retool.rappi.com

Issued by R3

About this certificate

This digital certificate with serial number 04:87:51:23:cd:94:1b:f9:b9:f2:cb:47:09:97:78:ee:a3:d8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=retool.rappi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:51:23:cd:94:1b:f9:b9:f2:cb:47:09:97:78:ee:a3:d8
Serial Number (int): 394495116629044700855337755268805972370392
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:47:38:20:d9:13:d0:46:e5:e4:6d:e4:f7:5f:01:a0:8b:30:d5:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:ca:0a:df:5a:8e:22:b4:b2:91:40:6f:22:d8:7a:05:ad:4f:75:08
Fingerprint (sha256): 05:8d:24:d7:ad:89:15:2b:fd:2d:a7:3f:64:f3:25:47:40:4b:45:a6:7b:fb:67:4f:cd:f7:ec:85:e9:bd:d3:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate retool.rappi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retool.rappi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retool.rappi.com

Other certificates including the domain name rappi.com

(limited to 100 certificates)
auth.4business.dev.rappi.com
*.mxgrability.rappi.com
politicasinternas.rappi.com
co-ci.ops.rappi.com
nxt.camp
devops-devops.jhub.dev.rappi.com
*.dev.rappi.com
rappiscore.rappi.com
travel.rappi.com
rappiscore.rappi.com
status.rappi.com
login-integrations-manager.rappi.com
dev.rappi.com
*.rappi.com
promos.rappi.com
liamwalls.co.uk
promos.rappi.com
*.rappi.com
cpgs-ds.jhub.dev.rappi.com
cpgs-ds.jhub.dev.rappi.com
retool.rappi.com
*.rappi.com
rappiuniverse.rappi.com
promos.rappi.com
promos.rappi.com
astro.dev.rappi.com
*.security.rappi.com
citibank-se.dev.rappi.com
ops.wp.dev.rappi.com
login-integrations-manager.rappi.com
rappiscore.rappi.com
www.redmotoshn.com
negocios.kanjea.app
al-bitcoin.com
*.staging.rappi.com
rappiscore.rappi.com
auth.4business.dev.rappi.com
*.grability.rappi.com
devops-devops.jhub.dev.rappi.com
www.nate-fleming.com
politicasinternas.rappi.com
*.grability.rappi.com
myplaylist.info
citibank-se.dev.rappi.com
*.dev.rappi.com
rappi.com
promos.rappi.com
legal.rappi.com
design.rappi.com
promos.rappi.com
co-ci.ops.rappi.com
design.rappi.com
www.mdoch.com
retool.rappi.com
*.grability.rappi.com
magical-lab.com
*.grability.rappi.com
rappi.com
promos.rappi.com
sre-stress-testing.dev.rappi.com
legal.rappi.com
fs.security.rappi.com
go.rappi.com
*.staging.entrega.rappi.com
darkstore-api.dev.rappi.com
vpn.rappi.com
login-integrations-manager.rappi.com
login-integrations-manager.rappi.com
*.rappi.com
fluttery.co
*.staging.entrega.rappi.com
status.rappi.com
retool.rappi.com
*.dev.rappi.com
citibank.dev.rappi.com
dev.rappi.com
promos.rappi.com
wonderroot.musterd.io
*.rappi.com
demo.guestx.com
rappiscore.rappi.com
banein.com
games.2sgamix.com
sre-stress-testing.dev.rappi.com
promos.rappi.com
tiranga.realityreach.com
exito-billing.dev.rappi.com
citibank-se.rappi.com
rappiscore.rappi.com
politicasinternas.rappi.com
astro.dev.rappi.com
politicasinternas.rappi.com
promos.rappi.com
cpgs-ds.jhub.dev.rappi.com
help.partners.rappi.com
mykoriak.com
auth.4business.dev.rappi.com
switch.mangologic.com
www.sqco.app
retool.rappi.com

Certificate

The complete raw certificate details for retool.rappi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzs1skH4Kx52J7cz4Z44
7BYxjj0qme9yk1c/r3LgUT4Me2ZbqQXUzrrTRJ+A3rmdm8IiwNrHv1HasbLwON/9
glLFR2Q7j+JB/H68hizRcjT7MHNb6DRhUEq8q4VZUOGDpiRZHpT2xeFkNxEDqnwg
nAaAmoorzqTlLK2/6bCeHGLWiRTUKCfCfU8flcUIXkgOhbJneewbvjeWLQVXSklE
iAm3HgRmsYC35Y5kjeaC5LVxA2yi1c1n7+q0V2bTGS1+BGG5hetisPxV1hvPlkto
w1jvlDrgLUPRVPFOElJIeov6ezXZGCoawt+6ndbkK04cRtAcrnVt3NAxWb5idH0/
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394495116629044700855337755268805972370392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-12 16:12:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-13 16:12:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retool.rappi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26160526544516418844642381506521115092629567069216354939095544541442779470116942558844509940316033045543452825405843608893802658491967979434636327995418561120809847591694571301800148888988703250692526650163441189186747558136053432869502372246956171302173532136107316423749525289470366393281217880810285455193566308175400068334450382480466515644857066961109787532244589932153203978740948876008782268172077509924445918801882300813284113882220108111941741840940915655644327750789600721117170764354213665917800866989744551138561741101974958425417376865227048069649828924136926361548349587827639102360723701727629510786913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f473820d913d046e5e46de4f75f01a08b30d54f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retool.rappi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017eeeebaa6b000004030046304402207012d70e4dbd8dce840112a854bbe026be16888e1a9794e189165bccffa903e602203aa871627f3d043c079e4d0e803cb695a30f3af0a7ac3e9e77576677dd6066f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017eeeebaaa30000040300483046022100add22c27c3a27f8eb8a0b1f1deb008d4ae1aab86df5375edb808ac49ce69ffd602210092e5992393214ebe49c8b77d323ec63ead0e1d42af325745cf471547a24474ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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