fluidproject.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:32:42:8f:db:da:53:66:fc:75:dd:37:32:a4:7b:37:61 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fluidproject.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:32:42:8f:db:da:53:66:fc:75:dd:37:32:a4:7b:37:61
Serial Number (int): 339328326829360666637388452536332771342177
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:66:b4:3f:00:8e:78:c9:dc:93:ca:6c:ce:4d:2b:12:2e:22:2c:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:97:c5:65:f1:6e:73:00:bd:aa:cb:67:17:37:6f:72:15:32:1e:65
Fingerprint (sha256): c3:4b:3b:6a:15:ac:e8:aa:c1:34:db:8c:f0:bb:76:52:02:c3:30:a8:59:8e:a6:06:cd:7f:e7:98:98:85:97:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fluidproject.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fluidproject.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

build.fluidproject.org
buildkite.fluidproject.org
ci.fluidproject.org
docs.fluidproject.org
fluidproject.org
forge.fluidproject.org
issues.fluidproject.org
rsf.fluidproject.org
wiki.fluidproject.org
www.fluidproject.org

Other certificates including the domain name fluidproject.org

(limited to 100 certificates)
www.fluidproject.org
ci.fluidproject.org
issues.fluidproject.org
wiki.fluidproject.org
fluidproject.org
ci.fluidproject.org
fluidproject.org
fluidproject.org
wiki.fluidproject.org
issues.fluidproject.org
ci-int.fluidproject.org
fluidinfusion.ca
issues.fluidproject.org
fluidproject.org
ci.fluidproject.org
fluidinfusion.ca
fluidproject.org
fluidfoundation.ca
fluidproject.org
ci.fluidproject.org
issues.fluidproject.org
fluidproject.org
fluidfoundation.ca
fluidfoundation.ca
fluidproject.org
ci.fluidproject.org
fluidproject.org
fluidproject.org
ci-int.fluidproject.org
issues.fluidproject.org
wiki.fluidproject.org
ci.fluidproject.org
fluidproject.org
issues.fluidproject.org
issues.fluidproject.org
fluidproject.org
ci-int.fluidproject.org
fluidproject.org
fluidproject.org
fluidfoundation.ca
source.fluidproject.org
wiki.fluidproject.org
wiki.fluidproject.org
fluidproject.org
ci.fluidproject.org
issues.fluidproject.org
wiki.fluidproject.org
fluidproject.org
ci.fluidproject.org
fluidproject.org
wiki.fluidproject.org
fluidinfusion.ca
fluidfoundation.ca
fluidproject.org

Certificate

The complete raw certificate details for fluidproject.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mX+cjcxJpyMry6q51eO
l4DOt7kq7uMTMdvlyZJe8oi/ZTXvpxSCc26a2YKs9M2vanLr9jKUSRVo2uuQuXSZ
Chh2OSEh67S8qsApOH0qjZjxuGpcnPBklamCJ5B2H9zZbEQG3wz/ovHkxouINbYf
oRJoGz1yJXdJChPiPu0eGeAoK7lKHS9CR+QjsfNfDqJXp/PDf3f00drPDuN/Z6hQ
EUIfCH2Hxeu6+QYs5mB/J2R5OE1DVEeSSeLcOlEQYp19aRyOhRdHv6ORARCaQs7D
r3TGiRUwzhohNUlusQZKB1glSdCaKtfiCwd4a0u3DPgUE1+3VU+jjZ73P7tyDyqu
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339328326829360666637388452536332771342177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 22:58:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 22:58:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fluidproject.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27570245564150953642360485634837951939090073834106398714911718174627967327023669804332080769299581261337436947223068097135859419382607869413975608348551654476643915627197612376694227094387024086241468426678636679296068510213690275124161768562899734590947016142537713675802810852823256315921220453921043602612318471724290056121550378036890630106030204885920532491857439044548771184022468051190448210841790208970898143215690450752140477149508439672732897537328453287734621725961895427386813092086963775576584445500136297452223922475943727835432097249125150670271883341510069039701752856764360202065025201064920677527201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb66b43f008e78c9dc93ca6cce4d2b122e222ce9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildkite.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issues.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsf.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluidproject.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f541901910000040300473045022100fb60843d302e45e2b3d4ffd5ca08549d6e55b26fd0b7091c87b4e1a5f24d6ab70220289162b572a4b7689fb7225dbde90520ffec9a023d4515d502388d368c60750e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5419018f0000040300483046022100ff81bdaf953ffc4d03eee6ce72a8d9945f09670b84cfb4972dc483aeb3e7e51302210095bbbabfddc7c4a5012c556e95f87799a6a6bedc9b93693bbd031b48251c0273
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cbee3c97ad7b05e6bb33f193010035eb678858865d839dd0494db419bc7ab448fb4e563d43fda8ff81985e79029105625afdd9d6f6a9d244f330e0322f9207fa390dfc509261971c37d32ea7f9ef413ecc2a821ab1181ff9dc374a9e3ebe35a274e66877907994dec6f7d858d9211df45fdb1093ceb0cab0d6173ccbf5700bbc640dbc562ef3b6fde3cf15abe32e6321e8a2d4ee7d5fb247c6dee2a400de414e6d586bf094a2d400e20f46d0620ea546443fe145f6709d3fa844f858697570d7344438cd4dd6675f96d64d5c656019322f79c3331006fb33722f0ea3acb350770d4474d5f3cc84fa2e4717607e568d42c85c042ba5a98d34867aff41d6640bb