developer.affinity.co

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:86:0c:20:2c:1f:31:55:f5:5a:2e:5b:ca:fb:c4:26:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=developer.affinity.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:86:0c:20:2c:1f:31:55:f5:5a:2e:5b:ca:fb:c4:26:bb
Serial Number (int): 379593018628376668052641148607061467342523
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:39:a0:31:71:dc:81:97:75:43:f0:98:27:40:46:62:46:81:38:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:99:4a:16:f4:84:59:04:82:87:6e:08:61:35:8a:dd:88:61:ef:1c
Fingerprint (sha256): 2b:96:31:d9:e1:d5:f9:87:3f:4b:bc:97:68:13:b5:2f:43:ba:9e:59:7e:8c:f2:82:41:74:36:36:66:97:16:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate developer.affinity.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developer.affinity.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developer.affinity.co

Other certificates including the domain name affinity.co

(limited to 100 certificates)
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
bearstatus.oostwestsl.com
www.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
blog.affinity.co
support.affinity.co
blog.affinity.co
developer.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
support.affinity.co
affinity.co
images.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
podcast.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
*.affinity.co
podcast.affinity.co
www.affinity.co
www.affinity.co
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
build.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
minerva.care.ca
remotestatus.dpconsulting.com
go.affinity.co
*.affinity.co
go.affinity.co
go.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
images.affinity.co
api-docs.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
mse.status.teletracking.com
www.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
developer.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
support.affinity.co
remotestatus.dpconsulting.com
developer.affinity.co
support.affinity.co
support.affinity.co
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
*.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
static.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
developer.affinity.co
api-docs.affinity.co
support.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
trust.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
api-docs.affinity.co
api-docs.affinity.co
map.affinity.co
vpn-dimi.affinity.co
podcast.affinity.co
podcast.affinity.co
go.affinity.co

Certificate

The complete raw certificate details for developer.affinity.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISBFuGDCAsHzFV9VouW8r7xCa7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjcxMzExMDVaFw0yNDAzMjYxMzExMDRaMCAxHjAcBgNVBAMT
FWRldmVsb3Blci5hZmZpbml0eS5jbzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAMNxpeutLTvHonU1gLGYHHFhpQtmBMzkUh9VI1AeDaYFL1mKtRWL55aV
98nz/Pj2UYU7tQIeUNlC8Ut330UGA8WVoBepHUrU11CBohW8KUa0LeN1ABQGPQNz
dM1eaho5pJu5lguQj/mfriVYbut3+MXhhL6CpE0Ezi4XfGQPCNJuXqhnOlbcPt3c
EQTtuvlegjm7a2VNmY/wh7b5giAe50sOD9uGZgPo3wc8LcsIje1fh+J5lguKFh/0
FCVE+bCrsCqz1V3ysSgK1EU/5bbEtQLOXRg4lzw6mL51/7af71F9y+MeOqm+FZ7U
Yo8QWF/BQIiv3wuBNKH5xjWACS9y7oXYV4VnWaW1T3wOM9ejucT6Ylmj23aZ6/nB
aTiSU7id32SBxq32DIoH+qfFyQTbfPCE/Rk3YML0KxMYDBMk7EdXv6Ro2ECMHXtp
RngBKNMOX1D7LEvreqipfVYm004HqftreOX4igZF4p7dJUIBnZfdMxBcUVwc5XVG
UlHJFz95BK6Lci2nS8tiGAaaolbyhltklNFDkRQ4DRJtPOJMNgWgaQpoYchlxjXv
Qm1Y3bGAo9DcgalaBvTlb/wh5yAir8eE2fgymAs4Aff9WE33JM9ovMo4H60ozEiA
URuGZIRfINAyFi0V/t4smYJD3w0F1jDS0ZtoM3UplF+4TCb+srlDAgMBAAGjggIX
MIICEzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIU5oDFx3IGXdUPwmCdARmJGgTi+
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWRldmVsb3Blci5h
ZmZpbml0eS5jbzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjKud
WisAAAQDAEcwRQIhAPbi7GZQGpJaFpovlUuNkJq2L3vHjPhSFbr1tsJgWZP0AiBa
alM5hLM1zYneAIbjWhMmob8e5ZTci0CnF6P3sJXwbwB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABjKudWjsAAAQDAEcwRQIhALEFof8PelS/BTCv
CQBryJ6MYnQgw77RFDtEmmOB4sASAiATQ6zh2qSn2gLJHQxeUXyl3sqjkRBOyqN8
oz6GoXWcSDANBgkqhkiG9w0BAQsFAAOCAQEATfldfgGV75LUZ1mlcr9mUoOpTZOz
UdDCH6qL6686FcDMRSEiwzNrvSsdyaVCLTyAc2K/uxdEJ1t2ugjPg+tfb2id5E+7
so6vrHMRCN1+Uk9X1AiNVYrcsNEInzENhEfh4ENo2RC4iK2Ax5LnXRASSxt5Jg8L
t3uZ/MJ1GYrbcofsyA7kIiTLamXw0B8csFCtniI7sW1U3HX12mIo9pmyJdpMPzHI
Jv6DgEF5tnqOA/P3uKCi6ldP1U0jMdTXcRrh1+TtRETYNRqdBEzGuZkcgtOr9DsQ
fpQ0rYqGkgu7yAvarZg5jpgF0+bYrdp5iufePApfY81WHgwB2mbIOVhkEw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379593018628376668052641148607061467342523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 13:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 13:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developer.affinity.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797341702282433648493496269588246417123944543787889982265930640616901021505778771690970574828393060589530541488611742688263523021234153703472836970779505243768392706411561329637890073764888652716934196273686634110906491833360621389596089901245424707992791155227439344338694315101120587813941430403450219999137854730851778336888124875905804862215942945419592661632321755702524932256809776795761114706322329055313694869533233776465231030706540842171940267042059821412277613344068311119478355798442379052787108711206496915288616617254615148641783638187224485098505432873759257905815222226988563866396109536576030941440530939171781841767972322366331360784098481021062767181944660328643956831321038126494030258000190148558859279811256752709395127278120697680337821735840311756081175049803497513047659006473210711087884790816036355963500250672362774799199620419828439916331964078444390211006360268582582266205203414150001802673791392314255796980977771546388873471027731114818994220613178161224970063773151483784041091361290642041363659549068349419462111699226976779732085706594411623808589535511389616596340211921155186160681383428119023821216907623832244779057531712452170592178785569744306346385340522158583646485582369093078278038796611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8539a03171dc81977543f09827404662468138be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.affinity.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cab9d5a2b0000040300473045022100f6e2ec66501a925a169a2f954b8d909ab62f7bc78cf85215baf5b6c2605993f402205a6a533984b335cd89de0086e35a1326a1bf1ee594dc8b40a717a3f7b095f06f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cab9d5a3b0000040300473045022100b105a1ff0f7a54bf0530af09006bc89e8c627420c3bed1143b449a6381e2c01202201343ace1daa4a7da02c91d0c5e517ca5decaa391104ecaa37ca33e86a1759c48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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