traefik.novo-connect.com

Issued by R3

About this certificate

This digital certificate with serial number 04:89:ac:04:57:6d:89:96:ce:6f:d3:d7:f2:da:28:7e:b8:80 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=traefik.novo-connect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:89:ac:04:57:6d:89:96:ce:6f:d3:d7:f2:da:28:7e:b8:80
Serial Number (int): 395296477752920082742266843314344549070976
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:d2:db:65:76:49:6f:a4:ea:4e:4e:2f:c3:a7:4a:96:4a:f5:c2:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:bd:09:ff:e8:23:0e:bd:da:98:2e:9a:d6:71:07:b2:c5:d6:12:3f
Fingerprint (sha256): 3b:ba:19:99:3e:0e:45:2e:1d:13:ea:9b:1a:64:75:ea:a8:9c:df:1b:9c:bd:bb:f0:cd:10:71:dc:ef:81:39:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate traefik.novo-connect.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traefik.novo-connect.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

traefik.novo-connect.com

Other certificates including the domain name novo-connect.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for traefik.novo-connect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvCwu6J54Lg09d2LMUYD+
WAfY8g/eLoX7mVl/mXjXDz7DzrpwC1H8SV1J/xjXvUGs4FrOSemIhCsr1u+6h+8D
ogQu4dBKT86qwltThRklXnT4hkPB03dyD4D+YaXUvs61RUobI/qwGur4YsfxVFMh
J72oXWHcLsjw83LPGnDEi9Tlfswdz1d7l52F9fLgeixJgxehQxZtA7P7tILrQwSf
XUyYV9cGUFCvLdFfiEIRYKs2q8NyfFmz9O4LN7zLKuA6FD9sS9foriQ4aeueswMp
gqzzpE/wg/Y4XQmU6/JnxhMaT6cBbTe/wgz1uF9BrfcIwXKK5ycfOuc6P44S0N0+
lAhrYjSYj2K7dS4h2Rkp0NbT+CL8l2sMVdlA+DnnmpOrxPSjDwVGfrYn6I1oK11h
rd0996imJzClKtrcI2An/PZTaPwZFLH6I2spiYJ94WKb34xmgNtl97d9rs8+XXLg
MDbC6QBIr1HgENLZQyucZh3iweffstO4s3YZzTiX0vB52klhdGiNuKkT0xkq4Y1I
at5GoXuoi5A8HH4i7cTAVpFjaQuj9g4+yy5s7sgGmdJ13mwQZuXouNqzbdKajThv
UR8ckoIr692MqAi/o1mUmYoUylE8z4qgS64yD5C0Tn4e0olxHrILFL/RU+b4Q034
qxrwUgd9phlNNc9BT7h3UVkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395296477752920082742266843314344549070976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 09:24:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 09:24:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traefik.novo-connect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767677193696651297325675812620648803137271039114603066030615560795931085887999666909365179089170257379273788137232047599778289463863654948385371062339906141244292400901168442088596501892814584777115602841769748460795428920353520963342426585074862150221361920370145966573671871200706538865734836591558527317400107864178842092437252320003363010691972901970443164935239359651219528130143823210289720564238377273900061910239177846473565953018313030129819921992311018921115617391120378277487967574290435494834865649689094547249911395682807158369269472927271983611779350462972401427500581420029279318693340184515027261925664543929384672291195233967067207114213506474754560039167323909180687481854060125251254316456297561090824090764152222176744610436562112035790636408108632820993955002449384322452912393761869803223714439515142341786131155547616315002995777980198196025299165525768330294445267131489986198386981944693502707259448404223885941410005600566846899707621664222785881381008854406691378124064987263059324803589414021037563812236993810262923508157756059603782125268377541278590304253307344916608677637365070240142937596983757803870240841532089069416863654498156023327183276496350861085336706630716425077271547700578965628168655193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01d2db6576496fa4ea4e4e2fc3a74a964af5c248
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traefik.novo-connect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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