api.mycareerxpert.com

Issued by R3

About this certificate

This digital certificate with serial number 03:47:a7:e6:ce:80:d6:43:3b:96:3c:a0:2a:54:56:fc:14:3f was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.mycareerxpert.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:47:a7:e6:ce:80:d6:43:3b:96:3c:a0:2a:54:56:fc:14:3f
Serial Number (int): 285720085338624809032493420636991041311807
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:10:c3:af:a7:eb:70:5a:c8:6d:c9:ad:d0:d4:e4:f9:b7:64:74:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:fa:fe:92:bf:40:95:e7:50:4f:22:63:97:41:cf:85:0c:9d:f3:1c
Fingerprint (sha256): 1e:e4:ca:a8:6e:e9:1a:c8:24:54:a2:94:b5:b0:5c:ea:d8:8a:84:a5:3e:41:da:ab:c8:b0:05:ed:d7:cc:33:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.mycareerxpert.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.mycareerxpert.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.mycareerxpert.com

Other certificates including the domain name mycareerxpert.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for api.mycareerxpert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhDCCA2ygAwIBAgISA0en5s6A1kM7ljygKlRW/BQ/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDMxODQ0MzhaFw0yNDA3MDIxODQ0MzdaMCAxHjAcBgNVBAMT
FWFwaS5teWNhcmVlcnhwZXJ0LmNvbTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCC
AYoCggGBAIkKu/s9eoc81ArMacHmDJ8oNn/sLr35Pt5cTxWzArekz+mOpyYOod0k
4qtls4AygDhK6KDvyOA+on55df0HfRG/5REcPJB1WtbtM8QjPK9hX+Mful3a/4KK
8XW9+cYyKppNOH3EUarHnhEleZI2n1lzLYYSvQtNRHB/j4MebPp/yLRP75kB3c4o
MiQ2k6SKzT8HQ4ZLs20mCLrA0yAYhTpnD3Qwg9bkcJBM1RqW0chJk+Bb/yIQDyub
C5rriOEwe9Kd2UgWq1gSOjS8WexO5uNUcYvU+smnf4KZgE7lFTL9/SKvUgsdUPI7
jwP93Xt8az5kN7lk7VA9Ae5GLIGkW0QgCC2lltH6nxGIoCTeI7hNKKHTUsz677DY
nSFeH2cl4VKVXxeb7MBxY5ALT/WXTw9ODjfLdPkn2502n5QzNlmHjgVSQnP6C/YK
JfsXUSzSK49X6dHxvZYxhlNJfJwND/gSuGweIj4Zq+ETNSjQ+8gdMjbo3Oup6L68
gXOFUNy3fQIDAQABo4IBJDCCASAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS2EMOv
p+twWshtya3Q1OT5t2R05jAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC
xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy
Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAgBgNVHREE
GTAXghVhcGkubXljYXJlZXJ4cGVydC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJg/eOQha635
7ncuY1J2GckoVP6J7+ItrvGEtijwMvXDABd8TVIqnkJwDXxwJV3yxRuGqEPIMM3R
pDpbkOKqM1miaLqUQuIa4JZEIeiR4SZjSzNfNZQdrTvlTL3SMz1S6pR7TMDk7nQk
hRmoLX/wQ+95anb8kUkwNWzP+nPxF3f6+GbMYbuS5Yhx2pSBBLFVx9w0nNY7xj7M
6aSIdjRdc6Jzu7xy0bit7i1VlajP232TXOpB4a5GhBM3ZxAJClAjx1gk0xFSZCvn
tspCk2OujGXrTfA0MZdaLSgSfH9MbybuvA3mOSJP/R8+S6R85hBx30k+cUij1RIY
wpHWEMR9XdM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAiQq7+z16hzzUCsxpweYM
nyg2f+wuvfk+3lxPFbMCt6TP6Y6nJg6h3STiq2WzgDKAOErooO/I4D6ifnl1/Qd9
Eb/lERw8kHVa1u0zxCM8r2Ff4x+6Xdr/gorxdb35xjIqmk04fcRRqseeESV5kjaf
WXMthhK9C01EcH+Pgx5s+n/ItE/vmQHdzigyJDaTpIrNPwdDhkuzbSYIusDTIBiF
OmcPdDCD1uRwkEzVGpbRyEmT4Fv/IhAPK5sLmuuI4TB70p3ZSBarWBI6NLxZ7E7m
41Rxi9T6yad/gpmATuUVMv39Iq9SCx1Q8juPA/3de3xrPmQ3uWTtUD0B7kYsgaRb
RCAILaWW0fqfEYigJN4juE0oodNSzPrvsNidIV4fZyXhUpVfF5vswHFjkAtP9ZdP
D04ON8t0+SfbnTaflDM2WYeOBVJCc/oL9gol+xdRLNIrj1fp0fG9ljGGU0l8nA0P
+BK4bB4iPhmr4RM1KND7yB0yNujc66novryBc4VQ3Ld9AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285720085338624809032493420636991041311807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 18:44:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 18:44:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.mycareerxpert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3109998528091777717140526024269009722687260149598200856100208293976229201402169438657055857742939856027532067565856817640191165964648326086846859682301586204180917305529750616052931248902835647982909798776735984724988267898685253609239314428924917562252473132844896075263906116707476309175121683084954212444858234710185680363109592749661459096839476749722804360651757213621347596246906188041708027084851407254614984931843232251519816045400730022409739274353060375986992489351638188375945251178444618050919261885652090885851700615951212172397851332065514260618192090670244817165093650767949360432945867059959061345166087424086477384383289438440359629701253623988739648333493620132665619840265067613610066475855747653243995795679114456608693737937078944436698596345062461559950472270175963958266819634953957149968052905838006950826640870851542831844713859798145484571571503948665155780659350278888853696551043670887555145709437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b610c3afa7eb705ac86dc9add0d4e4f9b76474e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mycareerxpert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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