staging-api.mobilize.us

Issued by R3

About this certificate

This digital certificate with serial number 04:30:fe:06:db:73:e5:d7:d7:c4:11:e7:ef:9d:cd:11:b9:69 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging-api.mobilize.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:30:fe:06:db:73:e5:d7:d7:c4:11:e7:ef:9d:cd:11:b9:69
Serial Number (int): 365120356854986627567503090095560915532137
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:66:fb:ff:a1:be:bf:8c:1d:4e:e6:49:6b:ca:e1:e7:1f:2d:56:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:90:ad:86:ca:ad:34:7f:37:ae:33:b9:b0:a3:5e:ac:5e:39:d4:be
Fingerprint (sha256): 00:8b:66:cd:4c:fc:dd:22:6a:f1:f9:34:e7:ac:d7:7e:34:78:fb:0f:26:bd:3c:32:f5:da:65:f3:63:e9:60:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging-api.mobilize.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging-api.mobilize.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging-api.mobilize.us

Other certificates including the domain name mobilize.us

(limited to 100 certificates)
staging-api.mobilize.us
prod2.mobilize.us
staging-flower.mobilize.us
mobilize.us
mobilize.us
prod2.mobilize.us
proxy-fallback.mobilize.us
events.mobilizeamerica.io
join.mobilize.us
prod2.mobilize.us
staging.mobilize.us
load.mobilize.us
staging.mobilize.us
staging-api.mobilize.us
acme.mobilize.us
join.mobilize.us
prod2.mobilize.us
proxy-fallback.mobilize.us
fancy-cactus.mobilizeforcongress.com
ssl438076.cloudflaressl.com
api.mobilize.us
www.mobilize.us
join.mobilize.us
join.mobilize.us
ssl368773.cloudflaressl.com
www.mobilize.us
mobilize.us
refer.mobilize.us
mobilizeus-oa.edge.targetedaction.net
load.mobilize.us
events.mobilizeamerica.io
mobilize.us
load.mobilize.us
mobilize.us
staging.mobilize.us
api.mobilize.us
api.mobilize.us
events.mobilizeamerica.io
ssl438075.cloudflaressl.com
join.mobilize.us
mobilizeus-oa.edge.targetedaction.net
mobilize.us
mobilize.us
staging.mobilize.us
www.mobilize.us
mobilize.us
proxy-fallback-aws-staging.mobilize.us
staging-flower.mobilize.us
api.mobilize.us
prod2.mobilize.us
join.mobilize.us
ssl368773.cloudflaressl.com
www.mobilize.us
join.mobilize.us
load.mobilize.us
mobilize.us
prod2.mobilize.us
good-sedan.mobilize.us
join.mobilize.us
load.mobilize.us
l.mblz.io
cantdelete.us
events.berniesanders.com
load.mobilize.us
load.mobilize.us
events.mobilizeamerica.io
events.mobilizeamerica.io
mobilize.us
join.mobilize.us
prod2.mobilize.us
majestic-yam.mobilizeforcongress.com
mobilize.us
mobilize.us
www.volunteerfromyourcouch.com
cantdelete.us
prod2.mobilize.us
mobilizeus-oa.edge.targetedaction.net
proxy-fallback.mobilize.us
events.berniesanders.com
*.mobilize.us
proxy-fallback.mobilize.us
refer.mobilize.us
proxy-fallback-staging.mobilize.us
staging.mobilize.us
events.elizabethwarren.com
prod2.mobilize.us
acme.mobilize.us
load.mobilize.us
events.kirstengillibrand.com
join.mobilize.us
load.mobilize.us
join.mobilize.us
mobilize.us
api.mobilize.us
proxy-fallback-staging.mobilize.us
acme.mobilize.us
mobilize.us
l.mblz.io
join.mobilize.us
prod2.mobilize.us

Certificate

The complete raw certificate details for staging-api.mobilize.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+W8l6VWkcNtqHRA4O63
ZGEMkt5SVEAGBOWxmceUYrMlHVTh3iQ/x5OuUkyyn+DkWqQYbptYwMTiq6UvNaGm
9EuWY8li170Pr2F+QLn5RJDeo84r9a9EdAm3OFpUWT1oFTlO5NFpM9LQ6NWit4y+
wT/P+AdGsK3oHVATR4s1hC1nMtkvmm4SQDJ0HaknE88VFqc9c8QY2HZMYrAxFcuI
Hkt2UNxElLAlljB7z5/YaUCDstVfWFKg5zn+jztkzA9BrLgMPiyHlCdhR+Av9pNU
QXzb6EScsyClbJMzluMiTl2msD74hO4kdSpCrImU7SkONF4jmI+qOPRVIF2q/s4u
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365120356854986627567503090095560915532137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 01:27:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-17 01:27:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging-api.mobilize.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21700037532787037307164472207362435489114255267070809583615765310070579754896969865498067998725153843087310292829916236755095269710046779333066443856202411358236936255427162608662393188105353257252761579066714769337825592117101512003873998366071367274521785812549450155211482659483325169953258062824198679098218122077808088322077029152109420853655570618634060139396498524713061143467425984433513047770567932488629930724053969823422943888277697956411081230728733447804984359320860291795398103952814051936746403319882188360301888756939524620854564026426352671946775868966972980073468670297876765637021240868221605523167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d966fbffa1bebf8c1d4ee6496bcae1e71f2d56dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.mobilize.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001770e2b2c4e0000040300463044022036771c8333f3ebc80edb9709c09a31c2e91f448fdf5089b5b65dc6671d1404f402202661049d0ddf4b7904f46cafe41ece8fd5f26be38dc304bbf19afdfb93dea02f007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001770e2b2c4100000403004830460221009645733ef4aabe0b8299635f01d8ba8cfb346a867fb6bfa242d3fd61af23d760022100988250622ec2ccfb49217e1f07e6f03ec17d81001ed9ef2ed4b22c03c6d7d660
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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