apic.ai

Issued by R3

About this certificate

This digital certificate with serial number 03:8b:e0:2d:28:af:9c:fb:58:b2:b9:2b:79:c7:75:9c:8d:d1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apic.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:e0:2d:28:af:9c:fb:58:b2:b9:2b:79:c7:75:9c:8d:d1
Serial Number (int): 308934088346915537690895548563723212590545
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:84:2f:8f:62:3a:b9:9c:2c:db:69:06:a9:1c:dd:67:27:77:4c:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:9e:86:2b:91:3f:16:fd:03:32:98:04:c6:00:81:ab:16:4a:84:d3
Fingerprint (sha256): 0d:c6:20:41:a7:b8:28:57:08:d8:0d:20:d7:7d:59:31:88:db:72:1e:ca:02:a9:61:ea:4e:6f:e8:70:0e:55:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apic.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apic.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apic.ai
www.apic.ai

Other certificates including the domain name apic.ai

(limited to 100 certificates)
www.apic.ai
app.relatosmagicosancestrales.com.co
apic.ai
staging.goruda.xyz
www.apic.ai
wacv20.apic.ai
morningluck.com
idl.mobileforst.com
shop.apic.ai
apic.ai
www.apic.ai
www.bradshawandson.net
www.apic.ai
apic.ai
apic.ai
apic.ai
jesseandjosh.com
terminator.sanbao.app
app.relatosmagicosancestrales.com.co
apic.ai
retail.sellia.com.mx
link-producer.xtrea.mr
wacv20.apic.ai
www.ezclo.net
aerzte-fuer-aerzte.ch
apic.ai
apic.ai
wacv20.apic.ai
www.veganpotluck.ca
www.analyzee.io
apic.ai
apic.ai
apic.ai
apic.ai
shop.apic.ai
www.apic.ai
apic.ai
apic.ai
apic.ai
apic.ai

Certificate

The complete raw certificate details for apic.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXpv+fEdeQ2Jj1rCeBmr
24F8HY8UC7P7WmjlbMqsLt2vWnKyrdVIQrnbxtLy9FhBGHTHer18C614+kwmSAz5
X6ibYoLGaaIyTrL6Hs0FzjLuDiNomSRds3YBP7iiRnhhx9odRPFlF+9sm7/vDkkv
GcJ9ZV6sInQxvSrYlDzhWA3qkpKM+GLOoId1UhdVSMJ0D6hBaBoTlBjWyToB6PyP
OwsYjuzB6w+9v7yWxAunzNg9BRrSdf5Jbnh+b2VSI7bxWy7nx3LSAPpgGY68U12h
1l/YbFEnmTU3LdP1qzynXbFdL7h3SD16Di+UfRKU4mqYis2SvUm+Ptsl9LgQGS+P
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308934088346915537690895548563723212590545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 10:16:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 10:16:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apic.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21394649675181173690194073710345441346782450727995189075571409458325451595193434779387703218040885243701743565879234650882477217381397927352157803126704454789459665136018730700142078316401745085585186394259296680170163857971964230855382406028787416916836577936408675403351797806888109523839255362219486730329839554144015629315002812826626552714793467993833710455459331594267364071747098360831056146854634414299066672281042821343697373049885838123003561445471965241622171465114418214063195669869135994487633750028750754249761650557210076905471505137179316090352434458850367874131190650104599556369742979434617968234471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64842f8f623ab99c2cdb6906a91cdd6727774cab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apic.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apic.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad65b19a70000040300483046022100fd0779263b8605f0fc2551572bce4f2fcdca34455f9c4363fe98f47a794aa6c80221009cdd43c3feaece352d19f0b40d222c361ce8c3aaa1d89ede573d14de762cd89f007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ad65b19d9000004030046304402201b3c7d887eb08f920a14f572bc0f9149c60bb084c8b4629b7ab22b4619a4d10d022015b317207190fd6761d0a4a5615a070bb106d158117d6c537a349e22c59d53db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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