legacy.api-spec.snapfinance.com

Issued by R3

About this certificate

This digital certificate with serial number 03:26:80:1f:ee:c1:cf:ce:d2:5f:53:9b:67:1e:4b:88:b7:21 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.api-spec.snapfinance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:80:1f:ee:c1:cf:ce:d2:5f:53:9b:67:1e:4b:88:b7:21
Serial Number (int): 274437894725508319826425969048877330380577
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:11:45:46:85:a2:b9:9b:b5:d3:30:41:a5:37:98:65:0f:a4:75:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:79:ca:fa:18:e6:44:43:93:ae:88:95:1e:eb:20:a8:bd:d1:5b:f8
Fingerprint (sha256): 11:39:31:22:22:0c:dd:f4:b9:29:92:43:3b:d2:bf:20:00:df:ef:4b:84:a8:89:55:1f:4d:e3:f3:ba:0e:e7:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate legacy.api-spec.snapfinance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.api-spec.snapfinance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.api-spec.snapfinance.com

Other certificates including the domain name snapfinance.com

(limited to 100 certificates)
knowledge.snapfinance.com
platform.api-spec.snapfinance.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
jenkins.snapfinance.com
training-m.snapfinance.com
mt-edge-b.3scale.net
jenkins.snapfinance.com
bankjagostatus.mambu.com
cloud-marketplace.status.broadcom.com
learn.snapfinance.com
*.qa.snapfinance.com
media.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
*.snapfinance.com
mt-edge-b.3scale.net
rm-websolution.snapfinance.com
ssl372524.cloudflaressl.com
fsus-27a.freshservice.com
auth-sandbox.snapfinance.com
media.snapfinance.com
mt-edge-b.3scale.net
ssl372524.cloudflaressl.com
vpnawsus.snapfinance.com
cloud-marketplace.status.broadcom.com
ssl372523.cloudflaressl.com
resourcemanagement.snapfinance.com
snapfinance.com
jenkins.snapfinance.com
cloud-marketplace.status.broadcom.com
rancher2.snapfinance.com
airflow-light.snapfinance.com
*.snapfinance.com
orders.luckystar.co.za
*.snapfinance.com
legacy.api-spec.snapfinance.com
ssl372525.cloudflaressl.com
ssl372523.cloudflaressl.com
rancher2.snapfinance.com
legacy.api-spec.snapfinance.com
fdus-73.freshdesk.com
bc.networkthinking.com
orders.luckystar.co.za
rancher-eks.snapfinance.com
content21.snapfinance.com
rancher2.snapfinance.com
platform.api-spec.snapfinance.com
shiny.snapfinance.com
askpx.snapfinance.com
sni194479.cloudflaressl.com
content21.snapfinance.com
snapfinance.com
resourcemanagement.snapfinance.com
ssl372524.cloudflaressl.com
resourcemanagement.snapfinance.com
amlp-ui-qa.snapfinance.com
checkout.api-spec.snapfinance.com
datashare.api-spec.snapfinance.com
*.usnls.snapfinance.com
bitbucket.snapfinance.com
datashare.api-spec.snapfinance.com
platform.api-spec.snapfinance.com
ssl372524.cloudflaressl.com
ssl372523.cloudflaressl.com
shiny.snapfinance.com
fsus-27a.freshservice.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
shiny.snapfinance.com
*.snapfinance.com
cloud-marketplace.status.broadcom.com
orders.luckystar.co.za
media.snapfinance.com
mt-edge-b.3scale.net
learn.snapfinance.com
mt-edge-b.3scale.net
kibana-enterprise-dashboard.snapfinance.com
resourcemanagement.snapfinance.com
rancher-qa.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
shiny.snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
bankjagostatus.mambu.com
snapfinance.com
ssl372524.cloudflaressl.com
rancher2.snapfinance.com
cloud-marketplace.status.broadcom.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
airflow-light.snapfinance.com
qa1.snapfinance.com
observabilitypoc.snapfinance.com
dr.snapfinance.com
ssl372524.cloudflaressl.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
snapfinance.com
resourcemanagement.snapfinance.com
snapfinance.com
dew23ru98r2949283r9d.profitbricks.de

Certificate

The complete raw certificate details for legacy.api-spec.snapfinance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274437894725508319826425969048877330380577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-16 04:15:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 04:15:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.api-spec.snapfinance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738063215314417278939042957266540492769615092447656403519992900571448627642954288101978184421069542490559788418925756916096438178767659567877342911132451673883669645130931473651613813231052667179411333439354075141222968336602132070331120093921992158839442554263922395220099933547114720247401631617883339937358396206038450547026881048221598886101183872067596690175873852819857043630870235931366516210152348611753960490873194889636987195448908254786748412633196839214866760778019567579548002968184467297651450987614682126559618644984344207868712040022887832890779002289464712827316090955755115901209188164595543948933245835829261738557284469374141692073008742399527375830754495886756178687237287783111810211837150769433477438440290173973841420925685309529128514981635494661766953419124951458416328863622671068000752235239233911216040487893234329178611854052072209593503167305523567691569071486489432124507855800500812123119041939445118391926153259321927470695200498975147193770557399003668172152024315135721435986976068728659051470835785932156487598157316869111200376572894786813700869512906121389446582698300532903936066745556380779909952306233158549500727462760004218364883411274244765939310238388505244229065557319969352710579940391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a11454685a2b99bb5d33041a53798650fa475ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.api-spec.snapfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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