giftcards.astropay.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:8e:5d:0f:bc:76:23:4e:98:e8:6d:3d:77:8a:44:d1:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giftcards.astropay.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:8e:5d:0f:bc:76:23:4e:98:e8:6d:3d:77:8a:44:d1:40
Serial Number (int): 433708969035452504767445639736925868052800
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:61:7c:65:df:de:52:3f:de:c4:4f:6f:bc:24:af:03:d8:b5:aa:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:9f:09:6b:97:9b:54:36:d8:8d:f3:7d:65:8e:98:33:90:0e:4d:fa
Fingerprint (sha256): 07:e1:fc:0c:30:5d:50:57:07:f9:e8:82:4a:36:c3:9c:29:f0:7e:e5:ac:4f:29:12:48:80:ab:f7:2f:36:1d:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giftcards.astropay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giftcards.astropay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftcards.astropay.com

Other certificates including the domain name astropay.com

(limited to 100 certificates)
webapp159753.faster.es
admin.folen.ng
www.pricehelper.ru
incapsula.com
onetouch-link-stg.astropay.com
helpcenter.astropay.com
incapsula.com
app.preview.fourq.ch
www.waitlyapp.com
www.lilianadurancentrodeluz.com
merchants-onetouch.astropay.com
www.kamanja.gq
careers.astropay.com
*.astropay.com
link-stg.astropay.com
giftcards.astropay.com
www.nsljananitravels.com
share.petparents.app
alenajam.dev
incapsula.com
trade.astropay.com
chicken-dinner.com
helpcenter.astropay.com
helpcenter.astropay.com
www.trim.social
www.himalayanderive.com
hanabi.dev
orange.app.nossaff.com
incapsula.com
giftcards.astropay.com
www.axiomconsulting.ca
www.samtaaghol.com
www.humancapitalos.org
junexterminating.com
incapsula.com
www.koh.ch
services-lakeshore.smartbuildings.app
www.digiprnt.com
fichas.astropay.com
www.gooin.app
onetouch-link-tst.astropay.com
hivemint.xyz
incapsula.com
eu-taf.com
daniel.cortild.com
incapsula.com
www.photon.am
incapsula.com
link-dev.astropay.com
incapsula.com
link-stg.astropay.com
www.azu.cash
gehandicaptenzorg.cao.app
incapsula.com
*.astropay.com
cryos.net
incapsula.com
shroomfolk.io
bingo.remotesocial.app
incapsula.com
incapsula.com
incapsula.com
link-stg.astropay.com
quickserveits.in
incapsula.com
fichas.astropay.com
hvch.d1.stx.world
www.waitlyapp.com
refer.prabhucapital.com
link.astropay.com
incapsula.com
incapsula.com
onetouch-link.astropay.com
geeknuts.in
incapsula.com
www.savvysale.ca
helpcenter.astropay.com
video.emilyandnova.com
*.astropay.com
app5.firstchoicepos.com
incapsula.com
abrir.bondit.app
merchants-onetouch.astropay.com
www.studioaleksandrow.pl
merchants-onetouch.astropay.com
www.loginn.co.in
kilometa.com
liseknipt.be
fichas.astropay.com
lora-vn.page
onetouch-link.astropay.com
incapsula.com
helpcenter.astropay.com
payment-link-stg.astropay.com
ask.astropay.com
trade.astropay.com
henryandmichelle.peacockbooth.com
www.bithuis.com
www.kesarkunj.in
incapsula.com

Certificate

The complete raw certificate details for giftcards.astropay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZCNdh5nbVU3JPpNofY
0G6M6tynWTafG7YKo9A8YQRfl8PFOSSa5y12YXX1MSdICJUZsJqYf6CEyU6rBkO7
aX5CNPQonhwLXi1KiwdjHafHc0Alyjo0XNHl/89XipOwGRo0mzoFIEkDxkv6AUbF
73p4Lx8kS/AWaHvYyNqoA4wWY6bvN2rDx4t8saB7kp0jCpttJbH92gvSo37/iIe7
TdGsIEW1HGxHfKYa+aOeKtnq/7HWGaSONNlXfXb6sPT7pJGtBub8KJSBySuBk+8S
jolin0Jjz3w/uG1yYgv8kv+1shC4MhzmlKBEkmrL9S75LS46YW6lFCk7O/OkaoQO
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433708969035452504767445639736925868052800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 11:41:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-30 11:41:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giftcards.astropay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20548370380736011164533231284868548907010178351789569712799751329496865321114182213970849074623023532833805628153846763419098621613780227535325430468660000035170931921433046550778798027811163725407540127030026420476825820539056634091239777907726192291060218106085421908716595034940853562864570523141746272306133994957315058401917183247722504373558781915502020395699302239219879010265998525783217237617072852992673867736133647796864559799453531711590064966735940220096691267422207669888257982622861276594371404949630883214824399540775581824229744517306197865134594046271072899306841295686270618641660444391081666416187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25617c65dfde523fdec44f6fbc24af03d8b5aafc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.astropay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017c3bdfe1e30000040300473045022100b42beb3efa7287e6fe06f0fb5f7bdb4f023ae7229a0b35be53e3f9e6501ba732022015419643b6a6a3b3bfe3931da53c9b7e38b096853d081a2a598ec7f8aecc476b0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017c3bdfe2060000040300463044022078b7a1ed5576b02331a851505e59dd68e3843018043625b631efcd595fd7004a02203d0bcb4e719a0ceeefba2be8ab692b9050884a5e86c760c3bcaffdb6868a0e42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00290f01b0ffbec9cb292c313a6fcafed95bca0ed9e5b1a39657f154be58d8f52b62df6cf8ccf0d12562e99e38496eb5bcfd8553559d021098b2841dfa6a7f022990bc4471f44332a2e588b1e3471b8cacc58b1d0d9adf230587db8cd7bdb3893236aca6e454765fbaf3a325332775ec0d960b1137dd456ac52bf23cba9c8e55bb9fe55a93cbc8b6b722200c934765e63ef3862f085877c6a848e4c8d9a754bbde6bcf584c86c82194b430e6cce39fd1800744257130839ac5a343d3a27b183f419d4b02046ec6dd141409dd285f380db7154b9fa77ef5ceedc93a09f48e8c3db32bbbad624fd3720ef0bfeae2687d801cdd150bf10d01409a72486fb60634998a