api.syn.vshn.net

Issued by R3

About this certificate

This digital certificate with serial number 04:02:a3:36:10:3e:34:d0:d3:72:e0:5e:28:ad:23:50:01:a1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.syn.vshn.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:a3:36:10:3e:34:d0:d3:72:e0:5e:28:ad:23:50:01:a1
Serial Number (int): 349346653337673211091328338037353854534049
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:02:4b:d5:00:23:33:6a:96:38:70:3b:84:a5:56:c5:18:58:70:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:bb:7c:3a:d7:73:40:7f:33:e8:7f:5c:63:4c:06:d8:69:cc:a2:53
Fingerprint (sha256): 24:c1:3e:96:d6:be:19:e3:42:5a:5e:be:00:32:f4:78:cd:c8:e0:98:0b:c0:6c:b1:6f:de:9f:3e:29:b3:a6:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.syn.vshn.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.syn.vshn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.syn.vshn.net

Other certificates including the domain name vshn.net

(limited to 100 certificates)
grafana.vshn.net
web1.jmag.cust.vshn.net
status.vshn.net
demo.esurance.cust.vshn.net
status.vshn.net
kp-test.test.atfinity.cust.vshn.net
git.hrms.ch
frontend1.vita.cust.vshn.net
web1.strampolino.cust.vshn.net
status.vshn.net
web1.jmag.cust.vshn.net
app-staging.esurance.cust.vshn.net
web1.jmag.cust.vshn.net
app-preprod.esurance.cust.vshn.net
vshn.com
git.hrms.ch
git.vshn.net
control.vshn.net
status.vshn.net
sogo.vshn.net
sogo.vshn.net
vitawahlen.ch
git.vshn.net
*.vshn.net
git.hrms.ch
test.appuio.ch
files.vshn.net
qynamic-prod.qynamic.com
web1.jmag.cust.vshn.net
status.appuio.ch
git.vshn.net
web1.agrola.cust.vshn.net
logs-api.monitoring.vshn.net
demo.esurance.cust.vshn.net
git.hrms.ch
cache2.cloudscale.vshn.net
tool-dev.esurance.cust.vshn.net
vshn.net
demo.esurance.cust.vshn.net
demo.esurance.cust.vshn.net
app-staging.esurance.cust.vshn.net
*.preprod.cluster.esurance.cust.vshn.net
vault.syn.vshn.net
gitlab.bar.cust.vshn.net
web1.diagonal.cust.vshn.net
app-staging.esurance.cust.vshn.net
grafana.vshn.net
graylog.capturemedia.cust.vshn.net
web1.test.monitoring.vshn.net
appuio.ch
qynamic-prod.qynamic.com
web1.strampolino.cust.vshn.net
test.diva.infra1.lehner.cust.vshn.net
kp-test.test.atfinity.cust.vshn.net
vshn.com
*.vshn.net
www.tachles.ch
api.syn.vshn.net
magento1.tsystems.poc.vshn.net
control.vshn.net
api.logs.vshn.net
git-new.vshn.net
git.hrms.ch
cache1.ix.gtg.ch.vshn.net
vitawahlen.ch
app-staging.esurance.cust.vshn.net
git.vshn.net
control.vshn.net
control.vshn.net
git-mirror.vshn.net
app-prod.esurance.cust.vshn.net
appuio.ch
logs.vshn.net
status.vshn.net
exabgp2.cloudscale.vshn.net
test1.diagonal.cust.vshn.net
status.appuio.ch
dev-web1.jmag.cust.vshn.net
ticket.vshn.net
ticket.vshn.net
git.vshn.net
app-preprod.esurance.cust.vshn.net
app-preprod.esurance.cust.vshn.net
dev-web1.jmag.cust.vshn.net
git.hrms.ch
dev-web1.smhv.cust.vshn.net
control.vshn.net
graylog.capturemedia.cust.vshn.net
git.vshn.net
vshn.com
master1.monitoring.vshn.net
influx1.monitoring.vshn.net
vitawahlen.ch
logs.vshn.net
cache2.cloudscale.vshn.net
dev-web1.jmag.cust.vshn.net
grafana.vshn.net
web1.smhv.cust.vshn.net
files.vshn.net
web1.agrola.cust.vshn.net

Certificate

The complete raw certificate details for api.syn.vshn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUCR+od5H5qe8avQrUqJ
b/rmIWKLkCaaHfPjuw/3aZLrhQa9MZyaU2a+pXXnWQz1a3RUI1BbqZis2iQvjmDv
UgdLmbByWbt/j1jXGNz529QTxDvND3XylQICWYWW9Ccm6aEMgCRw7oKloDu39bjQ
615VJPpoZZ/47MD7K7MHXiYxHfwp5RUuFhMLog8BksxwfoAmH38tG5/drrAuQGgN
FsYS7dgnv85XOIorDPiRH5tvPUbD0NG84YgJ3jzB9INf8DKE++tr4WxbQ3ytKUGl
0Tggd0cRdIxjEDTi1dtn6H0nWXjUHlnDs1X2EQAstjyFhS4WqAth1b3G2HQrXWlD
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349346653337673211091328338037353854534049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 22:59:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 22:59:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.syn.vshn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22880973965509029933833858085910450813230208318653783392445128440853066996183437218129871593189547584362578616997455641951057246500398673194392856784807804133095293741190828855704729886009734536442999007255609433569098344700493843970233266798409998627874635817028100424950582171998334966197975632354027590632754277644889811698702775152250395202284852534070826977322129093908889974236467255387125279981397300444854842128134632665175708323127013300405227186981439332983008616675917525865081719641772344260313867608445582612296942492419127011929761642140069445514434010806896157892216781965824929281870910677145203852199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94024bd50023336a9638703b84a556c518587041
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.syn.vshn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d957600dc00000403004830460221009a9582167f8b36300332f29f290e05307141aa86f953e35b4ce2550302da5dec022100b1c3b098cd9ef5f4eb5dc2db69fee4563f5e468e5eb069d0eb809d81024aaf460076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d957607b9000004030047304502201aaafb8f8e45fd47b4753d11acbaf1c5f44e7967319c1b3f9afa5bc14528c30e02210091d9660658e7fef2854401f5c67e959446857c1f563c700ae12ecab6b8b10995
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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