api.tunego.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:47:5f:e5:3b:a6:cd:9a:f6:59:5e:27:8f:98:8b:d6:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.tunego.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:47:5f:e5:3b:a6:cd:9a:f6:59:5e:27:8f:98:8b:d6:8b
Serial Number (int): 362495593876099637321881101927665883666059
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:6b:1d:d4:e8:ff:ee:a0:1c:fc:8a:d3:2f:cd:d5:be:a3:e6:fd:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:95:8e:44:ce:10:f1:3b:17:27:a9:97:c9:0d:78:b1:e9:a2:7c:df
Fingerprint (sha256): 00:a0:2e:8f:b5:cd:4b:93:91:6c:eb:21:c7:78:d6:2c:69:17:db:86:61:ca:69:73:ce:ad:ec:d1:9a:aa:fd:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.tunego.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.tunego.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.tunego.com

Other certificates including the domain name tunego.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for api.tunego.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362495593876099637321881101927665883666059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 01:19:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 01:19:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.tunego.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940938705630329890071726081400299105308137026468749679878264221733353686873993782104270148196289655428495278167901483665066827348276176706011612348366818117437742628915308570948850318191451503024971778902541050473648928548269206493965992381873673538376042032727162448597906604969587968094071308783917380397774881476176382259054447190192920794354511916714448577372928321331544180813892482886341190303116079260719828760976440609265705164307950170053842822872489132358674276112596079944247831873463384245717905871116408759091597971519626164256677288849523436627445741128220733822401512523421534733609023573269057837653603876660707733241068786770974873397037319515234398550701200540487821839377825153857601203003428266091296308025935493175941886061040965181064317707378463839558003805948657660954108616469703925014962482633247844030831073693672994819749122457419073664128133220148855252775432726081211976124247171457164926321385560281291545744720452547723147119992986347792513351680652491159180997857787948933799657711785622055872909828449806911510265829198142845849469496803317701388542744508048367260413818618647511627861050656342039996077376469897611974101256137773773709697665053082467179912383368422332463415263491123143494203768399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d36b1dd4e8ffeea01cfc8ad32fcdd5bea3e6fd98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tunego.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a6da9faf0000040300463044022006b827a9813307118a68e944b232ba56848ffec17b4941440e2429a4c3c4958e02201f86eb407800beebcb3b9db96c60f9ecb0ee2e0f6ac8a6aeb79f0a1ef32e0f35007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168a6da9fac0000040300473045022003f49d05523435630598e1f72df5298a331db44536e297dc123fcff88e42a211022100ecd6b2842a8b233d1cc7771e50dd128bd40f74d7f245351ac5c9218b2981db4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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