avus.rocket.chat

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:dc:f1:7e:d5:0c:25:d4:57:2c:22:51:15:f2:ec:9c:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avus.rocket.chat

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:dc:f1:7e:d5:0c:25:d4:57:2c:22:51:15:f2:ec:9c:28
Serial Number (int): 300082449332425342925502043053366602144808
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:c6:89:44:30:80:ba:ca:84:71:f7:81:3b:c0:e0:b6:a9:17:13:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:2f:c2:91:9a:ec:7b:be:d0:a5:4e:79:9f:c3:2e:6f:1c:30:f8:a6
Fingerprint (sha256): 25:c3:84:c8:bc:c6:7a:95:e6:e6:43:d0:44:a8:38:b3:e5:18:16:d0:af:78:f3:08:77:04:e3:b2:15:d1:4e:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avus.rocket.chat

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avus.rocket.chat

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avus.rocket.chat

Other certificates including the domain name rocket.chat

(limited to 100 certificates)
forums.rocket.chat
cdn-download.rocket.chat
cdn-www.rocket.chat
*.rocket.chat
pr-25957.qa.rocket.chat
synapse.demo-s.fed.rocket.chat
cmd-ctrl.cloud.rocket.chat
monitor.test.cloud.rocket.chat
svc-prom.cloud.rocket.chat
mkt.workspaces.staging.cloud.rocket.chat
*.rocket.chat
wti-lc-premium.rocket.chat
cdn-demo.rocket.chat
pr-25632.qa.rocket.chat
pr-25312.qa.rocket.chat
pr-27205.qa.rocket.chat
omni.rocket.chat
metrics.premium-use2-1.cloud.rocket.chat
cdn-www.rocket.chat
pr-26138.qa.rocket.chat
pr-26318.qa.rocket.chat
cdn-www.rocket.chat
workspace52738.workspaces.staging.cloud.rocket.chat
*.rocket.chat
www.rocket.chat
cdn-www.rocket.chat
pr-26147.qa.rocket.chat
cdn-www.rocket.chat
pr-26832.qa.rocket.chat
cdn-demo.rocket.chat
workspace53692.workspaces.staging.cloud.rocket.chat
avus.rocket.chat
element.dev.fed.rocket.chat
thebrand-x.brandedonline.com
handbook.rocket.chat
vb-1.jitsi.cloud.rocket.chat
voipbbb.dev.rocket.chat
workspace32794.workspaces.staging.cloud.rocket.chat
pr-25570.qa.rocket.chat
pr-26232.qa.rocket.chat
workspace69541.workspaces.staging.cloud.rocket.chat
www.rocket.chat
synapse.tests-a.fed.rocket.chat
*.rocket.chat
cdn-demo.rocket.chat
avus.rocket.chat
forums.rocket.chat
jobs.rocket.chat
pr-25776.qa.rocket.chat
zoho-bridge.cloud.rocket.chat
logs.premium-use2-1.cloud.rocket.chat
monitor.cloud.rocket.chat
rocket.chat
workspace85601.workspaces.staging.cloud.rocket.chat
pr-26558.qa.rocket.chat
metrics.dedicated-sae1-dpesp.cloud.rocket.chat
my.staging.cloud.rocket.chat
forums.rocket.chat
cdn-www.rocket.chat
handbook.rocket.chat
community.rocket.chat
logs.premium-saas-sae1-1.cloud.rocket.chat
checkoutjana02.workspaces.staging.cloud.rocket.chat
pr-26720.qa.rocket.chat
pr-23971.qa.rocket.chat
pr-24908.qa.rocket.chat
loki.stg.cloud.rocket.chat
thebrand-x.brandedonline.com
workspace79985.workspaces.staging.cloud.rocket.chat
pr-26986.qa.rocket.chat
bbb.rocket.chat
*.rocket.chat
pr-25723.qa.rocket.chat
rocket.chat
metrics.svc.cloud.rocket.chat
pr-24998.qa.rocket.chat
argocd.meta.cloud.rocket.chat
pr-24483.qa.rocket.chat
cdn-demo.rocket.chat
testprorated01.workspaces.staging.cloud.rocket.chat
careers.aelieve.com
avus.rocket.chat
logs.dedicated-sae1-dpesp.cloud.rocket.chat
www.rocket.chat
pr-24121.qa.rocket.chat
workspace38398.workspaces.staging.cloud.rocket.chat
thebrand-x.brandedonline.com
jobs.rocket.chat
thebrand-x.brandedonline.com
pr-24322.qa.rocket.chat
workspace11181.workspaces.staging.cloud.rocket.chat
metrics.use1.cloud.rocket.chat
matrix.demo.fed.rocket.chat
pr-27111.qa.rocket.chat
pr-26689.qa.rocket.chat
workspace19917.workspaces.staging.cloud.rocket.chat
cdn-download.rocket.chat
pr-24233.qa.rocket.chat
pr-24936.qa.rocket.chat
pr-26130.qa.rocket.chat

Certificate

The complete raw certificate details for avus.rocket.chat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300082449332425342925502043053366602144808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 01:14:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 01:14:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avus.rocket.chat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891427555992169356192491308858240534503931756408342054618642686951441701685856623292009343696009531484450845559772339286843276729834933889079922580509424552667066822355535313828562773564359189009679470165318079387056818257261203624209188710320465533950084342526537427630692832149153493758372903494631905536893756167002200925139455438016352029069970170737531621552551335280203118453205217926610946714323536086624196042719013483475447011620929082145968196467802713099254435589988095456243113408436791257833747402466880113531037750581474566884657129867531668909399611432202973563505252954063803568830126545765314659865294081977746421716898308645075900241009110818666801715216242846195610627214934089182178516898490659643830982982950533589428925705830167698146994625855526824717874535001081203118971927248407249861385995256400204914991345233126234806628521982057533507442873442209478245891590741577153041000405497392362618660215570980599589582565063098532677749289275236040017162846339369784957595879993706617817337547610268639042435988700619177502078753348769476254990743716760660667087541427117061351699441437655939565352571287534123513570874286917552495644615404913579807020644992083974719251485317227238346169293666213764608577105987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5c689443080baca8471f7813bc0e0b6a917131a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avus.rocket.chat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170899333e80000040300463044022054be8839acbdfee9c875526ee06dbf7c6d582fe1a26f0f2e2a359a53b27bcfd10220451a913f2cdd5d4f524732a10aec1c48fbd46ea4677d43db01a3a92face9f4e6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170899333d60000040300473045022100e9d3921a3f5dafdb25545cc015a34bbf18df3ffcb6c144818388dec31f6e197a0220337b5db5d75752c1fd79d6f5b0fa74e10dd55fc701a55f804ecd049a27ab5f7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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