staging3.seisenlinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:34:a5:63:8d:a5:b4:eb:65:be:ab:ca:f8:04:64:74:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging3.seisenlinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:34:a5:63:8d:a5:b4:eb:65:be:ab:ca:f8:04:64:74:24
Serial Number (int): 334227262920305050413911250062149981336612
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:9c:9a:3f:c0:02:7b:a8:30:92:88:ba:3c:04:ba:2c:bf:ac:f8:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:a5:19:80:2e:dd:c4:c6:44:86:2c:64:0c:ba:d4:a9:13:d9:62:f3
Fingerprint (sha256): c9:12:75:93:f0:cc:53:a9:39:7a:57:26:c5:35:2e:b7:ad:ee:28:27:79:aa:e3:52:76:2b:a7:a9:24:ec:4b:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate staging3.seisenlinea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging3.seisenlinea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging3.seisenlinea.com
www.staging3.seisenlinea.com

Other certificates including the domain name seisenlinea.com

(limited to 100 certificates)
ssl387276.cloudflaressl.com
api.seisenlinea.com
seisenlinea.com
ssl387277.cloudflaressl.com
api.seisenlinea.com
staging2.seisenlinea.com
ssl387275.cloudflaressl.com
ssl387275.cloudflaressl.com
img.seisenlinea.com
staging10.seisenlinea.com
ssl387277.cloudflaressl.com
*.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
staging2.seisenlinea.com
ssl387277.cloudflaressl.com
staging3.seisenlinea.com
sni.cloudflaressl.com
www.seisenlinea.com
www.staging1.seisenlinea.com
seisenlinea.com
api.seisenlinea.com
www.staging1.seisenlinea.com
staging2.seisenlinea.com
*.seisenlinea.com
www.staging1.seisenlinea.com
api.seisenlinea.com
ssl387275.cloudflaressl.com
api.seisenlinea.com
api.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387276.cloudflaressl.com
api.seisenlinea.com
seisenlinea.com
ssl387276.cloudflaressl.com
ssl387277.cloudflaressl.com
6enlinea.com
staging2.seisenlinea.com
ssl387275.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
www.staging1.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387275.cloudflaressl.com
www.staging10.seisenlinea.com
ssl387277.cloudflaressl.com
staging2.seisenlinea.com
ssl387277.cloudflaressl.com
sni.cloudflaressl.com
*.seisenlinea.com
ssl387276.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387276.cloudflaressl.com
ssl387276.cloudflaressl.com
6enlinea.com
staging2.seisenlinea.com
sni.cloudflaressl.com
api.seisenlinea.com
ssl387277.cloudflaressl.com
6enlinea.com
staging2.seisenlinea.com
www.staging1.seisenlinea.com
ssl387277.cloudflaressl.com
6enlinea.com
seisenlinea.com
seisenlinea.com
staging2.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
staging2.seisenlinea.com
*.seisenlinea.com
ssl387276.cloudflaressl.com
cdn.seisenlinea.com
www.staging1.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
ssl387276.cloudflaressl.com
www.staging1.seisenlinea.com
ssl387277.cloudflaressl.com
staging11.seisenlinea.com
ssl387277.cloudflaressl.com
seisenlinea.com
staging4.seisenlinea.com
www.staging1.seisenlinea.com
www.staging1.seisenlinea.com
ssl387277.cloudflaressl.com
ssl387277.cloudflaressl.com
sni.cloudflaressl.com
staging4.seisenlinea.com
6enlinea.com
staging3.seisenlinea.com

Certificate

The complete raw certificate details for staging3.seisenlinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HC6aQOMTJaCawMhB9iW
dldraMmgl3Xdp3DvoGdkFqEMp4ZqcQO3/Dgp3D6/+pYNXUe7ZxP/EI65JZNnAIR3
CrXHIbUV5MWGO2WdBTsw+MSVvFwaIETLX+OLezA8d4oEa4t0Sdu0RmheztlBrnSL
woqRJ9we1EHa+JFfm9KZn5p5felo6kOnYEYw+f4/fVxk+jXWCLs26fUx7soF7rdX
o7uUg5tMSL2JiJiHnHsRklN9v0sGwX/U63EkFFot5tBW+f/bGj92ebR931FOHgQJ
0+c0iplhfQRGsu99j/VN0aSVRyAm9ZkfUULYQ7yD5t1iJSXjNvd7I9G3t3+KgvR5
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334227262920305050413911250062149981336612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 07:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 07:56:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging3.seisenlinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26818108982714320003830330281009373417757866419063409262754268095875776506338745075440965452239068104150241346877715353933139440738772342514305799882266195822823158055915399365006231105429651388400852405931824397160977012518499129611189641894210854869086675066331270666976046068579193611158481019546752402724950827802768359109044043475883366036372217360709315274867322014197983774209258388335804677085469928809174127703572208851541395594359397597356086180598945611057852049622816302575198664741347541424215132881792485591228628666603299657074365343424765070174919334609484789327386143175912226308710433171426461907327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							169c9a3fc0027ba8309288ba3c04ba2cbfacf87b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging3.seisenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging3.seisenlinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001673aa2f1ac000004030047304502204fdbcac2f6657ce0bb9ceffe10849dd9238f2f2fdd8f386b94d1a76f6e616a7e022100e283de8ccd7b02216c12799e367708f4552d461fc4007c6c290be1d9559c9bf0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001673aa2efdd0000040300473045022009fb59f01cedc3361a020ddfd141147a87b5d30d7a27daebb3ab11156029b4ed022100bb1de57d485568d50a52d60d8f9b965383428f64cccfc2f13710022d1c5cda51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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