redir.gsa.ctacdev.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:85:b2:68:0a:0a:0f:13:50:42:ea:84:51:f1:a3:04:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redir.gsa.ctacdev.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:85:b2:68:0a:0a:0f:13:50:42:ea:84:51:f1:a3:04:1c
Serial Number (int): 303369302589002377436388259637902363001884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:66:4f:40:2d:d3:3c:b4:37:ce:c9:59:be:21:2a:cd:ef:0c:f9:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:81:83:b0:41:1a:41:1c:b2:bb:6b:03:fd:1a:ed:26:54:b2:49:a4
Fingerprint (sha256): f1:e3:ce:0c:ff:ff:3f:6d:17:cd:71:e5:42:2a:6d:73:c6:d0:77:7f:be:cf:f9:28:7f:ed:17:2f:b2:94:6b:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate redir.gsa.ctacdev.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redir.gsa.ctacdev.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redir.gsa.ctacdev.com

Other certificates including the domain name ctacdev.com

(limited to 100 certificates)
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
*.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
testredir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
testredir2.gsa.ctacdev.com

Certificate

The complete raw certificate details for redir.gsa.ctacdev.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303369302589002377436388259637902363001884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-31 15:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-29 15:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redir.gsa.ctacdev.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736659128026560217673770000466882549648197433898846765019254305057262095630833174502051300014185849816279823541335602589372587758409352921851280750147808330420597314241179546264033291224658752385099894963222368770394663171524873937449566591354989601434536591456953490390137762785047573807839477967915970431755146135246523531346366931331716019164232155372572817982467223252295938334903119313165446316812968500282710845787672456701238932624923224461697194221348980715510244907797638745402673780371243978178210224346634009171619482960638811188724445466875203386662290905746455459311506636550699273927075500914308400810101061874884406055203576791783019101801316639361362360662115893064281605095271852197423731451510789415262203615808627629254219562590893078987172521011468637312592234914913748217790839755760511298706975328128543400392445710823287495756049496930658211277113971729508906561416253236609155605750041007106049300269413061542515021567791385527262875704272167009502417210220567033827904372149682692825065553569283312606675971414214389248014327768073605893264589905432838966297384644183875459817780204329887305415151602662984292554802709224232102845488061058862588012942648175598213818228991798021695218359032780633637902083603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48664f402dd33cb437cec959be212acdef0cf9b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redir.gsa.ctacdev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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