knapsack-external.prod.us-west-1.postmates.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:56:4b:96:78:9b:e3:3f:48:10:f0:fc:a5:73:60:47:02 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=knapsack-external.prod.us-west-1.postmates.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:56:4b:96:78:9b:e3:3f:48:10:f0:fc:a5:73:60:47:02
Serial Number (int): 265875234647071897793021555455789029672706
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:79:83:8f:25:c4:a4:ea:ee:df:16:e9:c7:12:53:9a:bc:14:1a:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:8d:96:a7:3d:69:da:78:7f:bd:a5:48:94:5c:b8:79:4f:39:ea:d3
Fingerprint (sha256): 11:a9:d6:9f:27:ee:b3:db:65:94:88:c5:f9:1a:6e:e3:de:48:b9:cd:4e:f1:cc:98:f8:5b:86:8d:a2:1f:cb:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate knapsack-external.prod.us-west-1.postmates.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knapsack-external.prod.us-west-1.postmates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

knapsack-external.prod.us-west-1.postmates.com

Other certificates including the domain name postmates.com

(limited to 100 certificates)
pr-1094.payments-webhook.stage.us-west-2.postmates.com
bweb.prod.us-west-1.postmates.com
engineering.postmates.com
fleet-api-gateway-1.prod.us-west-1.postmates.com
engineering.postmates.com
drone-dev.admin.us-east-2.postmates.com
*.eightfold.ai
ssl424371.cloudflaressl.com
*.prod.us-west-1.postmates.com
partner-static.stage.us-west-2.postmates.com
postmates.com
shopify-sandbox.stage.us-west-2.postmates.com
partner-dashboard-static.gke-stage.postmates.com
postmates.com
postmates.com
postmates.com
postmates.com
postmates.com
postmates.com
api-status.postmates.com
ping-service.stage.us-west-2.postmates.com
ssl424370.cloudflaressl.com
postmates.com
*.eightfold.ai
ssl424369.cloudflaressl.com
postmates.com
postmates.com
*.eightfold.ai
api-status.postmates.com
postmates.com
postmates.com
partner-dashboard-static.gke-prod.postmates.com
pr-1092.payments-proxy.stage.us-west-2.postmates.com
*.postmates.com
postmates.com
fleet-api-gateway-1.prod.us-west-1.postmates.com
*.postmates.com
service-catalog.prod.us-west-1.postmates.com
postmates.com
postmates.com
postmates.com
postmates.com
api-status.postmates.com
engineering.postmates.com
ci.admin.us-east-2.postmates.com
postmates.com
postmates.com
postmates.com
blog.postmates.com
postmates.com
variants.stage.us-west-2.postmates.com
*.admin.us-east-2.postmates.com
*.eightfold.ai
click.app.postmates.com
postmates.com
postmates.com
api-status.postmates.com
developer-api-sandbox.gke-stage.postmates.com
bweb.gke-stage.postmates.com
buyer-prod.postmates.com
postmates.com
ssl424371.cloudflaressl.com
knapsack-external.prod.us-west-1.postmates.com
jenkins-electric-boogaloo.us-west-1.postmates.com
postmates.com
merchant-data-updater-external.gke-stage.postmates.com
postmates.com
ssl424371.cloudflaressl.com
square.gke-prod.postmates.com
postmates.com
postmates.com
postmates.com
postmates.com
api-status.postmates.com
postmates.com
*.postmates.com
engineering.postmates.com
api-status.postmates.com
buyer-frontend-alpha.gke-prod.postmates.com
postmates.com
variants.prod.us-west-1.postmates.com
api-status.postmates.com
buyer-frontend-alpha.gke-prod.postmates.com
postmates.com
developer-api-sandbox.stage.us-west-2.postmates.com
api.postmates.com
postmates.com
*.eightfold.ai
postmates.com
ssl4033.cloudflare.com
postmates.com
postmates.com
postmates.com
postmates.com
webhooks.postmates.com
automated-task-processor-external.prod.us-west-1.postmates.com
partner-help.postmates.com
postmates.com
api-status.postmates.com
shopify-sandbox.stage.us-west-2.postmates.com

Certificate

The complete raw certificate details for knapsack-external.prod.us-west-1.postmates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr2lCU1m/mSdU0VCiFJ4
2AM+4oO/wriaMSHilbwv3J2YQvq9BLLjgAhF+l6RKZWvC8GNASaHuOMYYCd0ZoqB
q1fWhC8YOkQAUUOndj3+bYpxhKWQRm/VLheNUHSx+SUb1tFg03VE5kvMirpqMTLR
H9PRN2FvoLqNbLAOLEyCOWQsEvQ3cso0A+CTvCFjCHTR9DGSRedClKDNLHIiB2fr
WcQvHu3+o7Bubc18KCUNasecKe9VhNhtzCQ/l80qSjovh9CarqqgPi/2joKD6w50
me4NwccGGXzvBrpv1ExZdBkZuP5jXFNPyTko9b+hnlv648F74ISnHOjrQOHEevYE
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265875234647071897793021555455789029672706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 14:05:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 14:05:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knapsack-external.prod.us-west-1.postmates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24078795217338954335873395387800733990099118355884803746024098732786320401207096750805954569860444510895759194566455725958271366927591943361630182789476017692215170751323348486267103651180252935504430838522493550182808583309878828848882516353824929254852592967900890384876814798053035358127504801423915967189455424544152822102383051779290580328790890916679821973685891028925991208941685301607951443278769808385144518561802360741379735436188747672122611739710202105236526559027724579371283039616237271991963419450721575280291234966447417313206090655032847806025376299688383344519291726992635434810455062148456616690789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9679838f25c4a4eaeedf16e9c712539abc141a46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapsack-external.prod.us-west-1.postmates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705dfb8892000004030047304502207318ca6aa6c4a2eaea8ab3df8f90ce560dd62be0a7bc724ac9250210aa061542022100bc7603a616584ebcec49bfd1b76c726c297ff74dc8f4035c48e2ae9353cc3ca400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705dfb888f000004030047304502202e7bc59b53390a7471c726dcb54b6787d961018817ef7443a40915503e10be9e022100ebbb9969d2d211775fbaf45ee817819d0d189c8bba4b9be573294ed0e64f96cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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