proximitykit-staging.radiusnetworks.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:62:c5:b2:71:13:9b:62:f2:d7:6e:f0:79:16:3c:32:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=proximitykit-staging.radiusnetworks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:62:c5:b2:71:13:9b:62:f2:d7:6e:f0:79:16:3c:32:97
Serial Number (int): 336670551730103953361934282780643526718103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:ce:58:23:77:64:dc:cd:80:55:37:a8:4e:3f:82:df:09:e2:a7:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:53:29:83:7a:2b:99:1d:cf:25:5b:dc:c4:9d:f6:68:fa:11:da:b7
Fingerprint (sha256): 1e:49:a6:3b:70:f0:e5:dc:70:c0:7f:80:c4:af:a0:a2:dc:41:82:ca:bd:c3:89:b6:54:b3:3a:ca:bc:20:2c:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate proximitykit-staging.radiusnetworks.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proximitykit-staging.radiusnetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proximitykit-staging.radiusnetworks.com

Other certificates including the domain name radiusnetworks.com

(limited to 100 certificates)
director.radiusnetworks.com
proximitykit-staging.radiusnetworks.com
status-us3.sysdig.com
account-staging.radiusnetworks.com
pickup.belkdev.com
digitalcoupon.eu
*.radiusnetworks.com
new.blackboard.com
status-us3.sysdig.com
status.anodot.com
new.blackboard.com
new.blackboard.com
radiusnetworks.com
digitalcoupon.eu
developer.radiusnetworks.com
digitalcoupon.eu
displaykit.radiusnetworks.com
store.radiusnetworks.com
digitalcoupon.eu
account.radiusnetworks.com
status.anodot.com
status.anodot.com
rn-s.net
new.blackboard.com
new.blackboard.com
digicpn.com
status-us3.sysdig.com
new.blackboard.com
flybuy.radiusnetworks.com
radiusnetworks.com
radiusnetworks.com
account.radiusnetworks.com
fhf.shopthefastlane.com
account.radiusnetworks.com
status-us3.sysdig.com
new.blackboard.com
status-us3.sysdig.com
status-us3.sysdig.com
status-us3.sysdig.com
4dk.com
www.radiusnetworks.com
new.blackboard.com
radiusnetworks.com
clp-staging.radiusnetworks.com
store.radiusnetworks.com
new.blackboard.com
proximitykit.radiusnetworks.com
campaignkit.radiusnetworks.com
new.blackboard.com
director-staging.radiusnetworks.com
analytics.radiusnetworks.com
flybuy.radiusnetworks.com
curbside.cpk.com
director.radiusnetworks.com
digitalcoupon.eu
rn-s.net
digicpn.com
fhf.shopthefastlane.com
status.anodot.com
pickup.shop.gianteagle.com
director-staging.radiusnetworks.com
developer.radiusnetworks.com
proximitykit-staging.radiusnetworks.com
rn-s.net
www.radiusnetworks.com
director.radiusnetworks.com
status-us3.sysdig.com
status-us3.sysdig.com
account-staging.radiusnetworks.com
digicpn.com
proximitykit.radiusnetworks.com
flybuy.radiusnetworks.com
status-us3.sysdig.com
www.radiusnetworks.com
director.radiusnetworks.com
status-us3.sysdig.com
status-us3.sysdig.com
digitalcoupon.eu
new.blackboard.com
waitlist.radiusnetworks.com
developer.radiusnetworks.com
store.radiusnetworks.com
radiusnetworks.com
clp-staging.radiusnetworks.com
digitalcoupon.eu
rn-s.net
curbside.cpk.com
displaykit.radiusnetworks.com
new.blackboard.com
director-staging.radiusnetworks.com
*.radiusnetworks.com
www.flyb.uy
status-us3.sysdig.com
new.blackboard.com
support.radiusnetworks.com
status-us3.sysdig.com
new.blackboard.com
campaignkit-staging.radiusnetworks.com
support.radiusnetworks.com
director.radiusnetworks.com

Certificate

The complete raw certificate details for proximitykit-staging.radiusnetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/uVxq3sDstrSa9LUkrY
Psgjstg2ZC0bK1H6UixjzqDvBzb5oNcdzFYewN7jQ6yw3Knzc0nAVLz0U1ISiFrU
oAbQxgCH4wTIE1M7MTTjKScYPv2LefBRw1YEuNTKkz5xK9lnjKvoTFQfvqiXlqF/
fOeRBfQacPHYNs9qqP6jfAn4meBKeVJwSslEGn5LKpyV1W7seeKwR4x7aDcbhDPX
1EXD3u1FneJAkFDo3BGXmnATqLLHmVmlJBT6XHD+W7ShUDCkdUvtwrBvfztgH12s
xUy+T9+fSZZNGL00sdUoGO5xbPOzAwxloerjqa61DAyY1+HZIuDPKDTa/zB6hvCb
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336670551730103953361934282780643526718103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 23:20:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 23:20:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proximitykit-staging.radiusnetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26760343566157985202637100069677440723163975971348956446953586790656964001250548002316455884441708316188829099212724171524453991577954130074834264550158445456042066740500389185274612849016394754782181031338877085553766153287359603833242976150049833253416865244877288730032951818103940180551124361730808077581537636132140972308557041822686110216320989953682925675949695901108424259013419622534032094428278885910593224698057169119186317802323437035137956561471390697947891111787271463018603426930033481915810306708577468653003864848148843540127983289699512618081856226620029648033863650649318156419097914076132078033867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18ce58237764dccd805537a84e3f82df09e2a76c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proximitykit-staging.radiusnetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ccb4bfde80000040300483046022100f4e8f69dd638488e838994af4040394b273052c037b5c4cdfb9347c5b2340599022100ce1dd64dd30413697fe11ba92254047e2e9e0f33a9f7bf7cb81472c480352cb800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ccb4bfdd500000403004730450221008cb9363c0a9eb4494a36f1a9d368991dcb8c574ad7767e5bea0d81d9124afa6902206125391fb656ca8b2ac43ba1b723c78eb5c1a070bc6c9899548bb94b1635693e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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