api.staging.autospf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:85:15:c8:5e:3d:36:68:6c:a8:95:1e:40:73:88:63:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.staging.autospf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:85:15:c8:5e:3d:36:68:6c:a8:95:1e:40:73:88:63:50
Serial Number (int): 339778702612718321946323067685991709434704
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:5a:a8:5c:4d:c4:7c:cd:61:82:9c:c9:4c:45:43:0d:11:4a:d9:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:af:5f:db:55:da:02:b3:3f:f3:c5:85:5f:fe:f9:3f:70:98:bc:ff
Fingerprint (sha256): 20:15:32:b6:9c:bc:46:18:57:3e:3b:cc:97:3c:ec:45:99:34:36:9f:0e:30:1e:d4:86:f9:70:9a:ed:cb:2b:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.staging.autospf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.staging.autospf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.staging.autospf.com

Other certificates including the domain name autospf.com

(limited to 100 certificates)
help.collage.com
help.collage.com
status.sporify.eu
status.autospf.com
staging.autospf.com
status.autospf.com
autospf.com
help.collage.com
status.mediaconnect.no
fdus-75.freshdesk.com
ats.codegod.dev
autospf.com
status.autospf.com
fdus-75.freshdesk.com
status.sporify.eu
status.waps.solutions
status.autospf.com
status.mediaconnect.no
status.autospf.com
api.staging.autospf.com
status.autospf.com
status.waps.solutions
fdus-75.freshdesk.com
staging.autospf.com
fdus-75.freshdesk.com
autospf.com
status.warrantywise.co.uk
status.warrantywise.co.uk
status.waps.solutions
status.synccentral.eu
fdus-75.freshdesk.com
status.autospf.com
help.collage.com
fdus-75.freshdesk.com
status.zoho.sa
staging.autospf.com
traefik.staging.autospf.com
status.virtual-developer.com
status.autospf.com
autospf.com
status.autospf.com
status.warrantywise.co.uk
fdus-75.freshdesk.com
status.justaftermidnight.io
autospf.com
autospf.com
status.diatem.net
fdus-75.freshdesk.com
support.autospf.com
status.skynetexpress.com
status2.stamateas.de
status.autospf.com
fdus-75.freshdesk.com
status.wundermancommerce.com
autospf.com
help.collage.com
autospf.com
status.autospf.com
autospf.com
fdus-75.freshdesk.com
mta-sts.autospf.com
sni.cloudflaressl.com
autospf.com
fdus-75.freshdesk.com
status.limonadadigital.com
autospf.com
status.autospf.com
staging.autospf.com
status.virtual-developer.com
status.warrantywise.co.uk
status.autospf.com
status.allgreenhosting.global
autospf.com
autospf.com
status.justaftermidnight.io
help.collage.com
traefik.autospf.com
status.synccentral.eu
status.autospf.com
help.collage.com
help.collage.com
fdus-75.freshdesk.com
help.collage.com
help.collage.com
status.diatem.net
status.autospf.com
status.justaftermidnight.io
fdus-75.freshdesk.com
fdus-75.freshdesk.com
help.collage.com
fdus-75.freshdesk.com
help.collage.com
status.autospf.com
status.autospf.com
fdus-75.freshdesk.com
status.allgreenhosting.global
drift.awork.dk
status2.stamateas.de
status.novus-productions.co.uk
auth.autospf.com

Certificate

The complete raw certificate details for api.staging.autospf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339778702612718321946323067685991709434704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 20:05:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 20:05:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.staging.autospf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942591446812163347282327485607824388599857865286166211518494654598463510171435630383627435335827540265152367031894431352129760411638588735672460350538241416182089755419119768547102797547054998148150449300001733950543292064358814654117490621130095642596648742975728711709678246343450269582422094647814040376560211754255116637968373021709594110033129591093107092796988056969976478660245456271096372097395065685860157957551494945465506634788558641130108619264782702510598217874620766379183076552761096823960717639439327834347837751509160441427880118507968334723983451165370703130814177272272441207431778999910366318262855879672417576904719577362283184789609052680432457295913696731928426255034703572882110700311695865987013113441318294744240108596630185994201599753205224197390514211003651779083257853433827548859416097705062963859038393448931686566147094152000769940773157986723432447976159104448372578622302576998491184191609198401794464888331499228286832275190424831408526792709440991556946094526463937006656846432961108316339911467085509369708859861445567766758685219831162062353975059701871812409261881858805337569056527465245595234100515398541929461005273395709046011146069325379595196610832993380982294553969853582117934161174777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f5aa85c4dc47ccd61829cc94c45430d114ad966
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.autospf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fde85bfc4000004030046304402202d0bfed44f2224382798668aaf9b2caa535e5d957f16a36d5492515310b9598502206a0b41a8018660e6b90fbc72389324b01592b48cdde7792130ed08a16ded7d950075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fde85c006000004030046304402204e834d47a953a75d3277f0cbfe0eb863463b3034e4cebbb34338e6cdfa843b4c02202bfdad964602c6f0681fd4a790d8c3e377b37dfaea25050f7d3a005e9145db63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013de596a6fa8b06bb1054fcae542f591b3ce891d7caf2b301689b54ca07597600b96d094fd3a420125f8b55efc38af42b91fb729e6a6ed07d6358a52de943ee6903a603bed6c8f0ece010c80e0b8dd8e2324056fd891e94535013b503e6e85f154b9d2da7f2854a9f9822af02bb970d312665628f048ec6040884488509e8a5d889cb45569ba8156f56dee1a040703940c62942c2f357fc47088c7b52787c2b70da69110bdf01002a1ffe3bff491ce5f79bc4fd7c5790cff54b8dc5e047c5bd3b72907390ec82e366a227090f4e0e47bb2e51ed8b89dfe0384674b33fe17cb08c4f26945d20ffea1c5c3a8f8b38f4ed393fd7519d956ebc594a3dc125fbfce2f