smartsystemsie.iot.ubidots.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:56:23:9b:11:6d:a8:a6:75:8b:f1:31:19:72:3e:80:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smartsystemsie.iot.ubidots.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:56:23:9b:11:6d:a8:a6:75:8b:f1:31:19:72:3e:80:75
Serial Number (int): 333591218065701550758584661686806170730613
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:40:09:2f:a9:6a:76:70:be:f2:39:cb:24:b8:33:6b:6a:c7:db:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:82:0e:49:7b:10:3d:da:fc:99:e7:58:24:c3:f9:88:ac:82:b5:53
Fingerprint (sha256): 09:c2:f3:61:c8:fe:6e:5b:0f:9a:ab:b1:96:0f:34:44:c4:17:2f:09:8a:63:28:46:08:1f:a1:38:6e:2c:0b:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate smartsystemsie.iot.ubidots.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartsystemsie.iot.ubidots.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.techsensor.io
smartsystemsie.iot.ubidots.com

Other certificates including the domain name ubidots.com

(limited to 100 certificates)
www.monitoreo.arteelectronics.cl
genial.iot.ubidots.com
cert-00042-cdnedge-bluemix.akamaized.net
app2.ubidots.com
cert-00050-cdnedge-bluemix.akamaized.net
things.ubidots.com
smetro.iot.ubidots.com
cryosrv.iot.ubidots.com
ja.riws.status.ricoh.com
cert-00042-cdnedge-bluemix.akamaized.net
iot.reddsystem.com
3sense.iot.ubidots.com
deprisademo.iot.ubidots.com
chipmc.iot.ubidots.com
mantracourt.iot.ubidots.com
info.ubidots.com
industrial.ubidots.com
industrial.ubidots.com
things.ubidots.com
omicron.iot.ubidots.com
www.monitoreo.arteelectronics.cl
revealhealthandsafety.iot.ubidots.com
bees.iot.ubidots.com
mantracourt.status.ubidots.com
ubidots.com
ascpl.iot.ubidots.com
maralert.iot.ubidots.com
rckcontrolsz27.us.iot.ubidots.com
rmendez.iot.ubidots.com
omicron.iot.ubidots.com
cert-00042-cdnedge-bluemix.akamaized.net
smartsystemsie.iot.ubidots.com
cert-00042-cdnedge-bluemix.akamaized.net
uk.api.ubidots.com
maxwellandspark.iot.ubidots.com
monitor.ubidots.com
en.riws.status.ricoh.com
ice.status.symantec.com
ice.status.symantec.com
tetontech.iot.ubidots.com
estateeye.iot.ubidots.com
chipmc.iot.ubidots.com
datasense.ubidots.com
bees.iot.ubidots.com
kentu.iot.ubidots.com
symbiotec.iot.ubidots.com
things.ubidots.com
ja.riws.status.ricoh.com
info0.iot.ubidots.com
cert-00042-cdnedge-bluemix.akamaized.net
smartsystemsie.iot.ubidots.com
maxwellandspark.iot.ubidots.com
mantracourt.status.ubidots.com
maxwellandspark.iot.ubidots.com
ja.riws.status.ricoh.com
crema.iot.ubidots.com
industrial.ubidots.com
cert-00042-cdnedge-bluemix.akamaized.net
ja.riws.status.ricoh.com
danielsmith.iot.ubidots.com
ultra.iot.ubidots.com
comercial.iot.ubidots.com
mantracourt.status.ubidots.com
en.riws.status.ricoh.com
cert-00029-cdnedge-bluemix.akamaized.net
ja.riws.status.ricoh.com
dualtec.iot.ubidots.com
datasense.ubidots.com
ubidots.com
ubidots.com
things.ubidots.com
ja.riws.status.ricoh.com
cryosrv.iot.ubidots.com
cloudcair.iot.ubidots.com
estateeye.iot.ubidots.com
iot.reddsystem.com
premex.iot.ubidots.com
ja.riws.status.ricoh.com
chipmc.iot.ubidots.com
industrial.api.ubidots.com
garycook.iot.ubidots.com
ja.riws.status.ricoh.com
tetontech.iot.ubidots.com
datasense.iot.ubidots.com
ice.status.symantec.com
mantracourt.status.ubidots.com
ja.riws.status.ricoh.com
rmendez.iot.ubidots.com
ice.status.symantec.com
estateeye.iot.ubidots.com
ja.riws.status.ricoh.com
revealhealthandsafety.iot.ubidots.com
ja.riws.status.ricoh.com
iot.veto.iot.ubidots.com
deprisademo.iot.ubidots.com
iot.reddsystem.com
datasense.ubidots.com
andromediatechnologies.iot.ubidots.com
industrial.ubidots.com
mantracourt.status.ubidots.com

Certificate

The complete raw certificate details for smartsystemsie.iot.ubidots.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHLsmjcC/Y6+V830eM/I
RITSiK/w5RfLHzurlJdomMJ3zr7IMXS5OlKcPBdoJM7Q4OZQXutLD8gSLqNfx7jT
nSmuT4S2GBgc/OpODFa2PWvFIU8qgCoz9Bf6zaJt5AGRludLLpHUqb5MqBAE4twG
353yxRGvODM7GF5FGDboAyUSmKCJJ28gK181O6YgWK7AkhbETt7xNS4Ku0eEOZrR
3jmGs111fJkUnHDR2eQPfpebW/ld7WRlmws6stAiBUcqUUOk8pHuiOdAFa8xcDx9
2WdEGBS9kBLdT6j3oBRiR5yD6G4Wxp/J6xQdrT3X/xmX8wob4tdLmdWhWRrTsV/k
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333591218065701550758584661686806170730613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 23:11:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 23:11:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smartsystemsie.iot.ubidots.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22779566142949049305705749567895463724737220388569911669417247753382571974128735985642105543123031240611516441854997205660439146191669859465002450059880305181566708401959359719832505018652079065590499518057152617632188078363554099065174641780188029069223390768294036982893684770418661791345726879138259764372594796311127642869861515744341769322907212555863871162005658823741818002562107688688057175204481326048757990050304726225396231216653700220301504784056844386697117581708640640683476947819832463881583007287753106285584767735812844904960555854487620911356821523909067465616349862997381353278747786647393512973459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7140092fa96a7670bef239cb24b8336b6ac7dba7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.techsensor.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsystemsie.iot.ubidots.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e297384a20000040300473045022100e2d110268165831e4ca909c4c234fce40f76e2d57e7e05d74b9b75fa4597655b0220284a447a854d71fefeb3704059682f4de877e5bc31994a021edacf43d89f3d5f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e297384c80000040300473045022100fc06812e34dab5ed6f70afa8c467baa5600002a9286a615ab97dd50380f4f7c502207e87d4deb27e260c9428f214623fa3a2a16b638ed885aea6827296c088e0e7c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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