api.staging.sinitic.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:92:3c:f3:04:48:ca:34:09:c8:f3:73:9b:63:82:04:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.staging.sinitic.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:92:3c:f3:04:48:ca:34:09:c8:f3:73:9b:63:82:04:93
Serial Number (int): 267656324154018715796193336321771300848787
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:60:cd:92:2d:34:a5:2d:3b:a9:a6:12:94:8e:06:f6:72:0e:9b:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:e6:0d:30:f1:28:78:e4:ca:1e:84:76:c6:8c:07:d1:56:a5:f1:bd
Fingerprint (sha256): 16:9d:cb:0d:6d:6e:e0:54:8a:6e:1a:33:09:43:73:94:54:e7:0b:03:3a:4f:48:3c:37:92:b3:e2:26:fc:63:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.staging.sinitic.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.staging.sinitic.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.staging.sinitic.ai

Other certificates including the domain name sinitic.ai

(limited to 100 certificates)
sni155591.cloudflaressl.com
sinitic.ai
sni155591.cloudflaressl.com
app.sinitic.ai
sni155591.cloudflaressl.com
app.sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
app.sinitic.ai
api.sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
api.staging.sinitic.ai
api.staging.sinitic.ai
sni155591.cloudflaressl.com
littleplantstudio.com
sni155591.cloudflaressl.com
api.sinitic.ai
api.dev.sinitic.ai
api.sinitic.ai
sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
www.sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
grafana.dev.sinitic.ai
sni.cloudflaressl.com
sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
api.dev.sinitic.ai
sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
cryptoranch.io
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
app.staging.sinitic.ai
sinitic.ai
sni155591.cloudflaressl.com
*.sinitic.ai
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
api.sinitic.ai
sni155591.cloudflaressl.com
api.dev.sinitic.ai
sni155591.cloudflaressl.com
www.sinitic.ai
nlp.staging.sinitic.ai
www.sinitic.ai
api.sinitic.ai
api.staging.sinitic.ai
api.staging.sinitic.ai
sinitic.ai
grafana.dev.sinitic.ai
sni155591.cloudflaressl.com
app.sinitic.ai
serverless.fabventory.loan
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sinitic.ai
sinitic.ai
dyrii.com
sni155591.cloudflaressl.com
sinitic.ai
sni155591.cloudflaressl.com
ssl379236.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
ssl379236.cloudflaressl.com
api.sinitic.ai
taro.hodlme.app
api.sinitic.ai
sni155591.cloudflaressl.com
ssl379236.cloudflaressl.com
sni155591.cloudflaressl.com
sni155591.cloudflaressl.com
sinitic.ai
sni155591.cloudflaressl.com
app.staging.sinitic.ai
api.dev.sinitic.ai

Certificate

The complete raw certificate details for api.staging.sinitic.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7thK2c40Prt3mBCYR9R
OeEVtH5MMjY4Vg7ok4U6c/e9LePtEE4Zog7ezCBcUPUP9dkL2Mgi0m6qdt59eSzr
r/R8T77bebLnwi3gu7xiXQ9zppIvevNEvUCn91YpR78r5UIEGCx2QQ3IcflGIkHw
F+IbY9tSCU/z4s6+wrMQAakOO4WTiVosi9idzBgk/h1skZppyrA8PM0ZfY91jhlo
3MhpWSepBBJV1PLUa3zIMKPu+pEd/1FrDJphzekY4to2qx/UYNieXKTViRCGao91
alFk3gJTGtJUqt61gwWkifoowreKhJW9fl8Z47PKoLPuHJ4j/Y7Ixwmj8JLP4APy
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267656324154018715796193336321771300848787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 10:20:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 10:20:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.staging.sinitic.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22184103678109296970816749463838657926132988488332620766731553846146195963233545286398185360759195128775777424367632241418195235051430112437782140289221194151481172290266594808200554951970922284295504687100464839662901415823539057836660479263709583165011508010343351550438517158233030796233019876386971958530864866306999860814988230155618137880554539657178529463794674246732388810061259224734687679079270077020581086006839780767057256467335946215429120571285422053830001531491978035706097223018375315038026595132908027952752909533889269974497936966785864375498270756537581478984640728096679254686457827314632568861377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0460cd922d34a52d3ba9a612948e06f6720e9b41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.sinitic.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167d5a54bf7000004030046304402201f491a4a089263f3f9b2eed568a59fef4401ed5fdb7510a3f9526306c338abe302206b1d7e48b836722e54cd630c70a958b1fc8ac5ecef239789fbfafaeb46b7db14007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167d5a54bf80000040300473045022100de9c84352b930a914ae04eda9dea3d4448d6cbb31e6b9bcc58bb94446027652d02206501341567abd6a776eb67682b45e4dbb8499e9510a95d9575b5bdf582e6fec4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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