give-preprod.classy-test.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:d3:cc:76:24:da:dc:3a:71:b8:57:5c:d0:d8:7d:a5:ac was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=give-preprod.classy-test.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:d3:cc:76:24:da:dc:3a:71:b8:57:5c:d0:d8:7d:a5:ac
Serial Number (int): 274208834103269502495262498390534004778412
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:94:61:10:00:31:40:55:8a:4a:5e:52:56:13:cb:ae:e1:cf:9d:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:f1:fd:7b:98:45:17:7d:2d:83:71:60:36:20:a5:e3:55:9a:fa:8c
Fingerprint (sha256): dd:ab:49:71:75:2e:e1:08:42:ce:10:7a:44:b3:44:65:e3:3b:dc:ca:9a:e4:ae:fd:6f:d6:0b:0f:9b:d2:97:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate give-preprod.classy-test.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for give-preprod.classy-test.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

give-preprod.classy-test.org

Other certificates including the domain name classy-test.org

(limited to 100 certificates)
*.classy-test.org
*.cdn.classy-test.org
*.cdn.classy-test.org
donate.stack-up.org
dev-live-web-ui.cdn.classy-test.org
classy-test.org
sni.cloudflaressl.com
dev-trident.cdn.classy-test.org
classy-test.org
*.cdn.classy-test.org
staging.stayclassy.org
vanity.classy-test.org
sni.cloudflaressl.com
*.classy-test.org
dev-frs.cdn.classy-test.org
preprod.classy.org
dev.classy-test.org
preprod.classy.org
*.stayclassy.org
classy-test.org
*.classy-test.org
dev-classy-checkout.cdn.classy-test.org
preprod.classy.org
give.classy-test.org
give-preprod.classy-test.org
give-preprod.classy-test.org
classy-test.org
*.classy-test.org
ssl898006.cloudflaressl.com
*.classy-test.org
automation.classy-test.org
give-preprod.classy-test.org
preprod.classy.org
*.classy-test.org
preprod.classy.org
*.stayclassy.org
qa.classy-test.org
preprod.classy.org
give-preprod.classy-test.org
classy-test.org
classy-test.org
ssl898005.cloudflaressl.com
*.stayclassy.org
dev-fonts.cdn.classy-test.org
staging-cart-api.classy-test.org
*.stayclassy.org
*.stayclassy.org
classy-test.org
*.classy-test.org
dev-whammy.cdn.classy-test.org
vanity.classy-test.org
classy-test.org
give-preprod.classy-test.org
give-preprod.classy-test.org
preprod.classy.org
sni.cloudflaressl.com
*.cdn.classy-test.org
give-preprod.classy-test.org
give.classy-test.org
classy-test.org
give-preprod.classy-test.org
staging-live-web-ui.cdn.classy-test.org
dev-frs.cdn.classy-test.org
staging-content-live.cdn.classy-test.org
dev-live-web-ui.cdn.classy-test.org
dev-content-live.cdn.classy-test.org
*.classy-test.org
preprod.classy.org

Certificate

The complete raw certificate details for give-preprod.classy-test.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISAyXTzHYk2tw6cbhXXNDYfaWsMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjUyMDAyMDZaFw0x
OTEyMjQyMDAyMDZaMCcxJTAjBgNVBAMTHGdpdmUtcHJlcHJvZC5jbGFzc3ktdGVz
dC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCabVDuvM/wxszY
7C6r1gEqZR/Rc1Qne8hlzESrKHVUuKvC9BbvKWLhINvT5mi1CROd4rS+BfXFU0bk
MAnJQpjAJrl/AQBMxUu5D0VDTx8t12gEoRI0oYwIy9eavICTWQkiSqnW3fKV5cUh
UfklMhL3l7Iw+HXDN6/sRqonXJK1hyXZdiG1cAHlU2cdOziQR0mvbp5JLevoeYTW
DavaGicP+UyA1UVaSEVznJV1dwhlp7odUQRWieQsgCZz587IFn3lYGbJk/7MLKz7
/qhxYl6VrllWggJO9qmwAkRHMu0At8mN6iu1+f/akGWbh/a71ZmWFHlojDATW94Z
zR6xLqmDHIoUJ1lxw6hewlOayP7YmgMlwKx0HUNSblXS1Vk7LuD2MVpHUU/ywaK4
Fg73ZSbAs3xpJrxJI5aa8KbeSEpGzjKwR4QoQJ/O4EMFFheG2AH8z/4qoNHds6B3
N+HkIt+auViryVzRDRwEjDI/IdYg+TZAuD5E0sMeRulJDFfsLEJR744sw7biztRF
INkY3q1ZGrzymp252237PqvVJS8x0uGok3S7Q/tXPD6tsz6cad5U4//wOc29g443
Fn/RS7cKgOH7gf3Nhm2MPpurJyd8P2gJDIJeZv06aR3xbsvEG8S8txtPo5kmSo1R
fm2+PbzoggX2aIyU0QEzI5OYnosOMwIDAQABo4ICcDCCAmwwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBRplGEQADFAVYpKXlJWE8uu4c+d0TAfBgNVHSMEGDAWgBSoSmpj
BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0
dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHGdp
dmUtcHJlcHJvZC5jbGFzc3ktdGVzdC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2
O4PUPuf+dIj7pI8okwGd3fHb/gAAAW1qOzEKAAAEAwBGMEQCICgg7ibTf7FCL99j
N79/SbI5X6MM8Z36Pa/2hC/183p0AiBzpveZiL8nXW6MmA3D5PAOyNCH7HksEn96
28S5AQkiSAB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbWo7
MLsAAAQDAEcwRQIhAKVSgsxC4KYu1nXnGe2Lm6bZoiljlKEj4+3AAkJ1sLJJAiAf
Ztzn7ef8P/9FC6BN1YBAZCZ1tNfCFL8wC3+GnEQEgTANBgkqhkiG9w0BAQsFAAOC
AQEAW3PE+qr8HJY1y/0CbeTkmoqcKoT8AsWJ3/xKs7mkhot84G64+gW8FN+uO+f7
DRpR1dQDqE1rssmjcBo12CAYEweB9426W7heE9QaYhN8kTdQCF8ln7PsPPhI5VhR
UnNy3YL54Rre9ioMR8efo7BW+K+/zNpwq33reoQQwCx2IL8D8obB+QY1128KU77L
2hPpThexdGOEQwMzZ0dfN2aebQlxXicjzK2E2Q3afOJodJRutHpfxZgJI+jgUrEL
BCGxWZRd6HR7roF8/rmG+k3djaac+7L3maHCuTjbPmIjzusquK7oR1FUpwVw4Vhd
K6YvKUkq8I7kQcPpZS/kgSkwiw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274208834103269502495262498390534004778412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 20:02:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 20:02:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'give-preprod.classy-test.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630007260512990397259679055211400123275564931872797144863277476274363938483802510151502307980090922782747177963530585513249730608244182579574312813713777300000208754093431572038240401006114015496988865395296532857109143346052210274613951091148515886390028304480784920848544153989128098301508945024582328599154923432075705619402033092973730485678416405486877591669083888881717486155766422383915243582741820540862555040974760905784134855356827791286169646345763244072975109095884631441203318255105665590528846384686714722751395907302400053803069133810330702169668289132330968996193671404285222090873347440408083654133809134438672641075048433673149666478666249890719391475356136509466140618308391997651908362987705163438185599334736628444119778610599477904451868864156544603686087072939052278480581771568671705837515853380832952504318467053569598531081184486507587323135652104828617563616179492088858533038409751845788269566034993958744002215457077353527458560299506895127356194653396001326107946671146578232186151475939185027239026779818861956787303030144485414331458532940108669539378353408314619517535603704176757446432744501942605777208097869639915203778612946107913717113444815507550351496590830745084461841441865669783488878546483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69946110003140558a4a5e525613cbaee1cf9dd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-preprod.classy-test.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6a3b310a000004030046304402202820ee26d37fb1422fdf6337bf7f49b2395fa30cf19dfa3daff6842ff5f37a74022073a6f79988bf275d6e8c980dc3e4f00ec8d087ec792c127f7adbc4b90109224800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d6a3b30bb0000040300473045022100a55282cc42e0a62ed675e719ed8b9ba6d9a2296394a123e3edc0024275b0b24902201f66dce7ede7fc3fff450ba04dd58040642675b4d7c214bf300b7f869c440481
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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