pivotcx.io

Issued by R3

About this certificate

This digital certificate with serial number 04:39:ee:80:8c:c3:79:06:37:a5:e2:68:9a:27:36:77:82:b1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pivotcx.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:ee:80:8c:c3:79:06:37:a5:e2:68:9a:27:36:77:82:b1
Serial Number (int): 368162262373553472843644398031201216463537
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:da:84:c0:88:e3:4a:3f:a6:61:bc:8e:85:eb:30:aa:9d:9d:5c:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:d6:f8:e5:94:f5:4f:49:dd:c9:e9:db:ac:b0:02:e7:f1:43:0a:c5
Fingerprint (sha256): 2d:ff:7e:d4:0c:03:9a:c9:1a:48:62:fe:e1:68:55:2c:54:4f:b9:58:63:1a:06:90:3d:aa:cb:d5:c2:e8:11:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pivotcx.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pivotcx.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pivotcx.io
www.pivotcx.io

Other certificates including the domain name pivotcx.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for pivotcx.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgISBDnugIzDeQY3peJomic2d4KxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDQxNzQ4NDNaFw0yNDAyMDIxNzQ4NDJaMBUxEzARBgNVBAMT
CnBpdm90Y3guaW8wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCfE7FX
HPIJjOIL7R4GlVoVWrq/M+GixgBZc7CSi5JDTsYQQY34Cq6VVILgwOjVtYAAfn0P
AQ8YmHHZB99V6rCTiL3RbY9RymeuVTuD0GNXD+EnwiMHRQunq5GOuiV6ob0spfgn
+g9zQCx14bsS9ERCvdAZAhkOAfKXeTiAy/t/erq9oG2D1Ja0O9Wq0VPFqA8JJWRj
S4Jm5t5Vmcii9N2nZxYExOgs40DXThdhMUBkl+KyCMMglWTPFb88CvgIyoyZgmER
i1FA9NuVAbAqZdJnytoZEaab2vjsOJGeHPy3eIdFg+/7CNXJrdOmUFdtDT2g8nRe
uMSpXH59X9GdjettuAhT7wIXYel9uCHrEdcOmKBJstvIAowmsgYHaI3JYbcBusTY
e0iDFmt7dakW95Yo9ILoUb0mfwJMg2o1o61iEv442aRLRHQU5OEyegLWYEkmq3x1
oNWh10LH6cvezEREyz41iYWNVkkDjvZE7Hm9ABHiDjo+tI56mZNNVZA8MVCvtmQV
HDUdzhOmUmln3DjI1kODE6N5dRQB0MKVOIpAUit/oqIcAZgZ57rPdPINUBOmp/8U
hJHKEvUCwtV0rgCqUtxWlhvK8Lwx9BnSRzQlCco3G8BznHBeYvy275rkytzxPIMY
lyCC2MoqQdWiiMvAh3ER8E5TeUVVeuq24ws19QIDAQABo4ICHDCCAhgwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTb2oTAiONKP6ZhvI6F6zCqnZ1cCjAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcggpwaXZvdGN4Lmlvgg53d3cucGl2b3Rj
eC5pbzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi5uqfnQAAAQD
AEcwRQIhAPEonAnBZrFA84biUDzLgDRDkW1EMjE5phWRlfPEQOP4AiBF0GtFBWY9
qY8JGQfQCjLiWAmgq1Gf0g3JJnMTdA2e7QB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABi5uqfl0AAAQDAEcwRQIgcBslGahAQeLveXqEgFp1Q9/4
J/7ARt9gDBiNM5YQKSECIQDizcBril4Zxi1cu4meAQTiVTj53iv8EcPFk8JLyX1c
GjANBgkqhkiG9w0BAQsFAAOCAQEAMMWO0xDI2Pb+u5McAj1Fq6SX6flyJ9iSiQx5
fZmZS0M+b9MMIX/nPR7dm+1IlCZMjYOD5mCLWPM14xCgjTvBOsAecHX2bAOZ7fA5
MtXJlrJfzR7yRbySqIG9Bdpdooen2ohRVp2eER9Ox1FiFgMoTJVwGzZaflg8vMBB
oTXoPOwNLPgGtzRGCEgqBsXuGfYaXuPnln6GjYiHMzH7zRajYV0/ssnfk5KdwyYU
65t8sxf5G4elzM8HG8DE4g2Nbp+QfIWOvu95HvtWY1LJLTF8QXOo5LE4k3RKBsUx
o2nVBEvb0HbNtXjl58fwOuJ5n0dNlczye7RkCRpIZ0IaUeF49g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368162262373553472843644398031201216463537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 17:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 17:48:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pivotcx.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648977232407093124468498174729909818148085038865745677283951035336680901013171365775101339316228178446657219805006454079783360844861125358558001368759345947302521835599733135796423930715525465457353312131954513666460914252033998039712869608380660790958871583689079268265697794277212255754862664000549754929463170971786270511588793314110592632028336569956556264697725556859003229157577304036495489698353576956189473639530749408628925725511965647188695607402251391331955945639713020244050787401189634313669064990818768813929498496381209941265538729676787052245208533697057268945269968399962011798821989722627596166270598368674692469815045579797694244849718855487678343646430388247673975907308119070434573118543097067769491840731198849308710800825657380321084711093903815325994506096869767813038884178956287357282730564627661552152231662086583934051087299942488323439352052340902759958254906702333302513716362754742842177721764576308506499153922974750500591168137357165201650703173129425890875487625245492177877550347660391805970408543411012102156828585500323927953908775601407348757135161085503983592695651960652790341554500846866451824355719150229305107613798885493265938336577563738612615741815835673948161467710580664748987382445557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbda84c088e34a3fa661bc8e85eb30aa9d9d5c0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivotcx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pivotcx.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9baa7e740000040300473045022100f1289c09c166b140f386e2503ccb803443916d44323139a6159195f3c440e3f8022045d06b4505663da98f091907d00a32e25809a0ab519fd20dc9267313740d9eed007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b9baa7e5d00000403004730450220701b2519a84041e2ef797a84805a7543dff827fec046df600c188d3396102921022100e2cdc06b8a5e19c62d5cbb899e0104e25538f9de2bfc11c3c593c24bc97d5c1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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