smart-track-api.structionsite.com

Issued by R3

About this certificate

This digital certificate with serial number 03:49:3b:8b:99:51:03:c5:f3:dd:32:3c:8c:ce:d8:39:b1:57 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=smart-track-api.structionsite.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:3b:8b:99:51:03:c5:f3:dd:32:3c:8c:ce:d8:39:b1:57
Serial Number (int): 286256619871151212437632055232457581637975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:11:03:a9:03:b4:2b:12:9e:d8:04:4b:b9:6b:7d:6c:a0:96:11:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:ac:ae:db:5c:94:d5:04:19:fd:42:c6:f1:29:6c:7b:4b:9c:89:82
Fingerprint (sha256): 00:db:ca:57:d4:2c:05:b2:5e:64:b8:8e:0a:5b:dd:9d:26:48:e8:d5:12:34:9e:aa:c6:6c:a9:4f:a7:e5:25:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate smart-track-api.structionsite.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smart-track-api.structionsite.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kafka-ui-production.structionsite.com
kafka-ui-production.structionsite.services
smart-track-api.structionsite.com
smarttrackprod-10662.c66.me

Other certificates including the domain name structionsite.com

(limited to 100 certificates)
smart-track-api.structionsite.com
app-staging.structionsite.com
*.structionsite.com
app.structionsite.com
toutcequejeveux.com
*.structionsite.com
www.structionsite.com
admin.structionsite.com
app.structionsite.com
predictivedata.ai
www.structionsite.com
web-push-book.gauntface.com
*.structionsite.com
app.structionsite.com
auth.google.rotadosucesso.com
www.structionsite.com
go.structionsite.com
www.desksms.app
tarbutu.club
admin.structionsite.com
www.structionsite.com
app.structionsite.com
social.structionsite.com
social.structionsite.com
viewer.structionsite.com
structionsite.com
www.structionsite.com
viewer.structionsite.com
go.structionsite.com
sada-brian-suk-002.sada-clp-demo.com
training.meduniqa.at
go.structionsite.com
dashboard.smartpath.app
info.structionsite.com
gconf.eu
app-staging.structionsite.com
www.peradze.com
lythuyet.onthigplx.vn
www.structionsite.com
structionsite.com
bazzite.com
app.pret-a-poster.io
essentialwholesaleltd.co.uk
structionsite.com
www.structionsite.com
app.structionsite.com
www.structionsite.com
app.structionsite.com
www.structionsite.com
blog.amscripting.com
www.structionsite.com
viewer-staging.structionsite.com
www.structionsite.com
www.structionsite.com
www.structionsite.com
social.structionsite.com
structionsite.com
www.structionsite.com
structionsite.com
structionsite.com
www.structionsite.com
loja.construindoosom.com.br
www.onthewaytoolson.wedding
egourmet-app.com
www.structionsite.com
www.structionsite.com
structionsite.com
app.structionsite.com
app.structionsite.com
sni.cloudflaressl.com
markmurray.co
www.studyvisor.at
create.nitemaps.com
*.structionsite.com
www.structionsite.com
www.structionsite.com
lazarcf.live
sdog.aplicacionesincontacto.com
www.structionsite.com
www.structionsite.com
app-testing.structionsite.com
info.structionsite.com
qa-20170525.prod.kalpana-test.com
go.structionsite.com
app.divdot.com
www.structionsite.com
go.bitcrew.com
qr.pslove.dev
app-staging.structionsite.com
go.structionsite.com
app.structionsite.com
structionsite.com
*.structionsite.com
servido.app
www.popctrivia.com
structionsite.com
fla.futly.top
dispatch-dev.kaptyn.com
admin.structionsite.com
www.structionsite.com

Certificate

The complete raw certificate details for smart-track-api.structionsite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286256619871151212437632055232457581637975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 13:31:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 13:31:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smart-track-api.structionsite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960178879831669178556293738334958409983545137025142273621626335629088583963237026925081758734883596492342125098656768852436158295333820718053379429374900683510287990422634431992129704587846212017723000421764928249290569101846024426017257042080324636044610796997196931815852663865549108647938354953171026234605842612861338352335760818255442030406820515024874216803524198161194202543825116612269708699157117429996162215716179149795042065927740350797323821545710769434219422411690227741687885524468089724329824106078027442220640084226147642295876012989547803943893862661194986458806127335693992685952231953293193320875832117747889203305705211659431494718906570121746954544801228191978200061651183187700881157634806501268078427533467238659578448080665126739969897635984209652506552640305351308331032802673638615538183077880200351447035579536414722510229231344182846477912240408525124133554803184371978763587343393683136717430704811662953590744580717226644814875855823156507624743234675402506686499264862912319067742619784675822701605840421507841265000803173068563104113633979132874860725952645329123552429149523512329083116921294544365136729338907970624595842932808169731971248323129762235218861443495985119058592946252482553545349401443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b71103a903b42b129ed8044bb96b7d6ca09611ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka-ui-production.structionsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka-ui-production.structionsite.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-track-api.structionsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttrackprod-10662.c66.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd88bb65e00000403004730450220101baf4c2c34a29939eaf552f35f5c3f24b1d69825382b7414eaae29ca13f5fb02210085b03332da5236bdfb351719291d4a033a57449bfc03322a080eb6d216746c1e007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd88bb7870000040300463044022055df3b01dc4f82e245ca1fbff19d97ab85fa3e07cf2bce8f5c4e97273d3fd2a4022065ef948e1edb9383d93bff9c0ec77871c804640a116a7bbb949f9cbdf96bd4eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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