cloud-staging.affect-tag.com

Issued by R3

About this certificate

This digital certificate with serial number 04:86:93:15:7f:ce:63:7d:be:40:99:71:ec:bc:6e:33:1f:4f was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cloud-staging.affect-tag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:86:93:15:7f:ce:63:7d:be:40:99:71:ec:bc:6e:33:1f:4f
Serial Number (int): 394242489040278964727126496805097491865423
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:bc:5b:55:ef:6e:59:fc:ad:b2:bf:b7:c6:53:c7:96:7d:7b:5f:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:ee:94:73:66:74:37:e2:a3:e2:24:0e:5c:6b:f8:21:96:d9:a3:2a
Fingerprint (sha256): 25:e8:13:72:31:ff:09:cd:37:1b:b8:90:bd:78:36:4f:3f:fe:31:61:3e:d1:e0:2c:da:d5:fa:ba:fd:ec:e0:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cloud-staging.affect-tag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud-staging.affect-tag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud-staging.affect-tag.com

Other certificates including the domain name affect-tag.com

(limited to 100 certificates)
support.ovvdistributie.nl
support.ovvdistributie.nl
cloud-staging.affect-tag.com
cloud.affect-tag.com
helpdesk.jotronics.nl
helpdesk.velocate.com
affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com
support.ovvdistributie.nl
api-staging.affect-tag.com
support.ovvdistributie.nl
support.ovvdistributie.nl
support.affect-tag.com
radioplayeritalia.xdevel.com
support.bigmarketplace.eu
api-doc-staging.affect-tag.com
support.ovvdistributie.nl
cloud.affect-tag.com
cloud.affect-tag.com
affect-tag.io
affect-tag.com
client.trakeen.com
help.cxinsights.io
traefik-staging.affect-tag.com
affect-tag.com
cloud.affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com

Certificate

The complete raw certificate details for cloud-staging.affect-tag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394242489040278964727126496805097491865423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 19:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 19:08:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud-staging.affect-tag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666185060043003785575265316493533435529311502143241672774380347356700679363135945315317409260122813903350329686852392097245218956432031566747087033186495972893478686318153737584583510814130162727239006119495841594815918260832016009825296886091999316629544911117696948682901463791345582692023790846057607290108802839178759552573359327538718805599442296297958947998020211766750782406243929153899096636303057519696273707715342202204324420374441565413940263391237650825898251016310166319473396356823316879641264040961659217274662609533612344612470948344327786172287919636152332575763733826940183895921746154838493530609289764005063749606663629403625691662758546107437488441515019723674560426114085511599145212235060878492584652907993160925885892758958982791094163231591932561876891742163633122517508041510007509645088712907758660090954238221241321224006781967805591348663185282469681524158393748795232296508553112522120378754180127491559194536532028902558395973512065295076829047194101559863506718012251671903651631303401835748416620051837899200142646072526768748063132680829491554316881998276268276098947921759207745632047104093033830999640460410555658167711887007281322945765963775897308626360234717132013375340770646184501994825162043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29bc5b55ef6e59fcadb2bfb7c653c7967d7b5fe8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-staging.affect-tag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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