registry.prod2.gravywork.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:c8:d8:2b:b3:b4:d8:77:27:cf:c0:5f:3c:43:75:ac:46 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=registry.prod2.gravywork.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ff:c8:d8:2b:b3:b4:d8:77:27:cf:c0:5f:3c:43:75:ac:46
Serial Number (int): 435488115313540144506520674985979359374406
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:d7:8a:20:08:2c:55:fd:ec:8f:cf:ba:33:d2:9e:72:3c:42:46:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:4d:24:38:19:b1:fb:12:43:41:aa:6e:3b:62:32:3f:8b:e8:5e:1a
Fingerprint (sha256): 02:d1:49:b9:b9:b3:26:73:f9:8c:fd:8e:98:ed:34:95:0d:d8:7d:74:20:69:b5:86:ce:20:db:f1:37:e7:1b:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate registry.prod2.gravywork.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registry.prod2.gravywork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registry.prod2.gravywork.com

Other certificates including the domain name gravywork.com

(limited to 100 certificates)
registry.prod2.gravywork.com
api.c2m.gravywork.com
go.qa.gravywork.com
wp.gravywork.com
gravywork.com
grass.gravywork.com
*.qa.gravywork.com
bridges-onboard.prod2.gravywork.com
go.qa.gravywork.com
gravywork.com
admin.v2.gravywork.com
gws-qa.prod.gravywork.com
gravywork.com
gravywork.com
gws-qa.gravywork.com
c2m-api.gravywork.com
*.qa.gravywork.com
gravywork.com
c2m-onboard.prod2.gravywork.com
gravywork.com
c2m-cron.prod2.gravywork.com
gravywork.com
*.gravywork.com
graylog.prod2.gravywork.com
app-qa.gw.gravywork.com
gravywork.com
go.gravywork.com
gravywork.com
gravywork.com
gravy-dmv.qa.gravywork.com
bridges-onboard.gravywork.com
www.soulutador.app
bridges.gravywork.com
*.qa.gravywork.com
gravywork.com
grass.gravywork.com
*.qa.gravywork.com
c2m.gravywork.com
wp.gravywork.com
bridges-web.prod2.gravywork.com
admin.v2.gravywork.com
grass.gravywork.com
gravywork.com
*.demo.gravywork.com
*.qa.gravywork.com
gravy.work
gravywork.com
gravywork.com
matomo.prod2.gravywork.com
gravywork.com
wp.qa.gravywork.com

Certificate

The complete raw certificate details for registry.prod2.gravywork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntehd9B0mHkBIoYtMXb
Pcy8XdqPPsUWHWUMv5+UFxGF7DpaeE5JyDoCFL/E2mU7QgxUNLZHHHiPmSl1JYnF
4mlfy8CAYLbc/JIN3iwQr6v0Su9zkjNIMC/WLTt5MpRSJnMRGVCMKl8d7k6QN1G0
BN/vrHUDNhBoZHFQg1vyG4NOXbz1xZd/altTHlZHWDesP6omeoJrQp3tnwCXgEZG
7q/naCzp9rYaWpItWZFBuQ8dLR/XEFKy5P6mr/jJR0W6KLxId/G6Isu7qsPY9/oP
Rru5xbwiM82DXKnLd/ki27DPJNy05uLw4sRG4v7b/3aYBYKmxxw+abMUkRSLwLv5
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435488115313540144506520674985979359374406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 14:42:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 14:42:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registry.prod2.gravywork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25056020018079260025336892200085184395057409105823816719950108981744599509463959613784105740824354797764912781608252734532942117001606798797514652958465328467289913700842751986529846678325170464943830974267723661300958310190091376519822861841572071552933686494394822838544955643536945770149165676103274011672031758376191273716976583941699537193821814123269850479208147839596268461919140012604972146829177589508342963526758435158158540689600199341143490646099179177653738658686996691280068456311745406101879523528276122955832084285688513958496035556488070775515610193923534445047958935808965591787918633202806014343569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ead78a20082c55fdec8fcfba33d29e723c42466c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.prod2.gravywork.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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