api.prod.us-east1.manual.graduway.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:cb:b5:61:9c:29:9e:c4:eb:d2:4e:52:af:9f:fb:2f:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.prod.us-east1.manual.graduway.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:cb:b5:61:9c:29:9e:c4:eb:d2:4e:52:af:9f:fb:2f:fb
Serial Number (int): 345997659860315417336842249690935163826171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:82:e8:28:40:9a:0a:bf:bf:ee:6b:c7:64:d3:c5:59:f2:61:45:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:04:c2:13:b4:90:31:ef:6f:6d:93:ce:e0:10:30:e2:72:5c:9f:91
Fingerprint (sha256): 11:0a:36:45:01:dd:55:75:8e:d6:e8:c6:08:8d:de:91:49:d8:e5:83:8f:c2:fa:cf:b4:f0:b4:0e:da:0c:65:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.prod.us-east1.manual.graduway.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.prod.us-east1.manual.graduway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.prod.us-east1.manual.graduway.com

Other certificates including the domain name graduway.com

(limited to 100 certificates)
graduway.com
bg.prod.us-east1.manual.graduway.com
superadmin.prod.northamerica-northeast1.manual.graduway.com
alumni-haut-lac.ch
tfsconnect.manual.graduway.com
en.riws.status.ricoh.com
brightoncollegeconnect.com
uclaonetest.manual.graduway.com
uoftengineeringtest.manual.graduway.com
demobeardown.manual.graduway.com
uoftengineeringtest.manual.graduway.com
graduway.com
baalumninetwork.com
cumbrianetwork.global
uclaonetest.manual.graduway.com
sayfcconnect.com
aveconnect.org
en.riws.status.ricoh.com
alumniraport.com
uclaonetest.manual.graduway.com
rocketchat.graduway.com
alumni.ashoka.edu.in
graduway.com
api.prod.us-east1.manual.graduway.com
meetconnect.net
en.riws.status.ricoh.com
mantracourt.status.ubidots.com
graduway.com
api.prod.europe-west1.manual.graduway.com
resolver.graduway.com
prod.northamerica-northeast1.manual.graduway.com
saealumniuk.com
graduway.com
rocketchat.graduway.com
uoftengineeringtest.manual.graduway.com
en.riws.status.ricoh.com
graduway.com
api.prod.australia-southeast1.manual.graduway.com
en.riws.status.ricoh.com
prod.northamerica-northeast1.manual.graduway.com
graduway.com
devman.manual.graduway.com
en.riws.status.ricoh.com
prod.northamerica-northeast1.manual.graduway.com
devman.manual.graduway.com
rocketchat.graduway.com
trust.graduway.com
cdn.prod.northamerica-northeast1.manual.graduway.com
devman.manual.graduway.com
api.prod.us-east1.manual.graduway.com
en.riws.status.ricoh.com
api.prod.europe-west1.manual.graduway.com
api.prod.australia-southeast1.manual.graduway.com
es-logs.prod.ca-central-1.advance.graduway.com
en.riws.status.ricoh.com
api.prod.us-east1.manual.graduway.com
graduway.com
abertayalumni.com
tfsconnect.manual.graduway.com
en.riws.status.ricoh.com
mytrinity.org.uk
en.riws.status.ricoh.com
mantracourt.status.ubidots.com
resolver.graduway.com
cdn.prod.australia-southeast1.manual.graduway.com
graduway.com
connect.graduway.com
graduway.com
athleticstest.manual.graduway.com
graduway.com
abertayalumni.com
en.riws.status.ricoh.com
api.prod.australia-southeast1.manual.graduway.com
mantracourt.status.ubidots.com
secure0056.hubspot.com
rocketchat.graduway.com
en.riws.status.ricoh.com
uclaonetest.manual.graduway.com
en.riws.status.ricoh.com
api.prod.us-east1.manual.graduway.com
uclaonetest.manual.graduway.com
bsakoaks.org
en.riws.status.ricoh.com
alumniultest.manual.graduway.com
cdn.prod.us-east1.manual.graduway.com
graduway.com
api.prod.australia-southeast1.manual.graduway.com
graduway.com
api.prod.us-east1.manual.graduway.com
bobcatconnect.org
devman.manual.graduway.com
uclaonetest.manual.graduway.com
secure0056.hubspot.com
prod.northamerica-northeast1.manual.graduway.com
connect.graduway.com
msmnetworker.com
api.prod.us-east1.manual.graduway.com
graduway.com
assets.prod.eu-central-1.advance.graduway.com
en.riws.status.ricoh.com

Certificate

The complete raw certificate details for api.prod.us-east1.manual.graduway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIrHJ4lZNF1eOCqXd5wX
tYRUh6vZ6/LI8ASSTkAFeh1RLWVGkNS3sQdZ44LAijX3mfsFBKS4NYD3KEEVg3Ik
LIhqLjyXJzPQeS+8mrtcCG9Z1RbmlwU1ked+c1vYl5+8YPPUsVu1/yE6qDjYNXa6
dd7G+uOM2UDd1eW+rPUAQ5dmoMWU7G5i/m4fLwm9ROmNV0hELX0xd876LFGwFHge
MIRTOLazcfW9RSpXiANP4PtmnwmJmOlakeoAXUgfN3EikWJ7jXdmJJ1zPSECRO/b
yeqFBeXa6h9zZ0yJJLaOI40l+ih7QZt1CPaj6e/5B//Gm6vWOVXqwKyghuEOTmUV
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345997659860315417336842249690935163826171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 23:55:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:55:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.prod.us-east1.manual.graduway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16226936991904168948792748609407486922667557388715638689374651072374517841404972202272555381427872351946766979324999308539342150545902391729880982729849441749560560398710878333071278880537207842053674120805636796532571350488706567271276722555373334705933162095569761607372955741851906035855550078627879723266845286356293168848846720544968334667180495175829738485074006821265490699207757805040452588359895307400608973123566184036721076045661280485692180323405795774080247605353994470963300174877959831316622364153875715853420317111475306304642164956045470091117104241970262080627051284695966362209985405299432066717129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7682e828409a0abfbfee6bc764d3c559f26145e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod.us-east1.manual.graduway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bea397e9f0000040300463044022026ae1ca73a83cda1d3e59b7757e7fb6d7bb7b433a9cbdd457648f4539e1c57d602201ef9ec01e1a80f427148874cd899461af56ecc7cec8c7f816cbfd67c9191c084007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bea397e950000040300473045022100dec375520527f95930aef58fa06c6d41d8dfbe30cff23a054e20c554ed35067f022052a70d565a667acf6017b91787f16c3eb8d1f85eef41a403790c5eac7fbcf5e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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