give-preprod.classy-test.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:3f:b2:95:18:cc:e3:55:2b:82:26:30:b2:fb:c7:49:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=give-preprod.classy-test.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:3f:b2:95:18:cc:e3:55:2b:82:26:30:b2:fb:c7:49:1f
Serial Number (int): 382902331402674956910416835095020196808991
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:dc:6f:47:52:4a:20:38:99:06:8b:99:ac:1b:28:ad:90:20:38:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:8e:9f:52:66:b4:ab:71:fd:5a:ff:ef:9b:22:14:3d:b3:8c:1c:da
Fingerprint (sha256): d5:b2:46:ab:15:87:f8:f7:f3:58:f0:26:b6:93:5a:2e:1c:5d:50:4d:8b:f6:ea:fb:34:2b:d8:42:92:cb:7b:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate give-preprod.classy-test.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for give-preprod.classy-test.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

give-preprod.classy-test.org

Other certificates including the domain name classy-test.org

(limited to 100 certificates)
*.classy-test.org
*.cdn.classy-test.org
*.cdn.classy-test.org
donate.stack-up.org
dev-live-web-ui.cdn.classy-test.org
classy-test.org
sni.cloudflaressl.com
dev-trident.cdn.classy-test.org
classy-test.org
*.cdn.classy-test.org
staging.stayclassy.org
vanity.classy-test.org
sni.cloudflaressl.com
*.classy-test.org
dev-frs.cdn.classy-test.org
preprod.classy.org
dev.classy-test.org
preprod.classy.org
*.stayclassy.org
classy-test.org
*.classy-test.org
dev-classy-checkout.cdn.classy-test.org
preprod.classy.org
give.classy-test.org
give-preprod.classy-test.org
give-preprod.classy-test.org
classy-test.org
*.classy-test.org
ssl898006.cloudflaressl.com
*.classy-test.org
automation.classy-test.org
give-preprod.classy-test.org
preprod.classy.org
*.classy-test.org
preprod.classy.org
*.stayclassy.org
qa.classy-test.org
preprod.classy.org
give-preprod.classy-test.org
classy-test.org
classy-test.org
ssl898005.cloudflaressl.com
*.stayclassy.org
dev-fonts.cdn.classy-test.org
staging-cart-api.classy-test.org
*.stayclassy.org
*.stayclassy.org
classy-test.org
*.classy-test.org
dev-whammy.cdn.classy-test.org
vanity.classy-test.org
classy-test.org
give-preprod.classy-test.org
give-preprod.classy-test.org
preprod.classy.org
sni.cloudflaressl.com
*.cdn.classy-test.org
give-preprod.classy-test.org
give.classy-test.org
classy-test.org
give-preprod.classy-test.org
staging-live-web-ui.cdn.classy-test.org
dev-frs.cdn.classy-test.org
staging-content-live.cdn.classy-test.org
dev-live-web-ui.cdn.classy-test.org
dev-content-live.cdn.classy-test.org
*.classy-test.org
preprod.classy.org

Certificate

The complete raw certificate details for give-preprod.classy-test.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382902331402674956910416835095020196808991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 19:41:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 19:41:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'give-preprod.classy-test.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755911174653648072483785164336702708465471311628901809404076130515932318708881050924543365105889661801621054867512319771916038615554499205106883495746762943995720665997892979463382270108105627932510284540330420746885780547067005442198608329372947806840173694700386655082063469873484244749215208734550480428532392884509710926932712946882148073521738190190677784670963282908623313293313231393508181812294017322561358283850452472912524766406314613197725080041444254913555915332875458301329584291354860344835504081047233921373420840186817339778490835448349126567667095831137657095057937896389282713744090072974753777560496235470407645741473801492508993052754418608667548454037417964288994877053329058663649044802086259777775232193280573627441051123305112811714862253307946075824576409139996440824963678237281694773737492371530126909808053381877303131170055340758906324051368810926822754996531072369596330981644114410324986460227532976998079963960842868256236425279487025940992958408021061471018416390301785623688197155465464303409325474597632443949765116472282248500345797063995216850175407969142624935933432670868212745401663091990667292369145627317511067647056745144347991143758741317451160360615983556457036008179112668570773917474027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efdc6f47524a203899068b99ac1b28ad902038f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-preprod.classy-test.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c352a81d90000040300473045022100dee98079dc67ca31a2c3ff6c41cb80c72426077ee46c311ca77087e3bc8ff1d502201c9293daab878c4383b455fac6fe338417fc44320d2c88e04f52927004f86ad400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c352a83c5000004030046304402206c8e7462030e1ac03906ead9eaac7227a9a159bd75c6672291750c2c69eecf0b02201224ecc0abf97620180e2648bc105fbae30424676db0a290f97f001c19a4d856
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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