synapse.demo-s.fed.rocket.chat

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:fe:3d:b8:e7:69:a2:ea:2b:bb:90:d7:3e:a5:59:d0:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=synapse.demo-s.fed.rocket.chat

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:fe:3d:b8:e7:69:a2:ea:2b:bb:90:d7:3e:a5:59:d0:af
Serial Number (int): 315439416160124521913844715153762238976175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:33:cf:c1:da:6d:81:88:4c:71:da:b7:2d:02:4a:1f:0f:d7:b3:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d3:83:50:9d:82:bd:da:0b:13:4d:d6:e2:13:3f:81:49:14:2b:e2:c6
Fingerprint (sha256): 01:ce:64:38:2b:f9:70:ce:bf:f0:4f:31:81:96:6d:4a:2f:21:f3:a5:28:c8:a8:1d:24:43:fb:35:32:f4:de:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate synapse.demo-s.fed.rocket.chat

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for synapse.demo-s.fed.rocket.chat

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synapse.demo-s.fed.rocket.chat

Other certificates including the domain name rocket.chat

(limited to 100 certificates)
forums.rocket.chat
cdn-download.rocket.chat
cdn-www.rocket.chat
*.rocket.chat
pr-25957.qa.rocket.chat
synapse.demo-s.fed.rocket.chat
cmd-ctrl.cloud.rocket.chat
monitor.test.cloud.rocket.chat
svc-prom.cloud.rocket.chat
mkt.workspaces.staging.cloud.rocket.chat
*.rocket.chat
wti-lc-premium.rocket.chat
cdn-demo.rocket.chat
pr-25632.qa.rocket.chat
pr-25312.qa.rocket.chat
pr-27205.qa.rocket.chat
omni.rocket.chat
metrics.premium-use2-1.cloud.rocket.chat
cdn-www.rocket.chat
pr-26138.qa.rocket.chat
pr-26318.qa.rocket.chat
cdn-www.rocket.chat
workspace52738.workspaces.staging.cloud.rocket.chat
*.rocket.chat
www.rocket.chat
cdn-www.rocket.chat
pr-26147.qa.rocket.chat
cdn-www.rocket.chat
pr-26832.qa.rocket.chat
cdn-demo.rocket.chat
workspace53692.workspaces.staging.cloud.rocket.chat
avus.rocket.chat
element.dev.fed.rocket.chat
thebrand-x.brandedonline.com
handbook.rocket.chat
vb-1.jitsi.cloud.rocket.chat
voipbbb.dev.rocket.chat
workspace32794.workspaces.staging.cloud.rocket.chat
pr-25570.qa.rocket.chat
pr-26232.qa.rocket.chat
workspace69541.workspaces.staging.cloud.rocket.chat
www.rocket.chat
synapse.tests-a.fed.rocket.chat
*.rocket.chat
cdn-demo.rocket.chat
avus.rocket.chat
forums.rocket.chat
jobs.rocket.chat
pr-25776.qa.rocket.chat
zoho-bridge.cloud.rocket.chat
logs.premium-use2-1.cloud.rocket.chat
monitor.cloud.rocket.chat
rocket.chat
workspace85601.workspaces.staging.cloud.rocket.chat
pr-26558.qa.rocket.chat
metrics.dedicated-sae1-dpesp.cloud.rocket.chat
my.staging.cloud.rocket.chat
forums.rocket.chat
cdn-www.rocket.chat
handbook.rocket.chat
community.rocket.chat
logs.premium-saas-sae1-1.cloud.rocket.chat
checkoutjana02.workspaces.staging.cloud.rocket.chat
pr-26720.qa.rocket.chat
pr-23971.qa.rocket.chat
pr-24908.qa.rocket.chat
loki.stg.cloud.rocket.chat
thebrand-x.brandedonline.com
workspace79985.workspaces.staging.cloud.rocket.chat
pr-26986.qa.rocket.chat
bbb.rocket.chat
*.rocket.chat
pr-25723.qa.rocket.chat
rocket.chat
metrics.svc.cloud.rocket.chat
pr-24998.qa.rocket.chat
argocd.meta.cloud.rocket.chat
pr-24483.qa.rocket.chat
cdn-demo.rocket.chat
testprorated01.workspaces.staging.cloud.rocket.chat
careers.aelieve.com
avus.rocket.chat
logs.dedicated-sae1-dpesp.cloud.rocket.chat
www.rocket.chat
pr-24121.qa.rocket.chat
workspace38398.workspaces.staging.cloud.rocket.chat
thebrand-x.brandedonline.com
jobs.rocket.chat
thebrand-x.brandedonline.com
pr-24322.qa.rocket.chat
workspace11181.workspaces.staging.cloud.rocket.chat
metrics.use1.cloud.rocket.chat
matrix.demo.fed.rocket.chat
pr-27111.qa.rocket.chat
pr-26689.qa.rocket.chat
workspace19917.workspaces.staging.cloud.rocket.chat
cdn-download.rocket.chat
pr-24233.qa.rocket.chat
pr-24936.qa.rocket.chat
pr-26130.qa.rocket.chat

Certificate

The complete raw certificate details for synapse.demo-s.fed.rocket.chat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315439416160124521913844715153762238976175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 22:56:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 22:56:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'synapse.demo-s.fed.rocket.chat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950370015046244710219381075739882260221816416962619460274748715935510542586847652381096769535578140533065268877379323489025179432468254988021469298029736567693723744472043026464490393250018020817351538665353013891621974122662726734639353519441027292315820138475417548540638449104823446989243939549348546528298774275494873451108681094040677202576228497141676225807572062700668330844066478746685684063453291674844587578658627110748753403868054361282810192590893602055734988342676465521421566932948965507375259951814965592925524349667838474627110120321645047501699711162445884658651262930731303262190212156411415721330348408993709119066070337023197788756179683857003934830552433687911386958641704386285462581971718995266011835056780241546231110545992179130993218763283374646620232418270000895740610004690918929710511171369845995447417868627684421787781806032010480804890519279468331234929486745874060119743627697229792623786889364503321754586369487134290958862957450023140786457349037968291043632989624881522068370458210927269346026984515457905413093177605141264198446248999479173969885306414017951862392267975290942549596797104652102074964218174635844193559861006511153422762515440498410422394635221230844692240998379079375346385702759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a133cfc1da6d81884c71dab72d024a1f0fd7b3ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synapse.demo-s.fed.rocket.chat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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