chic.givengine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:75:8d:fa:55:e7:4f:c3:a0:0d:ea:99:06:74:e0:0f:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chic.givengine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:75:8d:fa:55:e7:4f:c3:a0:0d:ea:99:06:74:e0:0f:30
Serial Number (int): 345202576924603872712539721104186868240176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:93:78:6a:22:a9:7f:58:d8:ff:f8:bf:96:a9:80:6f:fa:cb:e3:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:d4:34:68:f6:3b:0f:bf:33:24:59:03:03:a2:94:d6:d0:ec:b5:d0
Fingerprint (sha256): c7:3d:2c:2e:75:eb:00:9c:b6:2e:71:49:54:10:3f:93:d6:9e:61:c6:72:09:14:55:32:8d:56:ce:88:aa:d7:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chic.givengine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chic.givengine.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chic.givengine.org

Other certificates including the domain name givengine.org

(limited to 100 certificates)
chiapet.givengine.org
chiapet.givengine.org
give.genomegitar.org
give.genemo.org
give.genemo.org
encode.givengine.org
beta.givengine.org
encode.givengine.org
beta.encode.genemo.org
encode.givengine.org
demo.give.genemo.org
beta.4dnucleome.org
4dnucleome.org
beta.4dnucleome.org
singlecell.genemo.org
chiapet.givengine.org
4dnucleome.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
mcf7.give.genemo.org
chiapet.givengine.org
beta.4dnucleome.org
chiapet.givengine.org
demo.give.genemo.org
margi.genemo.org
encode.givengine.org
chiapet.givengine.org
beta.encode.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.givengine.org
singlecell.genemo.org
demo.give.genemo.org
beta.4dnucleome.org
give.genemo.org
margi.genemo.org
beta.encode.genemo.org
beta.4dnucleome.org
chiapet.givengine.org
singlecell.genemo.org
4dnucleome.org
mcf7.give.genemo.org
give.genemo.org
beta.encode.genemo.org
chic.givengine.org
encode.givengine.org
mcf7.give.genemo.org
margi.genemo.org
demo.give.genemo.org
chic.givengine.org
beta.encode.genemo.org
beta.givengine.org
margi.genemo.org
chic.givengine.org
singlecell.genemo.org
demo.give.genemo.org
chic.givengine.org
margi.genemo.org
chiapet.givengine.org
beta.givengine.org
chiapet.givengine.org
demo.give.genemo.org
4dnucleome.org
chiapet.givengine.org
beta.givengine.org
mcf7.give.genemo.org
singlecell.cepbrowser.org
chiapet.givengine.org
beta.encode.genemo.org
beta.give.genemo.org
chic.givengine.org
encode.givengine.org
singlecell.genemo.org
chiapet.givengine.org
demo.give.genemo.org
mcf7.give.genemo.org
demo.give.genemo.org
encode.givengine.org
give.genemo.org
chic.givengine.org
chiapet.givengine.org
singlecell.genemo.org
mcf7.give.genemo.org
margi.genemo.org
give.genemo.org
chiapet.givengine.org
singlecell.genemo.org
give.genemo.org
margi.genemo.org
mcf7.give.genemo.org
give.genomegitar.org
margi.genemo.org
beta.give.genemo.org
chiapet.givengine.org
beta.givengine.org
beta.givengine.org

Certificate

The complete raw certificate details for chic.givengine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKkduOH7QrvzCHrFXjd
zC8USYyd/pHZJTwH48sTiUm1hLrW775+U1v0qaXJEWmHaOnROyEGj1UDJblRS9t8
cLYR2X7vL7APrjPydmO/pzqAm8+clCTmwPrptyMSaIM2KkXuUfpg95imBKSu2Huw
6dX7ckJCh5y26MqEiwvspCjVr8KSby9uPcugb7VJAGqzv1FfCp+nQVo4xct8cXkc
KRfOfvXwRZX3bdpgxLiSWWwGh9Xld3Q+rc35HMjYJVtikZBZFvEMqusp3vhNRKYy
1D568fcoSaD7+Vjad1MbNGA/QaZhBEYipSmerpfiEPqdu8+e3m3mZpTRy/EWGbHL
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345202576924603872712539721104186868240176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 15:45:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 15:45:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chic.givengine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24996487418564119890765274339405599032175158654764857692306659972139661849139759950589419327272698775783478052143740230514094587018321879328325204559442548263842987286715998590928464751225502777787988395872141044891951955170014979788332643877615043684480989829952127910518402557891405580017353222434782564451358218652957286451613944704075345234529713582677025839379253696785296831062720873141276700030290274840389251852361327194086443274463574867808891969285155806113726095116736214419774404846693494791547992942791456378237848565414710073068363778113905783927717079228791977433452682388069655803057814448489584773929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9193786a22a97f58d8fff8bf96a9806ffacbe32f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chic.givengine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aa7c93cb900000403004830460221009538b7e4cdd8d3c2ce2b3f89287d2f5f9b2b85fbd1d81bfb0d66367d3cd6fcdc0221009b80737a6186caf8fb55ccee4232dbf9089431dd38be003124bbc5dd5390e343007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aa7c93e8c00000403004730450220285ee41260ba022782642b1f9dd243a4fc6f271c2241f7f641b1c764379492eb022100cfbc20f3f853d9a2d58a5778e9c65e8d2be02298423d888ca0df23f2e8d6b876
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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