www.generationgap.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:4f:33:78:a1:36:c7:39:25:dd:af:ba:2f:45:ee:ce:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.generationgap.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:4f:33:78:a1:36:c7:39:25:dd:af:ba:2f:45:ee:ce:c0
Serial Number (int): 286282746845977881042505359079752174849728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:c1:99:4c:1c:d0:9d:7b:e5:93:81:43:c8:7c:81:43:62:0a:74:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:7c:5c:fa:f7:fc:92:97:e5:b1:e5:e3:30:6c:6f:8a:4e:1c:e0:f1
Fingerprint (sha256): f8:a4:c6:07:ba:60:8e:64:cb:c7:48:8a:92:6d:55:4d:d4:61:35:7b:be:5a:23:43:00:b1:a6:83:4c:93:55:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.generationgap.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.generationgap.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.generationgap.net

Other certificates including the domain name generationgap.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.generationgap.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgISA0lPM3ihNsc5Jd2vui9F7s7AMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjMwNTA5MzBaFw0x
OTA5MjEwNTA5MzBaMCAxHjAcBgNVBAMTFXd3dy5nZW5lcmF0aW9uZ2FwLm5ldDCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMT2aCTLumzHmLtcLvxGSwTz
AzY6YYjt/6lAmRJbiBcY/Q8zb+hia/CWkGqaFDI/XqyX/dphQ8QB7mUw3Tlnxcd4
RMiuMt/j2M+ztLf+0wQACdBNMm5O2HJsayoFEkqqYv6ngESM9/jvJa7tfrkgEDbA
nMhiDnLnQWMF+wybKQ2s0oX2GK4UHUNJrvjYS0Vh2PBwVSmuJ+0wSUiJzKEkUX0h
T8HQE/stW/RV5zGt3PRC0ngnOV2RHRGCemUzmw7eQi/6MLcJDNbPNJ3tgMFahSqW
1gRjfYw1rQ9CczQm6gTt7xF8h72H82gBVshKLcdS/qwly3z7G+94immphCBaeOTs
t/YsGIYJQRfIbWL4ZKd6EhFbvAIcTOcx2vKE0V/4rQrubR9gcal447kkvTwbJah8
7X4OmED0XnRuZZMmXVpck4fD/UlhnRx+BipkbJ/vQ+SlkcXbKmrOiZBC8F+HwGeD
OxmQHdS9pR1sS0w+GgTmEXvCTNpUkW8yz8/hDB5bIFpdJ03ZhPe6bud9TBOTJlsh
9wUCkJuvRNCBm3hjEyBgDuLHmc079ZqW2z7r5r6LjflcDmHQbGvXHhaSy72hooKI
gwPL/AigvnqH4o1PFQ5Cy41PeJnItJeaIgG1jgXXM0GGST5BLGBCTwa+dDuGOCOx
/QCoHLtBWhQ0uR/rhID3AgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFEbBmUwc0J175ZOBQ8h8gUNiCnTzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmdlbmVy
YXRpb25nYXAubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV5
5hB7zFYAAAFrgvQ1RAAABAMARzBFAiEA92JLihUwmVwy1B4xsECV6MI0sQbCHvPh
EiMFUlmHXH8CIGP7tZX4NhT9qgZKHMCNBT8B5zPzAy2Uvt7/1e9qo7afAHYAY/Lb
zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFrgvQ1ZwAABAMARzBFAiBx
gGY9EZ9ZLp7zQD6rm/ZN3Tf2U7yHiFbceoyOvRW9bAIhAPc3ZoQXIz2vZa8oX+E/
cdJhnR041sXBp+YNiBUDApf8MA0GCSqGSIb3DQEBCwUAA4IBAQAjCWDVLE7lD5oA
yUNorpMQvg9axCikozvwx+1TF7JaMW69Fgkx45J8hwRnhXCn/0xh6pikkqSlprzU
FskBhXq511XbY2N4ylCIymFq1Gl+f4Y4BYBoNNsXeVk5LY2xfRHFjsQKJHrIOYcw
heyqjZuCrjWFRnN5EPdc1uEelPuV2mKheJ/AiD5AtX/fUufgTFpULUXoSajIDKO6
cgNUDp5UFOije9YfZpTCZLju4UsfJ0+MKJahdFRZe5hHiPkCD1kTe8Q8rR4OkHDM
T0daIfAlYYSWmF5DhEEmk5R0E+jKFcGadVODydZTAiY+EkkQoy78ZKBufHPz6etw
VWtJxJC7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxPZoJMu6bMeYu1wu/EZL
BPMDNjphiO3/qUCZEluIFxj9DzNv6GJr8JaQapoUMj9erJf92mFDxAHuZTDdOWfF
x3hEyK4y3+PYz7O0t/7TBAAJ0E0ybk7YcmxrKgUSSqpi/qeARIz3+O8lru1+uSAQ
NsCcyGIOcudBYwX7DJspDazShfYYrhQdQ0mu+NhLRWHY8HBVKa4n7TBJSInMoSRR
fSFPwdAT+y1b9FXnMa3c9ELSeCc5XZEdEYJ6ZTObDt5CL/owtwkM1s80ne2AwVqF
KpbWBGN9jDWtD0JzNCbqBO3vEXyHvYfzaAFWyEotx1L+rCXLfPsb73iKaamEIFp4
5Oy39iwYhglBF8htYvhkp3oSEVu8AhxM5zHa8oTRX/itCu5tH2BxqXjjuSS9PBsl
qHztfg6YQPRedG5lkyZdWlyTh8P9SWGdHH4GKmRsn+9D5KWRxdsqas6JkELwX4fA
Z4M7GZAd1L2lHWxLTD4aBOYRe8JM2lSRbzLPz+EMHlsgWl0nTdmE97pu531ME5Mm
WyH3BQKQm69E0IGbeGMTIGAO4seZzTv1mpbbPuvmvouN+VwOYdBsa9ceFpLLvaGi
goiDA8v8CKC+eofijU8VDkLLjU94mci0l5oiAbWOBdczQYZJPkEsYEJPBr50O4Y4
I7H9AKgcu0FaFDS5H+uEgPcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286282746845977881042505359079752174849728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 05:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 05:09:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.generationgap.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803537003295580535057531577766151993206557850887970572253457025612910497550409825677984330629303114180904890990853680772286583001224526603876972244986577337467762801051885448368259231723942435462843021557188094377219244797764820218653873299831731255430355564318193244954736690893892755743170614406254333435867056083619696764529711133503243991346350330687639571694254476087163058473584971536851678496249839694262990345255199547437688833431452385139271282879185258717563899902402246885157456098632074979587472523125954022444797108837273746210628174613446320254727397300834967203587919702531233061656735225575005598150720099354602011027180645201000660795687138895769763105143412687583397490443398753633541325111341178761904487144544889227995390838232795287093301373876756412760216980222012094503938790155443875204426222772992842642270540314264218974112362883907656600898149262407084955750224704699399441838866945574240816928103510129593227155096964741356217240948038161448804712327455855812252703953024973227974669496579054131643541354253071616626404620947956737121746861803994063407533193798063467377436035705606137553840721605861675748026635495395800000414375397925882663337729450260183583946451054238752408072469442284161362886426871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46c1994c1cd09d7be5938143c87c8143620a74f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generationgap.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b82f435440000040300473045022100f7624b8a1530995c32d41e31b04095e8c234b106c21ef3e11223055259875c7f022063fbb595f83614fdaa064a1cc08d053f01e733f3032d94bedeffd5ef6aa3b69f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b82f43567000004030047304502207180663d119f592e9ef3403eab9bf64ddd37f653bc878856dc7a8c8ebd15bd6c022100f737668417233daf65af285fe13f71d2619d1d38d6c5c1a7e60d8815030297fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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