www.apax.com

Issued by R3

About this certificate

This digital certificate with serial number 04:24:c2:7f:cc:d8:ad:d7:a6:a7:2b:eb:ba:56:a9:be:fc:df was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.apax.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:c2:7f:cc:d8:ad:d7:a6:a7:2b:eb:ba:56:a9:be:fc:df
Serial Number (int): 360957842743856722734398026312724342832351
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:51:37:07:a1:6d:b1:10:75:c7:b0:b2:ab:fb:a0:a4:9d:6c:a1:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:8d:fd:13:9a:e4:b3:b5:66:31:d0:e6:25:76:fd:0b:4a:ce:30:93
Fingerprint (sha256): 08:86:ea:a6:b9:8c:f7:cb:80:e5:8c:0f:06:c4:0c:75:07:8d:c3:ea:4c:32:d9:8e:3a:b5:fc:d1:3b:22:aa:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.apax.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.apax.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.apax.com
www.apax.us.com

Other certificates including the domain name apax.com

(limited to 100 certificates)
extranet.apax.com
feedback.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
insights-digital.apax.com
spendinsights.apax.com
APX65PEXIPCONF.apax.com
ervaring.nedvice.nl
apx66ee.apax.com
portfolio.apax.com
ervaring.nedvice.nl
origin.apax.com
apax.com
insights-digital.apax.com
origin.apax.com
origin.apax.com
insights.apax.wrvc.co.uk
origin.apax.com
cosign.apax.com
www.apax.com
insights-digital.apax.com
origin.apax.com
spendoepinsights.apax.com
shvpn.apax.com
event-submissions.apax.com
insights.apax.wrvc.co.uk
sslvpn.apax.com
extranet.apax.com
event-submissions.apax.com
mobile.apax.com
ervaring.nedvice.nl
apg.apax.com
www.apax.com
www.apax.com
apax.com
ervaring.nedvice.nl
apax.com
pages.apax.com
feedback.apax.com
cosign.apax.com
sslvpn.apax.com
ervaring.nedvice.nl
apx66secops02.apax.com
APX65PEXIPMGR.apax.com
sslvpn.apax.com
spendoepinsights.apax.com
apax.com
origin.apax.com
guest.apax.com
www.apax.com
digital.apax.com
extranet.apax.com
www.apax.com
www.apax.com
digital.apax.com
feedback.apax.com
spendoepinsights.apax.com
spendoepinsights.apax.com
origin.apax.com
feedback.apax.com
extranet.apax.com
extranet.apax.com
aipadminuat.apax.com
sip.meet.apax.com
webmail.apax.com
apax.com
feedback.apax.com
ervaring.nedvice.nl
spendoepinsights.apax.com
ervaring.nedvice.nl
aipadmin.apax.com
apax.com
apax.com
ervaring.nedvice.nl
spendoepinsights.apax.com
remote.apax.com
spendinsights.apax.com
feedback.apax.com
extranet.apax.com
insights-digital.apax.com
apax.com
insights-digital.apax.com
APX65PEXIPCONF.apax.com
spendoepinsights.apax.com
apax.com
feedback.apax.com
insights-digital.apax.com
apax.com
www.apax.com
webmail.apax.com
shvpn.apax.com
*.apax.com
ervaring.nedvice.nl
*.apax.com
apax.com
event-submissions.apax.com
pages.apax.com
spendoepinsights.apax.com
spendoepinsights.apax.com
origin.apax.com

Certificate

The complete raw certificate details for www.apax.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo2yLY5sIhKFkyNw76O9
LL97Ol6lXkXjstH4dL3N11L7tR7dW7+3JJYHEMqqE3pwE2du0Mst2uV2EEHDZAVT
3agZw9TBAR03aWvHF2gZJD48hY9Es/6zxGSB0OQK5lYkTVX4UDJYE1o9d3IulC9o
6jFr9yRB+JJY30adc3b08+idCV5poOzMK6hmRTZaIGEC7gwB5mY3eU3JPBwelT+/
s8sDHU4b2FpqvboQhQPjlh5MKN4GGPLjIusxdcTBetoemqeq7TFzqD+tAcLgr4Gg
YG0n+BVQXiJvsputdP4oBC1bh990BXNJ1nywNJyqvU+40a/jyKaocgDbhpB/gk/K
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360957842743856722734398026312724342832351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-11 13:36:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-09 13:36:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.apax.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21530384749793413226910962480027464184953866941431385054857496624934946533044362203736636065557707362721347956890853305223377415523988009131886362434581338977148364704207894177563759860898931994008699724198689621738821458013099672805079651149610826341967329436357651947223845374693834338976751818643134414201983852426054222105898313743936068605003627571058225854435180437137755893543625771767382867852341794746549562734715508820529143338617246149632503994711234188923958580201337252876091262005357336670530224635275333683275971165044340152805438732638956279006619999802214419143285325336944525194016552297823195875881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f513707a16db11075c7b0b2abfba0a49d6ca10c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apax.us.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017b35a481ce00000403004830460221009eaccaa67a59f50b470d13d5b9b701ac955513c979216acca5e6df40eefeff5b02210085758db45db5a673af52351b199b5bfaa238f973feec54be31d4c66b41a3f8fb0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017b35a481f30000040300483046022100d623ed1f10243d87feb42684ec026bfd5485e9af04c60b136e8369e418468ca4022100842bdc1ba1ee945dc186b698fd08fc989db661807a9c4ecef3c2018c67cc1236
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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