snowabudhabi-preprod.maf.ae

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:47:18:30:03:9d:e9:15:6f:94:dd:4d:bf:fc:ee:1d:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=snowabudhabi-preprod.maf.ae

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:47:18:30:03:9d:e9:15:6f:94:dd:4d:bf:fc:ee:1d:00
Serial Number (int): 318258513847745013591403419276350027865344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:f2:3e:62:24:08:05:56:88:81:57:1d:5e:f3:87:bb:af:95:a5:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:bc:46:7b:00:d5:6d:7a:67:6e:7b:cc:ab:5a:4a:ec:e6:97:6f:22
Fingerprint (sha256): 0a:21:bb:16:b0:28:ef:60:92:3d:84:01:f1:12:c4:ce:0e:df:56:c7:07:28:29:55:9f:c1:58:f1:83:09:d4:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate snowabudhabi-preprod.maf.ae

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for snowabudhabi-preprod.maf.ae

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snowabudhabi-preprod.maf.ae

Other certificates including the domain name maf.ae

(limited to 100 certificates)
*.dev.grid2.maf.ae
snowabudhabi-aut.maf.ae
api-share-dev.maf.ae
that.majidalfuttaim.com
*.cvm.maf.ae
d4-aut.maf.ae
www.majidalfuttaim.com
mportal-stg.maf.ae
*.grid2.maf.ae
mportal.maf.ae
ssl385337.cloudflaressl.com
*.maf.ae
mdm-api.dev.grid2.maf.ae
that.majidalfuttaim.com
mesa4.aylsoluciones.pw
smbu-api.maf.ae
www.majidalfuttaim.com
maf.ae
*.dev.grid2.maf.ae
api-share-sandbox.maf.ae
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowabudhabi-preprod.maf.ae
itsupport.pando.ai
that.majidalfuttaim.com
that.majidalfuttaim.com
snowoman-stg.maf.ae
that.majidalfuttaim.com
uniforms.maf.ae
ssl385338.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
*.dla.maf.ae
*.dev.grid2.maf.ae
mafsdp.maf.ae
d4.maf.ae
mportal.maf.ae
that.majidalfuttaim.com
maf.ae
api-holding-dev.maf.ae
servicedesk.oneontacsd.org
www.majidalfuttaim.com
sharecmsheadless-auth.maf.ae
maf.ae
uniforms-auth.maf.ae
api-share-internal-fab-uat.maf.ae
sfsharerewards-stg.maf.ae
sharecmsheadless.maf.ae
maf.ae
*.governance.maf.ae
www.majidalfuttaim.com
www.majidalfuttaim.com
helpdesk.admix.com
*.maf.ae
snowabudhabi.maf.ae
www.validationportal.maf.ae
uniforms-auth.maf.ae
helpdesk.dpsgroupglobal.com
maf.ae
snowabudhabi-preprod.maf.ae
that.majidalfuttaim.com
uniforms-auth.maf.ae
api-share-prod.maf.ae
mportal-auth.maf.ae
*.maf.ae
snowabudhabi.maf.ae
*.grid2.maf.ae
servicedesk.metro-inet.us
snowoman-stg.maf.ae
lecitsupport.maf.ae
that.majidalfuttaim.com
hype.maf.ae
snowoman-aut.maf.ae
that.majidalfuttaim.com
d4-stg.maf.ae
sharecmsheadless-stg.maf.ae
snowabudhabi-preprod.maf.ae
ssl385338.cloudflaressl.com
snowabudhabi-preprod.maf.ae
snowabudhabi-aut.maf.ae
maf.ae
uniforms-auth.maf.ae
maf.ae
api-ventures-prod.maf.ae
*.maf.ae
that.majidalfuttaim.com
d4.maf.ae
snowoman-aut.maf.ae
www.majidalfuttaim.com
destek.coreway.com.tr
receiptworx.maf.ae
that.majidalfuttaim.com
uniforms-stg.maf.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
api-share-internal-fab-dev.maf.ae
www.majidalfuttaim.com

Certificate

The complete raw certificate details for snowabudhabi-preprod.maf.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oPiVN41y/tdvN3jU5sn
0Nej/tRdxpSrMxE0mCn80tweNo0g70zGwnaa/5OlvGzD0qWJ5SPZDUWseKMF/htu
OowagZsUwZh66SJO1dfthV+b1BcEIn01oSTGpDG0JU6iYCUGgC4qbXrG/mR0qgsy
zskjxVgIfBgv+YIiEFV3rIsDd6Pak0dNO/3IeD+x0zfb5wuBx75BujyT7nXKxmNX
Ay2LnZw4+RFjxM9xvz/SBjoZ4yu8UDl2T0sINw/BiVohjUPJtzq92OP9gTbD61qq
73byDBAHPfUbxB48XNf5DdEe42dbiJEiO/GGe0Qr5PfSX5nWYFq0uXeJylHGlIuZ
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318258513847745013591403419276350027865344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 06:53:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 06:53:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'snowabudhabi-preprod.maf.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26575078520140358320192741500643245745371075067598687414354400089097631591466484545896273953761526870833420341057647941972101147412917281547448359618934081187607368439197311958354310793696404177521052947894345294356308168012757209427633513264743454746583641541259017894628011394099263834093187120563432589174888169577023530846462118698901522800767081916038015598086848977961429297547003770375675991399911099211713796966934520894023652352850388591639781247060703582067649586779604954639394215038049998771221081057849950489484487644520515293216475863157196837633130231963413050844879124539764655848596132094585521019333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60f23e62240805568881571d5ef387bbaf95a587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowabudhabi-preprod.maf.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181288e44540000040300483046022100fee86b8b2b9cbd7e660b3d529368bd9a96969410d9cb62db9f4fca6230875eb1022100be6db8fb00d169b47a3d54202155b9795f0a268ad1a9d5249118a45666841fc50076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181288e441f00000403004730450220272107f30bc1f7cd5ceb3c3984175b04cffff4035a6abb63ff798e1f74aa7994022100b0e8cde0e18b6afe78fc144a47c5fe8c4f15555570b1dabf9051869bd3a37cc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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