airflow.sarisuki.com

Issued by R3

About this certificate

This digital certificate with serial number 03:2d:8b:cc:53:4e:5b:69:82:13:ca:df:ac:9a:b3:72:c5:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=airflow.sarisuki.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:8b:cc:53:4e:5b:69:82:13:ca:df:ac:9a:b3:72:c5:c8
Serial Number (int): 276835387916344299673472220205043531564488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:82:f9:1f:03:6b:d7:fc:fc:31:bb:8a:15:02:6e:1d:73:5e:44:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:f8:d1:bb:5e:ac:98:35:8f:ed:a5:a3:90:1d:4d:5d:ea:6a:0a:b8
Fingerprint (sha256): 04:d8:53:38:68:ec:88:f8:33:d5:37:e7:c0:77:58:6e:88:d4:36:d9:98:3b:ac:a4:1a:9a:fc:a2:59:95:d3:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate airflow.sarisuki.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for airflow.sarisuki.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airflow.sarisuki.com

Other certificates including the domain name sarisuki.com

(limited to 100 certificates)
team.theblaregroup.com
airflow.sarisuki.com
hr.welhunt.com
hr.intellisystech.net
people.basic.am
employee.passportogo.co.il
people.sarisuki.com
team.aat.team
hr.atc-portal.com
people.caliber.solutions
employee.passportogo.co.il
people.basic.am
hrms.brevitysoftware.com
people.basic.am
people.basic.am
people.unorthoboxed.com
rh.q14.plus
rh.digiactif.fr
workit.birger.technology
people.basic.am
workit.birger.technology
hrms.resulticks.com
people.dupleit.com
people.generictechltd.com
sarisuki.com
hrms.examroom.ai
hr.atc-portal.com
sarisuki.com
employee.passportogo.co.il
people.fidypay.com
hrms.examroom.ai
people.basic.am
people.dupleit.com
people.generictechltd.com
hr.welhunt.com
hrms.resulticks.com
rh.digiactif.fr
hr.manoanimationstudios.com
hr.atc-portal.com
sarisuki.com
sarisuki.com
people.basic.am
rh.q14.plus
zoho.yajnas.tk
welcome.prasaga.com
people.dupleit.com
people.basic.am
people.generictechltd.com
people.mangalickenterprises.com
people.fidypay.com
people.sarisuki.com
mom.5w1h.media
people.generictechltd.com
mom.5w1h.media
welcome.prasaga.com
hrms.brevitysoftware.com
people.basic.am
hr.welhunt.com
people.unorthoboxed.com
hrms.resulticks.com
people.basic.am
hrms.brevitysoftware.com
crm.ramez.co
people.basic.am
people.generictechltd.com
people.basic.am
crm.ramez.co
hr.manoanimationstudios.com
hrms.examroom.ai
people.sarisuki.com
people.unorthoboxed.com
employee.passportogo.co.il
people.caliber.solutions
hrms.resulticks.com
people.sarisuki.com
people.dupleit.com
workit.birger.technology
team.aat.team
people.basic.am
team.aat.team
sarisuki.com
team.aat.team
people.caliber.solutions
sarisuki.com
hr.welhunt.com
people.generictechltd.com
sarisuki.com
people.generictechltd.com
*.sarisuki.com
crm.ramez.co
people.caliber.solutions
hr.intellisystech.net
people.generictechltd.com
hr.intellisystech.net
team.theblaregroup.com
team.theblaregroup.com
zoho.yajnas.tk
expense.admiresty.us
people.basic.am
hr.manoanimationstudios.com

Certificate

The complete raw certificate details for airflow.sarisuki.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBzq3nVqoObHEyWIoVLT
OXvhXUOwekU1a1rEy4mEPegw40ooz0kGeV/Vrgdm/BN7v35vbdZ9Sdisal7L0RkP
PwMjmnVn5nJkKpUoiTakFV5gjb2vXq6eJR2Rn4wihnQ3KOpDtWaoDnKV2FU6/DeO
qUSBGQC8JaGDoxjk6s9enOVPyuzFnVcMITsiZLIO9B7bSHGhcCN2wF+D8F21OZ0i
lqXDUD3zNZdFQHo6NefsWgC+q/NMmInuP/bOr8QJUvpTN2BnOUrMpjPycqZokH7V
ANcAxFdLIyF2UK29Ebi+rI/KJ2LV3HucivfN5YcQZxen3Qr1O9TpErgLeiQithuO
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276835387916344299673472220205043531564488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 04:51:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 04:51:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'airflow.sarisuki.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22232201403515631441862837288868176124729604510353736771709217281501809217913787431562272927865304360099624268093565771509449119916837575052155115347339539984682262251879922474970509333866132314595628645637192618721307430331954883699604203594987236514766539453884803252858478246163946590208771269736021235115024338251021222001627146885212289819581513091828043802045336523388034758831962189605366995338044914155970606729055855239183590189539015875092631310059778030032768508029848308187670343468169625754322188138412876764493488830362879859506019052223599503273966136352256321289718618564969370708598781822758773558859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d82f91f036bd7fcfc31bb8a15026e1d735e44d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airflow.sarisuki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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