dev.api.warm.richemont.cn

Issued by R3

About this certificate

This digital certificate with serial number 04:91:4b:a7:d9:19:76:78:aa:c1:80:f5:2e:a7:8e:3d:11:27 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev.api.warm.richemont.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:4b:a7:d9:19:76:78:aa:c1:80:f5:2e:a7:8e:3d:11:27
Serial Number (int): 397890650547136560959264845198916620980519
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:10:1a:27:38:b7:da:12:c5:f6:58:54:e7:d8:e2:a9:6c:22:bf:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:fb:12:1d:2a:84:03:26:16:6b:e9:20:49:a4:fa:0a:9e:f8:ea:c4
Fingerprint (sha256): 0a:c6:1c:a0:82:77:10:d4:86:5a:0b:5a:a0:95:c4:aa:10:cf:f5:92:d7:b6:59:3f:61:1a:da:96:ac:3e:4f:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.api.warm.richemont.cn

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.api.warm.richemont.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.api.rwef.richemont.cn
dev.api.rwf.richemont.cn
dev.api.warm.richemont.cn

Other certificates including the domain name richemont.cn

(limited to 100 certificates)
careers.richemont.com
wechat-oauth.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
wechat-oauth.preprod.richemont.cn
api.rcdc.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dev.api.warm.richemont.cn
intranet.richemont.com
xianskp.rdu.quality.richemont.cn
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
nexus.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
careers.richemont.com
linemedia.preprod.richemont.com
chloefayeday.richemont.cn
www.rogerdubuis.com
www.quality.alange-soehne.com
xianskp.rdu.richemont.cn
*.richemont.cn
www.quality.alange-soehne.com
careers.richemont.com
dev.api.warm.richemont.cn
wechat-oauth.quality.richemont.cn
api.warm.richemont.cn
careers.richemont.com
xianskp.rdu.richemont.cn
xianskp.rdu.quality.richemont.cn
xianskp.rdu.richemont.cn
xianskp.rdu.richemont.cn
cn-ra.richemont.cn
linemedia.preprod.richemont.com
ws.preprod.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
ws.richemont.cn
xianskp.rdu.richemont.cn
remoteaccess.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.quality.richemont.cn
intranet.richemont.com
ws.richemont.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
preprod.api.warm.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
intranet.richemont.com
ws.dev.richemont.cn
careers.richemont.com
ws.quality.richemont.cn
search.preprod.digital.richemont.cn
quality.api.warm.richemont.cn
linemedia.preprod.richemont.com
www.rogerdubuis.com
linemedia.preprod.richemont.com
intranet.richemont.com
ws.richemont.cn
nexus.richemont.cn
kronos.richemont.cn
linemedia.preprod.richemont.com
intranet.richemont.com
www.preprod.cms-one.richemont.cn
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
ws.preprod.richemont.cn
ws.quality.richemont.cn
www.quality.alange-soehne.com
api.warm.richemont.cn
www.quality.alange-soehne.com
richemont.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
careers.richemont.com
careers.richemont.com
xianskp.rdu.richemont.cn
linemedia.preprod.richemont.com
xianskp.rdu.richemont.cn
wechat-oauth.richemont.cn
careers.richemont.com
careers.richemont.com
rogerdubuis.richemont.cn
www.quality.alange-soehne.com
rogerdubuis.richemont.cn

Certificate

The complete raw certificate details for dev.api.warm.richemont.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ZOE6NbBoH2dPvozzLk
iAZjorOk7kna/lvg324BeNAHios6LBJbqBVivtWh532V/g+K2J8YKnFlyhFCKjxg
UYAbP6MvPEDg5nxXvB9iypcnWZze0T4sfSTYW/ISCeEuIulH9T7bDY7/06S4iNUW
S/JrHe5/+Z4gSOqKPwEHro5dljwcZA5/+d9487KEMw70v9Op5l/uRLZaWmdnAFau
lVFUZlIflyYTgNKriRuYDC9YKHd3owyM0x0ywsyT729FI0ExCZaX7EgoRrXK4PVp
vE4wQZhOZRXDF3W5ZBlpIvMC15pvgNY72Vj7cI7CQSDAuvgFEIrFOJDTV5JVoBC+
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397890650547136560959264845198916620980519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 01:09:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 01:09:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.api.warm.richemont.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20658851755114784508758128330095036312853510722056387846406056775255188043261622631627871452794083540895263693076072537765731344789022264928314477757567819036078359289232327502484985492917490507102003830752153638081873504484769852227020717909167777226125816091192367380119388967286910918757436300151647627841810803049567613076419182099270437560149293861132269966458151003015733869618129850648641047715074614388554863668157154244955869929863962408297963778035035803626099446767225264108225808547512724201277151212618186747043712175778160206336688191992085231921568466039930342061292192485412420773904502488395437620977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18101a2738b7da12c5f65854e7d8e2a96c22bff6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.rwef.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.rwf.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.warm.richemont.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cb87c3c9d00000403004730450220410fe561b0bb9e911aa81f560f243f5d36d5154489a5a0707b3c5af59826d89b022100a23af71458d738748be95eee4ad3cc0409c46d522ff57fa5a02c895cd8b9fa4800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb87c3d230000040300473045022100f9460999575f6ce4fe35e88c2a7c76d06547e18e183428927c46f8304a3f61fb02201210f44aa4624c53df1606f522c0cd9cbc20b9ef4e9697fb9f0ae7e04128946a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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