auth.tunego.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:bb:c8:37:4d:72:87:56:c7:40:8a:c6:f9:d9:4f:11:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.tunego.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:bb:c8:37:4d:72:87:56:c7:40:8a:c6:f9:d9:4f:11:35
Serial Number (int): 300038370473598814165336326137300275630389
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:2f:39:84:c8:6b:af:f4:e5:a6:f7:e2:a4:5b:64:33:b6:dd:0b:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:c5:82:1b:c0:a1:79:2f:90:ec:6a:81:e3:d1:15:e9:e8:14:1f:80
Fingerprint (sha256): f7:e9:f0:82:04:3c:3c:94:5a:7b:d8:5a:e3:d2:6d:43:87:ff:87:c4:30:3e:82:7c:25:b0:86:83:e4:08:45:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.tunego.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.tunego.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tunego.com

Other certificates including the domain name tunego.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for auth.tunego.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300038370473598814165336326137300275630389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 20:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 20:51:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.tunego.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724891019378285276971054790616066990203407580900670407554511037211524636713316793187220609469222048768052830323205512311507572732070036739254146094834059549034989418498972418289568193945263552339796120354737518881961781070305258382378187593401591013062666107383743888910044845689536470852999602322073093564859230690822448756647852465662580696919767939235956624390737098801374028606815107200370219615396678048568918966019605129828472027058230746844366496281951787443923821455463176237139927877703336475261112257330194026644337729102684723668031106555847771940078648121687225772244538107874502260199410291197981292825314032918903680426276572179439294978530401526399788476232342513165029216762377184327095321055240451096241060918665356523055388032283236226929857536478376570101239912014809429513071442143314264716077967747786361587301325257246896609854751738533880811497883585618785371177698926796062371255377673334197305760911724728204846950274362258632192977645698874711840240691850019076710471261222315129542914185350005775990067484228542362893592449809956088677137488673366747901512203156664232616872056048362287803936953578356373026995797415919872304210658856962919400710459536264909616617373649790252400852378477064246422227877171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							922f3984c86baff4e5a6f7e2a45b6433b6dd0bd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tunego.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016612b770dc00000403004830460221008a6bf1aee6c11a9936619905ac67510e0e5f0f573d0b295c20128049c7cd8593022100a5ea2d50e14ea7c38b72a67d66cf1c70c72936a00925fbd791e933f0b1760e310076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016612b7730600000403004730450221009ccc3d3da96d2e0210b948c87ccb35851a6fd9667df3d1412b0bdfd60882d50602204738c6683372f401a68f79d1ff5403af7cfcbb9c63ddc676f3dd9d8fac5fc57d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c3ae20781151165c366dfec1250a44a97317f333c863d13fac430ec2c8f6d199f034457781e0215dade4354bcc6a137f9f18d7ec9d1af62e435cbb2f7f71fec668fb81c19c78851e5a5cc979131466538aaae587d0a79cff99789d6533b9929d84415aa4b4e4b96cfd6eb4f5b13116e6b356acb0af9d7c0c922b25e7c8376aa66c6456c651117d58d8794768eb00198ffbea377051b04b262aff146a87e5b8db846d9c43aba6b942a00b631626312882ea46e9079fc64d1bef9c66960cf9bacfdd6d57acdadce1b6bd3762f2fec172b7aafc1e2bb3982b06e8c31784e0788f172d94c4e7f82013e86b219fe6a22b5ca0315348760b47fb702e190d424630248