prod-api-2.melusyn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:49:f7:ec:09:db:f2:1e:9c:43:71:a9:ba:fb:43:cb:74 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod-api-2.melusyn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:49:f7:ec:09:db:f2:1e:9c:43:71:a9:ba:fb:43:cb:74
Serial Number (int): 320304028201049240926357097355173374970740
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:4c:7e:91:d2:81:fd:b2:d4:8f:71:23:c6:2e:44:48:f6:b0:6d:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:4e:ba:9b:ef:ff:8b:9e:64:a3:53:96:98:c4:2e:7e:40:62:4e:e9
Fingerprint (sha256): 17:6e:ab:86:6b:c0:00:82:16:7f:15:ff:77:83:7a:e5:67:a5:2e:21:52:9c:9c:f8:bb:2c:23:ff:bb:c0:47:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prod-api-2.melusyn.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-api-2.melusyn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-api-2.melusyn.com
prod-api-2.setkeeper.com
u.setkeeper.com

Other certificates including the domain name melusyn.com

(limited to 100 certificates)
alaminamdar.tech
dashboard-test.rtm.vnlp.ai
travelgame.lob.com
int-api-1.melusyn.com
milestoneshealthcentre.com
prod-api-2.melusyn.com
www.melusyn.com
www.slash.ge
www.controlaltcreate.com
andhaadhirehab.in
recruiters.prosus.ai
www.earcandytech.com
dev.guide.beam.rd.nyt.net
int-api-1.melusyn.com
*.melusyn.com
front-1.melusyn.com
prod-api-2.melusyn.com
melusyn.com
dev.guide.beam.rd.nyt.net
yumaroo.co
www.mbvidro.com.br
baptistmandaue.org
int-api-1.melusyn.com
easytalent.co.za
fleete.sk
alaminamdar.tech
milestoneshealthcentre.com
prod-api-2.melusyn.com
devomatic.io
travelgame.lob.com
front-1.melusyn.com
www.melusyn.com
*.melusyn.com
app.1share.vn
*.melusyn.com
front-1.melusyn.com
deliven.app
baptistmandaue.org
andhaadhirehab.in
front-1.melusyn.com
chat.dev.simpliroute.com
download-app-carrom-videochat.getmega.com
download-app-carrom-videochat.getmega.com
prod-api-2.melusyn.com
front-1.melusyn.com
ci.melusyn.com
int-api-1.melusyn.com
cliohealth.aspire-dev2.com
storeyhuish.co.uk
prod-api-2.melusyn.com
api.melusyn.com
chat.dev.simpliroute.com
aparcus.es
phonepad-v2-pro.bop-tech.com
ikawa-tsumi.ga
int-api-1.melusyn.com
front-1.melusyn.com
v2.hiepsi.donbosco.cc
dev.eureka.academy
prod-api-2.melusyn.com
titikkomalabs.com
int.melusyn.com
*.melusyn.com
int-api-1.melusyn.com
kosenkmitl.com
youtravel.dev
boomlist.app
int-api-1.melusyn.com
ci.melusyn.com
prod-api-2.melusyn.com
front-1.melusyn.com
www.financy.org
prod-api-2.melusyn.com
jarborist.pl
uni.u-nyan.co
prod-api-2.melusyn.com
bileski.com.br

Certificate

The complete raw certificate details for prod-api-2.melusyn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320304028201049240926357097355173374970740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 06:15:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 06:15:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-api-2.melusyn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903740231605040850005590296216865732606843146970874391768943521976894472498106998213749575272739178680554716195931425613652747749593382666915898990817390747352970291024681343900394511252762321476126217250622576423407875708491150409961551802529379277555702052263643801200160725342116011433029776071618789609389804908927545612300780732704309443335750023048623479912794044652360491699666625030526816204552526230576178799899962180928486024537488118352681450410741643073996536825575890916069332135993713162253339198881358625096540861351302715622221854833322053433794418083255943934538823259396091484311255013303349755620579189700211335614224202436392802147456387627180610209210328149043152320796698844200509783156058575492023635000872045419194238272669459905610929879701888677461730448271494793376195463080403579635902779796102790945920645898840412573365616019605480526031635794053354043395145624145838166032602941878776897558176313407608604910501655137768929821131412870340757206405440892548021487857108009501077986298279364923812177583518365600485073619500476140302265343971246343164872164310839617700430700788888247963354360239136503747165862046425771768680648922856754713661171661093777837957813058378067840096987234294990500043071351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f44c7e91d281fdb2d48f7123c62e4448f6b06df5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-api-2.melusyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-api-2.setkeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.setkeeper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167c55186a50000040300483046022100ddc4b96d161dd0064dd7b3f6c47d2ac74a4d789e1ff33a7f00c08e53f2ca305d0221008c07f4303ae68271fe42ce9b02189a4fdd84a4f809f4e090c4c45eda6c82b0dc00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167c551849b0000040300463044022015b85a036c35c3c466a99f42a1274b1b607efc639c9f778a703528e43dc7e15d022027b6cc5d1996913e1dc1705604ca152aeb5fb6295dfe14d697bdb430a4de5bc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ab3c57397f3a2e565c9fa549f17f1ddab35d0e5b0f5d8115f956c2e1e8e1c92369fe70a634fffd913cf642ea91d0b316d25b9a64a0eedcfbb12b9bc3f0d25d7b73a280c802fd8b1078bc1012f60bd7b2e49fe5765f542472cfc6348edb932f35cc5701d0888ae1e1e75e7f858198c4eb9c17bd85fbde8efe390ba97eb0e9cbf3fef04cdd2541854f53f67719f61c6e0f66e7730a4e0185242a457c0bb3c8a4459c405450ad530d4876e0f82f7227413dfd9b6e3ba5d5923ae356c494da40aa88dab858c182b0bf497fa2e68fe6531465f056b8288533c932f6ab1bb461950309915e6f989df693b79a9c26bbf033464ee8706f84de3e483195e3b61ee1a7760