ea1-i93.envie-autonomie.test.thecodingmachine.com

Issued by R3

About this certificate

This digital certificate with serial number 04:05:16:c7:d5:d5:d2:3e:5e:e1:80:f5:e6:73:93:5e:9b:63 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ea1-i93.envie-autonomie.test.thecodingmachine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:05:16:c7:d5:d5:d2:3e:5e:e1:80:f5:e6:73:93:5e:9b:63
Serial Number (int): 350180836181721706930584094544137109281635
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:8a:4e:f6:8c:52:79:52:bb:3a:a7:0b:fe:2d:78:08:bb:69:1f:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:4c:cc:97:6d:5a:56:c5:91:97:71:17:e3:a5:c4:68:46:b2:9e:da
Fingerprint (sha256): 39:03:f3:62:20:e1:75:30:a1:d1:60:c0:ec:0c:4c:32:ed:8a:93:df:2a:d7:8a:6e:16:3a:bf:00:cd:29:f4:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ea1-i93.envie-autonomie.test.thecodingmachine.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ea1-i93.envie-autonomie.test.thecodingmachine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ea1-i93.envie-autonomie.test.thecodingmachine.com
ea1-i93.envie-autonomie.test.thecodingmachine.com
logs.ea1-i93.envie-autonomie.test.thecodingmachine.com
mailpit.ea1-i93.envie-autonomie.test.thecodingmachine.com
minio.ea1-i93.envie-autonomie.test.thecodingmachine.com
phpmyadmin.ea1-i93.envie-autonomie.test.thecodingmachine.com

Other certificates including the domain name thecodingmachine.com

(limited to 100 certificates)
si.thecodingmachine.com
mantis.thecodingmachine.com
todo.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
bestpractices.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
sitetest.thecodingmachine.com
codersv2.thecodingmachine.com
git.thecodingmachine.com
thecodingmachine.com
formationhttps.visial.test.thecodingmachine.com
todo.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
sitetest.thecodingmachine.com
bigbro.thecodingmachine.com
projects.accountsprojects.uk
loginmachine.thecodingmachine.com
sitetest.thecodingmachine.com
sitetest.thecodingmachine.com
docknmach.thecodingmachine.com
coders.thecodingmachine.com
si.thecodingmachine.com
todo.thecodingmachine.com
contactmachine.thecodingmachine.com
projects.publisherpro.app
api.robine.thecodingmachine.com
sitetest.thecodingmachine.com
git.thecodingmachine.com
contactmachine.thecodingmachine.com
git.thecodingmachine.com
bigbro.thecodingmachine.com
si.thecodingmachine.com
oauth.thecodingmachine.com
coders.thecodingmachine.com
codersv2.thecodingmachine.com
project.thecodingmachine.com
project.thecodingmachine.com
clientmachine.thecodingmachine.com
git.thecodingmachine.com
git.thecodingmachine.com
thecodingmachine.com
git.thecodingmachine.com
api.staging.ca.test.thecodingmachine.com
git.thecodingmachine.com
loginmachine.thecodingmachine.com
git.thecodingmachine.com
projects.publisherpro.app
mantis.thecodingmachine.com
thecodingmachine.com
mantis.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
clientmachine.thecodingmachine.com
codersv2.thecodingmachine.com
contactmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
uneo.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
mail.thecodingmachine.com
sitetest.thecodingmachine.com
oauth.thecodingmachine.com
contactmachine.thecodingmachine.com
si.thecodingmachine.com
ea1-i93.envie-autonomie.test.thecodingmachine.com
si.thecodingmachine.com
mantis.thecodingmachine.com
mail.thecodingmachine.com
nowco.thecodingmachine.com
si.thecodingmachine.com
projects.publisherpro.app
bestpractices.thecodingmachine.com
thecodingmachine.com
si.thecodingmachine.com
thecodingmachine.com
bestpractices.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
thecodingmachine.com
bestpractices.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com
loginmachine-kube.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com
tournoi.thecodingmachine.com
ea1-t158.envie-autonomie.test.thecodingmachine.com
bestpractices.thecodingmachine.com
uneo.thecodingmachine.com
oauth.thecodingmachine.com
bestpractices.thecodingmachine.com
thecodingmachine.com
thecodingmachine.com
git.thecodingmachine.com
si.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
project.thecodingmachine.com
todo.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com

Certificate

The complete raw certificate details for ea1-i93.envie-autonomie.test.thecodingmachine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJG1umcV11FLIYnNbhfJ
bhhW7iMQa1Xgf0eP2S21yBDEjgxJX9lEC4cW+lWBP9/gRwsgQcZWcK1uoAmrTila
DfCKsGmWpG605p2Oj4mCch7uEuTk66xAhEUHIaIGuC7GjBg4ShwqJc9YtpvUl8iZ
XUbIH6WToWOBWVX96fDdlXPN9oF+2CuWG0fzGNZfEhs2o0hWPcG+BNAvQlmRREIE
A2Yx35wso072cN1wioeRgsz99z8uj3cXWO3A5Uvg0GB0jvCwDPktGtHYoObZdk7x
RX+rp2S8QgluiQggX0wNPGM5H/IEuDOYMirGeeb99scg8iKEma3O9ah6uegr6xjV
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350180836181721706930584094544137109281635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 08:16:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 08:16:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25824466430668195928560934998288759944526093923282454555901320264782170076795688449925968324384379330968949805907231601774803179661559122581457950108416307381620682288179333533406483820499606126283449043883293172899494689392119076370834281989702532299457835555886064001504716851942156731851023567330620506043321282416975946048734522614125377537656143009782970687494465980606730292673988641467396383751727751839639837765266489733740906003420984917084955288379739680384749014015467256473772670093176012897456072658743763842099643232021430070258135621034931760411866945591735245296120005421686445361013873847662353634621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a8a4ef68c527952bb3aa70bfe2d7808bb691fc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailpit.ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minio.ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin.ea1-i93.envie-autonomie.test.thecodingmachine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ea865a4610000040300473045022046bba24a67bb8606a1899c593add47b720947e75bc6bfbf62b452e15bcc3255c022100aa5968a5ade25b0486b6c1dbced0440c0bdb82517984a091357bd3a745bad78500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea865a4a50000040300473045022100e5887313d98f518131d869693b09099a851e365c98a623107d40eeb1c3827f7f022016876c8cc74104fda0c1a9e30df33db7dd388a58a1bc20fde711ce7b0ed6ac79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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