datashare.api-spec.snapfinance.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:55:3e:1b:91:0c:67:39:bb:86:32:f4:e4:9d:8d:d9:f0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=datashare.api-spec.snapfinance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:55:3e:1b:91:0c:67:39:bb:86:32:f4:e4:9d:8d:d9:f0
Serial Number (int): 342437367983628022727939455138490525538800
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:a0:d3:50:27:4d:80:07:62:3d:12:65:f0:60:4f:17:13:15:2f:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:d1:8f:b5:bc:15:b4:d3:84:26:0b:d0:08:e6:29:74:16:d1:c3:d6
Fingerprint (sha256): 18:ef:8a:a2:16:0e:79:62:0f:15:10:cc:39:5a:f7:08:b2:0e:4c:16:e3:9d:c7:a9:34:8e:bc:34:42:5f:50:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate datashare.api-spec.snapfinance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datashare.api-spec.snapfinance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datashare.api-spec.snapfinance.com

Other certificates including the domain name snapfinance.com

(limited to 100 certificates)
knowledge.snapfinance.com
platform.api-spec.snapfinance.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
jenkins.snapfinance.com
training-m.snapfinance.com
app.marketing.snapfinance.com
mt-edge-b.3scale.net
jenkins.snapfinance.com
bankjagostatus.mambu.com
cloud-marketplace.status.broadcom.com
learn.snapfinance.com
*.qa.snapfinance.com
media.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
*.snapfinance.com
mt-edge-b.3scale.net
rm-websolution.snapfinance.com
ssl372524.cloudflaressl.com
fsus-27a.freshservice.com
auth-sandbox.snapfinance.com
media.snapfinance.com
mt-edge-b.3scale.net
ssl372524.cloudflaressl.com
vpnawsus.snapfinance.com
cloud-marketplace.status.broadcom.com
ssl372523.cloudflaressl.com
resourcemanagement.snapfinance.com
snapfinance.com
jenkins.snapfinance.com
cloud-marketplace.status.broadcom.com
rancher2.snapfinance.com
airflow-light.snapfinance.com
*.snapfinance.com
orders.luckystar.co.za
*.snapfinance.com
legacy.api-spec.snapfinance.com
ssl372525.cloudflaressl.com
ssl372523.cloudflaressl.com
rancher2.snapfinance.com
legacy.api-spec.snapfinance.com
fdus-73.freshdesk.com
bc.networkthinking.com
orders.luckystar.co.za
rancher-eks.snapfinance.com
content21.snapfinance.com
rancher2.snapfinance.com
platform.api-spec.snapfinance.com
shiny.snapfinance.com
askpx.snapfinance.com
sni194479.cloudflaressl.com
content21.snapfinance.com
snapfinance.com
resourcemanagement.snapfinance.com
ssl372524.cloudflaressl.com
resourcemanagement.snapfinance.com
amlp-ui-qa.snapfinance.com
checkout.api-spec.snapfinance.com
datashare.api-spec.snapfinance.com
*.usnls.snapfinance.com
bitbucket.snapfinance.com
datashare.api-spec.snapfinance.com
platform.api-spec.snapfinance.com
ssl372524.cloudflaressl.com
dl.snapfinance.com
ssl372523.cloudflaressl.com
shiny.snapfinance.com
fsus-27a.freshservice.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
shiny.snapfinance.com
*.snapfinance.com
cloud-marketplace.status.broadcom.com
orders.luckystar.co.za
media.snapfinance.com
mt-edge-b.3scale.net
learn.snapfinance.com
mt-edge-b.3scale.net
kibana-enterprise-dashboard.snapfinance.com
resourcemanagement.snapfinance.com
rancher-qa.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
shiny.snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
bankjagostatus.mambu.com
snapfinance.com
ssl372524.cloudflaressl.com
rancher2.snapfinance.com
cloud-marketplace.status.broadcom.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
airflow-light.snapfinance.com
qa1.snapfinance.com
observabilitypoc.snapfinance.com
dr.snapfinance.com
ssl372524.cloudflaressl.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
snapfinance.com
resourcemanagement.snapfinance.com

Certificate

The complete raw certificate details for datashare.api-spec.snapfinance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISA+5VPhuRDGc5u4Yy9OSdjdnwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA4MjAwODA3MDVaFw0yMTExMTgwODA3MDRaMC0xKzApBgNVBAMT
ImRhdGFzaGFyZS5hcGktc3BlYy5zbmFwZmluYW5jZS5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQC4PEKkmI7awIrSFX8BoqdNuxajvgxE79VzGayz
BMV5ElXlYUErOT+wbf9pzzH5+HaNjKAt8FpFC8Cg8hHi2JWk0QlNuvzprQZJO8em
WenBh47YFIgWVFcUJquv9qXyxHTTdueQAna8zY3i0Ib+PeYx7abnd8iB3R7mrfnq
9iPrbVgnJZX818ASqBmN2aLDlW0CsM2u9+YLz80+akOY5OW/s9gzWJMzouZWWmn6
Jh5Svdakp3X4P6ENSteUndxYGh61MB4ZnoqgjMAc9YIuntWUej7BkwLYAtUiQDv1
csutFeDs/difEZkYXuZsj96FcqwsyKwrFvh9KCZuPqmaUnaW5mKtKsp6yZpGclD9
tQ0VknMFK/BVLyCPHn8A8W5xeRd6vjqQPappcZ9jwqbI/cu884/Xz6hZ7cwRL6tD
cVuVxUc1UJ0yJGFhLID9XYGHcRPlbaAQ3Kot1w1ZIsuJAYq9XcTDvWM+HsKGztMu
OlaA5QUCSGF/t939F+YbF9ZEq9DA1BDTQc8nuGPcRRMSMgH84BDwfdlxKKlsI/xI
7cfbxm0B/FD379ikvVi0AJL86LLgmkupngGQdXOBT7W5q2Br7tEjoSyV65QfvWrj
oOYvHsUr/UZx+JO7mST+f5+scVspGE0K2MgY3GS02YqJQi1nZ0MJSVEsvE5ST8HJ
pakJ5wIDAQABo4IBajCCAWYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQLoNNQJ02A
B2I9EmXwYE8XExUvwDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBV
BggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9y
ZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAtBgNVHREEJjAk
giJkYXRhc2hhcmUuYXBpLXNwZWMuc25hcGZpbmFuY2UuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBVYNIazX7N75bW0NTriG0OtQv7i51opsklipQVnZJOUp7zwI7/
FcBHq86Natu95KFXGRNuik8mtcBi2gApHmZfzO2ceYLmNAIC6NY8UXlD9emQ98Cm
5EUniNzsTaMogvWoBJ2YXfSRjHBlt9Xlk5RfW2hosRj/kT7awvG+y8YcgO5fxqIl
+zoUooENmHSg3pqCanedPa4uAjsDMczkuPHDT9OosCWStnBj4XlkrTLtSBqWAbXJ
adv8P1TJjqi5p5anOocFywxOLVkkzLnY2ibC9GA0Ts5Zqso+rr8TFdqXeZPZGn2a
UJ3nv7qVnnghpJWvGkjcNBSWKxASuyV/sjei
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342437367983628022727939455138490525538800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-20 08:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-18 08:07:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datashare.api-spec.snapfinance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751614823646502649661623176696807188011900371529629326660300257644315596698503911442102406502200452819920106956427276704266904176363840745373897496588527148974851215470387933942700717178413678943369852656038310706359057666837047160007041886786307444433491416569290642324675297062803103827352228633444373802720938447065889936111342015362995690682235387208730810470996593471686663270118110146438032148130978219538791980944298329553196704307886261281866620620552610515101895451752536013116004454564583982279793055603474027503405382077630240917105487075268948996579246350507606786801054084164505660465274473305140447345232760936667948636620141177640540330987796908448947225888249238716215569588411465681943164763301146304100641409099297278150169247148079485959137812954214879698022139118547192988939413479742056733161271261544579238921144747036564494606106260387481126284211567215354814862420891673798184364254987694417403169109101690905252946986345225051431989692632209596811682811971081196403863020487313576335097302179907332494417154706421721235300004439248880615040709933627992114587326208122678813438445723770225944359582431054382342417862070989092542387190094501096552861583963049656557616566726195925732013664423689887569372842471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ba0d350274d8007623d1265f0604f1713152fc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datashare.api-spec.snapfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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