnVIfPz3+0bT+WaOjtICm/crIA4wM+88ziW4F3dT2qOwEmUbeV3zsbNtAFa7W8ut
zkguiJ9NppuNbhUDYSFwl/zsvod0JqtHv7WSsd9yUTw/QAxy6+RJyU/pI+bWIBEC
tXZxs6mh88Nbf3HNBWiRbyNxvwmMthJl//BbjxUg2+z4g/EHG0C+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzcsbOn01ZBEpe2F9iCgT
MO0HQQ0GZ+4kjsCMoRAlslhY5o21dzyH32GNOtYWl9vYlSDbeuAJYOft6C+lWaak
9Iz8ZMdlKvihmO2H4rEnQJzN18+UboGJk7p8J87LKb66ngPT5oxTSodDxf1v+MrY
eabus/rYaimtqiOYykeP/367pIW6cO1h81BP2gm1UqWY+ak9p1deLdZiecx6Axp1
PovwA9YumChZ2LiyQttzb2qQDtvPCI7ERhaAYN7kjFH3IRxnfxMzSzJ7RZSADHYK
yqo2bE7G6s5clLPQHM7aI8YCEJRg+csdHH/MDQyMmJUOG/EdfOJLE+o2nrLGiu94
9VEHwKSsZaWC11wLIt4NzMbb8Q4WvHShFRpECE4/LE29o3Fv9Vjm6opI9dM2daAS
zfUiJ/JFpyHFJnaeqlzEXx4fLNiugxEzCN3bVXCMVx3aoNdmrFetR9cH4Onfln+H
Rtq7RBrJIhlH1ByHtj7Eu7o2xDtL4utxPDxuMXzFSF75WLeqq1BwL4Hwt/rTkx5a
TBT4fDz82elXKEQSLVRgUER1bML26oNlMlE8i9lkRT3CikOUmSVw43nFXKFrJwbx
GSmH6YChwRly7Bd5Qungs0+DYeV6usWugDJjUbm+Te/30xzE38+EBg1Qj13NHhyW
+82+CYuK3wHDo4BJG8K2OukCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299454845925392037503861165800789380151100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 18:00:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 18:00:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engimatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839563759185296563477390408746951931092746675454730568559475773706177805195499108523856919802143654620742992853078744539796604998200822299219799998466820961138943428928463977591020381359880091068760560434863691389108706457474462454854111779478642943584586568228538030651088718681743128608060052640430216029406885735433278445499167615912972363949727669313327082147543354977330607100209848323561443128994949093938284939259585380239419062138300980273009579998282616731902895710206899131245173863620138945902928139045320016820829088216360333844302767894235986320112146975757755286864066142504965628814664435013021523647606800167420460406243989454158256534426163559165121177673999328661046763371693452021940704659865498944433002612234568223673108607348327282540995755196482270663851649564672641868255362443799476674228663671432141808543301269082826343261589500465615461845236064723832010289549041279565391017078275853514853171037831162401496852044203173558038046443387537634378318022279963937331303131462059327450278856795906001324269071246745802151830895330395221888350150546858160209023754654082130729343543530786409949320493424751662511581962617538179957410157356241021286091445707116604110437705437357730924172055384886724120838290153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2473b799da166f037858b7717e170a7d9c3293d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engimatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017054863f8a0000040300483046022100c79d714a07a3789b8bb09ee98fb961af096c5b8f5eac46e46841d2c8d6c6c9a5022100f58673a18abbbb7640ff29a7a8f812fa7d0bae18414733e2ef25fd0619bbe063007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017054863f79000004030047304502202826d9a2791d6616c9370a3112e613b480f82a3a8d543d638b96501a32c32d7e0221008abe5b0c083628a974bd31f46a8ba4c3b6863cf32f401bbbc0ad507cff5f51f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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