developer.affinity.co

Issued by R3

About this certificate

This digital certificate with serial number 04:e3:97:4b:48:58:03:14:01:4c:30:62:58:23:dd:55:ac:f8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=developer.affinity.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:97:4b:48:58:03:14:01:4c:30:62:58:23:dd:55:ac:f8
Serial Number (int): 425894345335028452605411442589136854559992
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:f6:1e:dc:c0:66:fc:16:31:e9:89:8f:3a:4b:bc:48:bb:96:06:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:03:13:a9:e5:0e:94:74:9a:4c:77:53:cf:ef:48:e4:6a:14:14:d4
Fingerprint (sha256): 36:4e:04:ee:ab:fb:38:39:d1:bf:26:ab:51:79:c5:5a:cd:b0:0c:ec:59:ec:c0:b5:64:2a:03:59:d1:f4:db:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate developer.affinity.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developer.affinity.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developer.affinity.co

Other certificates including the domain name affinity.co

(limited to 100 certificates)
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
bearstatus.oostwestsl.com
www.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
blog.affinity.co
support.affinity.co
blog.affinity.co
developer.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
support.affinity.co
affinity.co
images.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
podcast.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
*.affinity.co
podcast.affinity.co
www.affinity.co
www.affinity.co
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
build.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
minerva.care.ca
remotestatus.dpconsulting.com
go.affinity.co
*.affinity.co
go.affinity.co
go.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
images.affinity.co
api-docs.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
mse.status.teletracking.com
www.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
developer.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
support.affinity.co
remotestatus.dpconsulting.com
developer.affinity.co
support.affinity.co
support.affinity.co
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
*.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
static.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
developer.affinity.co
api-docs.affinity.co
support.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
trust.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
api-docs.affinity.co
api-docs.affinity.co
map.affinity.co
vpn-dimi.affinity.co
podcast.affinity.co
podcast.affinity.co
go.affinity.co

Certificate

The complete raw certificate details for developer.affinity.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425894345335028452605411442589136854559992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 12:09:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 12:09:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developer.affinity.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771339050696888831632489732204579117963063093199468477186085219720845774216123407173190751002855702556656537565613855101422766131360832408081273485699100577445066132262564822117557354603911842281028735450696744951513344832343531239814673258933026024670164034617843844057781150784480502125987931452151894322249833895792172326614806295471117283325516014935964487457866122348387843013541577005749587097086082235508262223278659251258871734417953155936439313971564612359985206732575391428045758576927435349149138501525277026740227984248944676644194962291172282598600161417103058098372514371099804873208576645261979398759108663975780898830583869045642288110808420168930860038870410579031615661099226918554677651692762167881632448067956047905161226880971661760938615849844288174887931573650987405267818701889649491747633110549831180097485990409598055807802963161555716228405849694237967047024783056471439166088340835792253107609338014119411771357612439165950900206044279094206698513793971395803044720737660526827730526131800067712038660223603479457617132167188881839129264227420193159786078477501347388571586741061956890791048144557065098521016687664334497408225866143342305905964987398395288819074213412130987821643512033015256996573513297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26f61edcc066fc1631e9898f3a4bbc48bb960650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.affinity.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b76672dcf000004030047304502210097fe6a682243095bfe9942b71b9ed1c7ba324924c9c3b3526e3ce1f89018c8a5022032c2c4c197f61af9ecc908574c0473f4d1b5aad76126dbf5f18028525ee48b3b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b76672dce00000403004730450220444f07782de00bb8549f9be4867d94028eab865e3af841773cfbd7c32953f960022100eea9eff1d35d62197c9eedf87922f040ec9999ce87fe0c6c6a89a3efa6fb3090
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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