chicago-dev.singularity.is

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:e0:d6:1e:88:db:39:ce:32:7e:44:11:2b:ef:db:10:18 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chicago-dev.singularity.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:e0:d6:1e:88:db:39:ce:32:7e:44:11:2b:ef:db:10:18
Serial Number (int): 337858966827469668675462155205944509403160
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:9d:49:c6:a6:aa:c6:12:90:98:2b:48:c7:cf:c8:c6:65:ed:d6:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:b0:65:de:73:93:1d:64:8e:bb:5d:f8:0a:48:ed:6c:4d:82:23:21
Fingerprint (sha256): ed:85:cd:bc:ba:9f:9d:20:51:31:bf:ee:38:f0:f4:21:dc:ea:29:b4:e6:40:94:da:d0:91:fb:ff:65:b6:79:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chicago-dev.singularity.is

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chicago-dev.singularity.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.chicago-dev.singularity.is
api.christmas-dev.singularity.is
chicago-dev.singularity.is

Other certificates including the domain name singularity.is

(limited to 100 certificates)
singularity.is
imep.ba
dartsorakel.com
www.singularity.is
capital-plaza.2ambh.com
imep.ba
imep.ba
dras-rs-dev.singularity.is
monq.eu.com
dartsorakel.com
capital-plaza.2ambh.com
imep.ba
salescms-dev.2ambh.com
imep.ba
dartsorakel.com
www.singularity.is
capital-plaza.2ambh.com
admin.tracking-dev.singularity.is
capital-plaza.2ambh.com
monq.eu.com
www.singularity.is
monq.eu.com
capital-plaza.2ambh.com
chicago-dev.singularity.is
capital-plaza.2ambh.com

Certificate

The complete raw certificate details for chicago-dev.singularity.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtytx9cKid/LPM1G7UWmt
dX9TamOZzfql97F7rN63GoiPXYHlmsPJ3AgEnjtczLktHRG/blm7krIpFdCMwuJa
0mhLuI9zkv/2sA0/75OT8zKTI6LAKkBfBOBEHIAzH+XGLWBKKOfGiNQoEu4kSh2e
IXbbLTs3YM+IViQPqqzvk6deyyapZu9QUmsgVru2Alsku/E5/mbqFoBt56OYlnwc
yjkc6FAo/JVQESZ0dG11VlCZvuskc0tjst/jPIKY0oWvoJg2WtpaiEQn0P3d97s+
Xr/YHJNrJYpnEoB5c9kCNKmjn8Kuwb//eBmXMopuHPPqEXyfa1JHLRg1iaXXZj6s
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337858966827469668675462155205944509403160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 17:21:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 17:21:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chicago-dev.singularity.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23123033413806490410437996488149608030276633382791136882348338054241926037142263751010570348652112336128800614045698258914463622770418121095055104092914005187445155907029930162956296053521406535375241984488845592413213629567304773721856755446319707880659605124044628956254365717972694833551560001365605023814034576670714753946010386216446764047838576991820793223519402916698158766426236124908068267107743178035143729628580479292351611050339018275938599652530199598835560279399236538312904419787970269732673217803779210498226281425727601404533959616388341865321962745841990442832100965925080914881324506983402097781887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							849d49c6a6aac61290982b48c7cfc8c665edd651
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chicago-dev.singularity.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.christmas-dev.singularity.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago-dev.singularity.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d02a91c7800000403004830460221008a2196f2cdd1092bf6031d132b098914185d0ea7ef4ba5dd7fb7002d6a8360e702210082007d13715bb767b093d5cf722664097fab02f907bb94d91b66d3f4f8fabff3007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d02a91e67000004030048304602210095e64254e2f4ec453529705c6f36742213f55ecef5c4bc264217b9d7e3596b90022100f7b14f80e241ecb4416cfbdbaea6966fa694e84504b3377bad326b718615c61f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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