www.generationgap.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:b1:17:74:0a:85:08:38:79:aa:70:ff:10:79:e2:40:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.generationgap.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:b1:17:74:0a:85:08:38:79:aa:70:ff:10:79:e2:40:e3
Serial Number (int): 296281054352891106716821407551962975715555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:62:df:82:27:d9:eb:a6:8f:99:85:ba:01:95:c0:c1:fa:d5:be:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:54:ef:5f:5a:08:f0:cc:cd:de:88:63:93:d4:f9:6e:e5:07:30:c8
Fingerprint (sha256): dd:02:74:e6:e3:58:d1:a8:43:6c:64:84:c2:ee:ca:1f:da:4f:f2:86:ce:59:6c:98:2c:47:11:16:7f:ea:19:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.generationgap.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.generationgap.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.generationgap.net

Other certificates including the domain name generationgap.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.generationgap.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296281054352891106716821407551962975715555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 07:20:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 07:20:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.generationgap.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855614397824628258978386873927527504002105185038594886922198630689285269514265788729401763524841813003194654549794087698907068236442515614217284581523565674790040266103706228137902398303991218130561693687550223867794005050579993985125501425583779817468226501447863266091872329252668364937213405408978701461368199139537314053003771630682651733972497128484703954241495864474243719521329945365690535087026788892858715333438304874958775196224607413254736590288040953033748105317619407376732957978124722466459831354295633171706736361120340942987643441577296077847515117652356389001426160711189425534266882575835997932240172509983596102286892567846006646480564994943505137810702103116682756431892693229198611959179853255584017419314631537955353209171991342609044097906955745511700979056875184333421882862681715425499950241788013430140390669188728601920150069169684755741414609807005057848273191867078412213618040599025735841924240026648140499625943593649037969559678773914063393187460580351316990838719417800223695889821398661572404052336536690650051506228333416085568849007487388947967787854502689864258627964085594222498213520152535346855578133621377024151259425500830267252461030165015560726577956455028409441399668258703979373633033533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c462df8227d9eba68f9985ba0195c0c1fad5be88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generationgap.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd22911d30000040300473045022035ab977a3868ca84ffc95b6eb434bc6c45c9551b254cbbe81e1c60cfa18ba17c022100eebed03d50419baf240d0436e0ed61f124ad0bbe8546a446e750e90524bd03d100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd22911ee000004030046304402200975a6636a8b8f8b11e895b80a5c2ce731085f046a8be2fdfee625c3302efda602201749c240a1867c581eea5b0548ffdb289a991b79d1ffffc2a6902926e13296a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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