apishadow.cm.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:8a:f3:33:bc:35:4c:b4:3c:cd:dd:5d:c4:26:32:b3:0c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apishadow.cm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:8a:f3:33:bc:35:4c:b4:3c:cd:dd:5d:c4:26:32:b3:0c
Serial Number (int): 319709838779630439319630529429516183581452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:b8:30:b2:e7:aa:0b:16:6e:78:bb:84:42:93:b7:53:7b:e5:bd:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:e9:fd:a5:65:4a:ee:57:b6:af:88:24:cf:03:21:ae:ab:81:99:e8
Fingerprint (sha256): 02:ea:12:73:ed:35:fa:6a:fe:a1:f2:1e:2b:1e:b3:c6:b3:cb:99:d1:02:77:86:91:74:7c:8c:7f:75:a3:b1:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apishadow.cm.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apishadow.cm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.cm.com
apishadow.cm.com

Other certificates including the domain name cm.com

(limited to 100 certificates)
receipt.ecr.cm.com
02.turn.voip.cm.com
my.cm.com
two.cm.com
gw.messaging.cm.com
iaassupport.cm.com
annualreport.cm.com
cm.com
fortifystats.area1security.com
workday.cm.com
itoperationswiki.cm.com
fortifystats.area1security.com
static.cm.com
piwik.cm.com
01.webrtc.voip.cm.com
learn.cm.com
apishadow.cm.com
dbo.sandbox.pay.cm.com
webmail.cm.com
kiosk.ecr.cm.com
conversational.cm.com
conversational.cm.com
02.webrtc.voip.cm.com
services.sandbox.pay.cm.com
01.turn.voip.cm.com
dbo.sandbox.pay.cm.com
itsupport.cm.com
02.webrtc.voip.cm.com
imob.oceanoazul.net.br
shadow.www.cm.com
two.cm.com
pin-terminal-api.acceptance.ecr.cm.com
*.pay.cm.com
rdgw.cm.com
receipt.acceptance.ecr.cm.com
pages.cm.com
weather.bowvie.app
03.turn.voip.cm.com
itopssupport.cm.com
api.cm.com
cm.com
tools.cdp.cm.com
inspires.cm.com
workday.cm.com
cdn-1.messaging.cm.com
u4ftest.cm.com
gw.messaging.cm.com
crm.cm.com
static.cm.com
annualreport.cm.com
*.pay.cm.com
router.cm.com
annualreport.cm.com
pos.ecr.cm.com
fortifystats.area1security.com
01.turn.voip.cm.com
cdn.cm.com
jobs.cm.com
receipt.ecr.cm.com
fortifystats.area1security.com
two.cm.com
solutiontest.cm.com
pages.cm.com
cms.cm.com
preview.cm.com
fortifystats.area1security.com
fortifystats.area1security.com
editor.cm.com
business.cm.com
sni.cloudflaressl.com
annualreview.cm.com
cm.com
cdn.cm.com
preview.cm.com
two.cm.com
cms.cm.com
pos.ecr.cm.com
editor.cm.com
salesoperations.cm.com
fortifystats.area1security.com
annualreport.cm.com
api.cm.com
api.cm.com
rdgw.cm.com
itsupport.cm.com
two.cm.com
itopsjira.cm.com
paasjira.cm.com
two.cm.com
itsupport.cm.com
03.webrtc.voip.cm.com
itopssupport.cm.com
cdn-1.messaging.cm.com
workday.cm.com
02.turn.voip.cm.com
dev.linkafrica.28east.co.za
api.cm.com
authorization.ecr.cm.com
cms.cm.com
management.ecr.cm.com

Certificate

The complete raw certificate details for apishadow.cm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYSS9OUjG+D/TxTifoA/
XGOQewy2C6N/Qb/PibxONhKqivXJ0EMptzWydHrjbuY9fxPqn547DScz+r8LiKX7
Xf0+XBKLNjWEh/fR/jF5mupX7w+ixHdkxCotXcBhGQP5NX9iWDcIVyyGwpn7Rl9w
VmQW+RpITDmFOC0DXzdKiLt70cbvo8gsYGtFLZoYTiOiaRNCH/KHOOGqg+fXtuFl
YtXTtRUeX/EmLNgWpuInz+HOkDF9KxVgi2YmEH4UMfFwe0L/c8JHdEFL5dj6yn7o
UBxgwa3oCW1Cq47th7JR/l5Jd1khN5yKOLWL/k3XHXw9upCRiLDDSv5p2JCgUS4T
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319709838779630439319630529429516183581452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 20:49:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 20:49:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apishadow.cm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25439273998437128948548316226293298859777919654238586346360058722276941572733100861932519310572721821396390444748996791967334704564331418039811231848332992204556539139142924905418012741665428191176210756086940144891558176451335704894334793653454607199291066007599004238908914610827718437270399668751557883248683873650657319861962816498460761570068493264148999521200823282189023520462931850954738262917101873518180274121696614615636340064652246000167178496516710634277516613633709205019937199332489392951799918516085942258482213633892405249184152316799523660169551630116208836478992205539920095326322881383256969581391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecb830b2e7aa0b166e78bb844293b7537be5bdfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apishadow.cm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181a72414c60000040300473045022100c5f75525c22252cfb8e044586b3372df593e0b70625455a95bfa44534a9a9f9b02203e47290d1a49ccf18916f2952494237406c308005a5a82ad65f5198c52280cc200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181a72414db0000040300483046022100b056ebc8fcedad90c44f3ad584322da8989551914020f3df863ee611df2c6341022100b6467666d439ef1af1eb6f3fb73cd14cadba464744b33c77ffbeb4c8e3f2c541
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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