unibet.3scale.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:64:1e:fb:36:82:dd:7b:16:41:3c:34:19:ca:6e:f0:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=unibet.3scale.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:64:1e:fb:36:82:dd:7b:16:41:3c:34:19:ca:6e:f0:b8
Serial Number (int): 414937288940311866691456949865021053006008
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:10:1a:d6:64:de:ec:0b:16:a0:47:b6:d5:fa:d1:6d:0e:82:d8:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:4d:eb:8c:b0:90:29:95:3c:47:34:f6:8e:d4:e4:16:11:91:f6:a3
Fingerprint (sha256): 29:66:4c:e8:75:51:b3:7f:6e:6c:53:7e:14:2e:eb:f4:6f:8b:12:ee:07:b2:ac:83:f6:8a:7d:20:0f:b6:8a:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate unibet.3scale.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unibet.3scale.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unibet.3scale.net

Other certificates including the domain name 3scale.net

(limited to 100 certificates)
www.3scale.net
eu-status.swrve.com
www.3scale.net
mt-edge-b.3scale.net
www.3scale.net
www.3scale.net
mt-edge-b.3scale.net
tech.3scale.net
etp.status.akamai.com
*.3scale.net
*.3scale.net
mt-edge-b.3scale.net
etp.status.akamai.com
mt-edge-b.3scale.net
eu-status.swrve.com
www.3scale.net
tech.3scale.net
eu-status.swrve.com
eu-status.swrve.com
eu-status.swrve.com
www.3scale.net
eu-status.swrve.com
api-data2crm.3scale.net
eu-status.swrve.com
etp.status.akamai.com
eu-status.swrve.com
eu-status.swrve.com
www.3scale.net
mt-edge-b.3scale.net
autossl.3scale.net
etp.status.akamai.com
eu-status.swrve.com
etp.status.akamai.com
etp.status.akamai.com
mt-edge-b.3scale.net
www.3scale.net
mt-edge-b.3scale.net
www.3scale.net
eu-status.swrve.com
mt-edge-b.3scale.net
mt-edge-b.3scale.net
*.3scale.net
3scale.net
eu-status.swrve.com
etp.status.akamai.com
www.3scale.net
etp.status.akamai.com
etp.status.akamai.com
eu-status.swrve.com
www.3scale.net
eu-status.swrve.com
www.3scale.net
mt-edge-b.3scale.net
eu-status.swrve.com
unibet.3scale.net
tech.3scale.net
eu-status.swrve.com
mt-edge-b.3scale.net
www.3scale.net
www.3scale.net
eu-status.swrve.com
eu-status.swrve.com
www.3scale.net
etp.status.akamai.com
eu-status.swrve.com
etp.status.akamai.com
api-data2crm.3scale.net
*.preview01.3scale.net
www.3scale.net
etp.status.akamai.com
eu-status.swrve.com
etp.status.akamai.com
eu-status.swrve.com
eu-status.swrve.com
www.3scale.net
api-data2crm.3scale.net
eu-status.swrve.com
etp.status.akamai.com
www.3scale.net
www.3scale.net
*.3scale.net
*.3scale.net
*.3scale.net
eu-status.swrve.com
etp.status.akamai.com
etp.status.akamai.com
mt-edge-b.3scale.net
www.3scale.net
mt-edge-b.3scale.net
eu-status.swrve.com
etp.status.akamai.com
mt-edge-b.3scale.net
etp.status.akamai.com
tech.3scale.net
www.3scale.net
eu-status.swrve.com
*.3scale.net
etp.status.akamai.com
*.3scale.net
eu-status.swrve.com

Certificate

The complete raw certificate details for unibet.3scale.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414937288940311866691456949865021053006008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 11:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 11:25:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unibet.3scale.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935029425548968589731912297274957146281358464242771179061950042316099071690110963587550267561538654865260296881718147068685964911749176568750218147082359410647135088204618225237863304019358576328589445083634264996812672293593230971697537961159079348388545725172354887867509745268447500008537455821724003957851916842242871162338622413499672210993325643178381809769712844275404923165530188379246560814487114850030601540083471579575323028868081971319610473252379473065045699856890479732066895300461977012450829653545208387471170137856853591329059711388617194676094663928487409916036514448261527993345325903477080674984521621022181838232872965896652544985856386288746112544440519498962395142198015666335702306262552744855179521785172125491453262366925427174916289427230055752554455358477846043413778288827561051340643560452726715390325660867746742685842298295691970418055406981440194773640222945646945244748809167397152842236725269118820035686148290527013029068102847561976317848255050914891007238376080448514128439901660200553960135221842279987189128709374492884736005505820013072740929249332420135313145963280423691824114015445266098278743850582417962665810518526814357410203954059990437056001361806480049499154606515926947880589551713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06101ad664deec0b16a047b6d5fad16d0e82d8eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibet.3scale.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cbfd68ec30000040300463044022056870bcdbc0931063665019abdc58397c21a83bb608a7a724f088c1235f4f92a0220153886af4c945ace39c0816789ced78e7540ca62c0ad4c2aa9295b8ac845f776007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cbfd68f100000040300483046022100e05ad500f2f855477252029677ba222b02944c7541160dbabb6a2965c6d4a41c022100afed1a6905bb2435678dfa3f859402174a33283310c008fd9dc16d4cda6a95e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007934f5e800d8015ea79161348ce15cd9c437712d4f233810e5b9b5d22553f6328f042a10f46f5f319388835a91e323eb965a48bb61ac8791aa67de7a0e391a14935b824a1beba98783ba56b12fea01d54689a17dd55738f49911d06801e360fc253f87f7276fb4134c62675abaddc52a1b8903ff876288b45a2c49ea6e8ac1740dca81a6f7221d7b1eb23f9799ac7f90efe9306c343a1fba9aa7846fa83d5cef81eec81bdeb43d20f3570cd3052132c8f14b368af4cf4f7f789b07c3f063a49fa03993e046df4156df60ce6400ceb9cdac4201fdc8088273f86ac332c48294c1599ae466614f3fc0d28d442edf4f5489c557b4897872284736d01e0f6a8ca231