fup-dev.hosted.livingdocs.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:d2:07:02:34:4e:a9:40:21:4c:7a:ca:78:fc:96:33:c6 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fup-dev.hosted.livingdocs.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:d2:07:02:34:4e:a9:40:21:4c:7a:ca:78:fc:96:33:c6
Serial Number (int): 263317443899787302434412145329144583304134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:61:48:09:fd:a8:37:5d:bf:38:a1:ba:e8:c6:ba:e8:d3:bd:8e:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:d7:c4:eb:7e:99:5b:1a:6e:2e:7a:6f:d0:1a:32:47:54:79:75:25
Fingerprint (sha256): 40:06:9c:f5:57:ec:7f:3d:33:85:eb:89:98:43:b5:8d:4f:20:21:5c:47:5e:c9:00:8f:23:b0:31:e0:0f:30:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate fup-dev.hosted.livingdocs.io

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fup-dev.hosted.livingdocs.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fup-dev-ldocs.fupcloud.net
fup-dev.hosted.livingdocs.io
fup-dev.livingdocsapi.hui2.fupcloud.net

Other certificates including the domain name livingdocs.io

(limited to 100 certificates)
livingdocs.io
hosted.livingdocs.io
production-server.hosted.livingdocs.io
bluewin-poc-server.hosted.livingdocs.io
livingdocs.io
fup-ddv-server.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
docs.livingdocs.io
ippen-server.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
livingdocs.io
hosted.livingdocs.io
livingdocs.io
service-editor-production.livingdocs.io
livingdocs.io
vhtest0.hosted.livingdocs.io
magazine-example.livingdocs.io
bluewin2-server.hosted.livingdocs.io
docs.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
blog.livingdocs.io
livingdocs.io
livingdocs.io
concourse.livingdocs.io
fup-tsp-server.hosted.livingdocs.io
fup-ddv.hosted.livingdocs.io
staging.hosted.livingdocs.io
livingdocs.io
staging.hosted.livingdocs.io
staging-server.hosted.livingdocs.io
docs.livingdocs.io
forward.livingdocs.io
fup-dev-server.hosted.livingdocs.io
livingdocs.io
production-server.hosted.livingdocs.io
service-editor-production.livingdocs.io
service-editor-production.livingdocs.io
livingdocs.io
staging-server.hosted.livingdocs.io
fup-ddv.hosted.livingdocs.io
production-server.hosted.livingdocs.io
docs.livingdocs.io
fup-prod.hosted.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
production.hosted.livingdocs.io
bluewin-poc.hosted.livingdocs.io
beta.livingdocs.io
livingdocs.io
hansmi0-server.hosted.livingdocs.io
hosted.livingdocs.io
livingdocs.io
fup-prod.hosted.livingdocs.io
livingdocs.io
livingdocs.io
fup-dev.hosted.livingdocs.io
livingdocs.io
vhtest0.hosted.livingdocs.io
livingdocs.io
hosted.livingdocs.io
rancher.livingdocs.io
production.hosted.livingdocs.io
hosted.livingdocs.io
livingdocs.io
*.livingdocs.io
cdn.livingdocs.io
htest999.hosted.livingdocs.io
livingdocs.io
staging-server.hosted.livingdocs.io
vhtest0-server.hosted.livingdocs.io
livingdocs.io
production-server.hosted.livingdocs.io
assets.designs.livingdocs.io
rancher.livingdocs.io
bluewin-poc.hosted.livingdocs.io
tobru1.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
hosted.livingdocs.io
staging-server.hosted.livingdocs.io
livingdocs.io
hansmi0-server.hosted.livingdocs.io
concourse.livingdocs.io
production-server.hosted.livingdocs.io
docs.livingdocs.io
livingdocs.io
hosted.livingdocs.io
bluewin-poc-server.hosted.livingdocs.io
livingdocs.io
livingdocs.io
fup-tsp-server.hosted.livingdocs.io
staging.hosted.livingdocs.io
docs.livingdocs.io
magazine-example.livingdocs.io
livingdocs.io
blog.livingdocs.io
livingdocs.io
service-editor-production.livingdocs.io

Certificate

The complete raw certificate details for fup-dev.hosted.livingdocs.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263317443899787302434412145329144583304134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-05 23:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-03 23:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fup-dev.hosted.livingdocs.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846532365571738455797269479087575703480983075857442773449703164280966656847505998576008184082060769221676471677160070496689905695166474383778167776821414466598030393247565427933204592377677947332586418009992995023042922830654367221667784951430866772601803350595382981331557639268282411683699912033177250694900405413094295994800199114931834419995249560502434154276032380110764576218964682760704428935059181294027553466420728026000117894990412443110547484664697161169318290929660359646153008034513579912343834892116311630060043831977502403169653512052497189321148581881714452730049303458685368167488719337284779011848275182580419401003770046064163863815140530718085880294134311774358312146222945993792376559251446283634026131801642444903431119329187226901984878508072783323632195801561592945515525681336009290589206613251415022600757991714316739700884426752592909094101247533197856214331309691075401516428947709357857841410431375146708296167964501901759469371393049554713918685600660568935831610312468316309014025207243338729605815684601083312504820504781281218672096972826616843129165295865257936715746813240980730587458592974099539698868573277076670507506508325802925125020424966199442540395211912338299478730466692139452296121008223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe614809fda8375dbf38a1bae8c6bae8d3bd8e93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fup-dev-ldocs.fupcloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fup-dev.hosted.livingdocs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fup-dev.livingdocsapi.hui2.fupcloud.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e921f6c2c4163ceb20063439e43441c3a42959bc596835e3c671ed416346dfda21154e9b05c1e72f43ad0c857aaa0d4b4bcd6da331ec512ba501845c7b9576294a89959e724495400fbe8570f117fdbb4f0cbc7447f285662c4ec8f4f97e1350824ac9138ce2366c9b62e6e6820ba3f5b862a3759fc95ef104d484f61bd74b5bd3919220327b4bb3684cad9b442e1311c7aecf2ed9331021a68484e5c256f995ddfa76929ec0ecd8f52a2f3633fb6d2ff51ccbcffc339539280f630da38c7cc3edf3a5aa2f29247c70b00469efbfb6c97e599a71ac5078459eb796359a763fe0eb517feb1e521773762cc2863b0113498eca33f8348320d99c1c6fe2c2ea463