www.ceqr.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:d6:fe:96:fa:50:a2:62:e6:fb:f9:eb:01:b2:a8:23:f0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ceqr.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:d6:fe:96:fa:50:a2:62:e6:fb:f9:eb:01:b2:a8:23:f0
Serial Number (int): 266726869995788293024979335501883764122608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:a4:06:35:70:22:df:86:14:d0:32:81:dc:b8:af:ee:b2:d6:c4:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:cb:a7:10:59:a5:c8:78:29:34:d3:80:59:4b:cb:9b:5d:4a:11:ea
Fingerprint (sha256): 43:ae:cc:54:81:e7:6f:1b:b6:d0:ab:2e:a8:1c:48:22:4c:91:c5:37:50:4f:c0:b4:1c:17:b7:2e:10:35:74:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ceqr.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ceqr.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ceqr.app
www.ceqr.app

Other certificates including the domain name ceqr.app

(limited to 100 certificates)
ceqr.app
www.ceqr.app
www.ceqr.app
www.ceqr.app
ceqr.app
popfactfinder.planning.nyc.gov
www.ceqr.app
www.ceqr.app
www.ceqr.app
ceqr.app
ceqr.app
www.ceqr.app
ceqr.app
ceqr.app
ceqr.app
www.ceqr.app
www.ceqr.app
api.ceqr.app
ceqr.app
api.ceqr.app
www.ceqr.app
ceqr.app
www.ceqr.app
api.ceqr.app
ceqr.app
ceqr.app
www.ceqr.app
api.ceqr.app
ceqr.app
www.ceqr.app

Certificate

The complete raw certificate details for www.ceqr.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r5ovhLSgc4pJGr+YYve
fBs4g+0oXdkVlPbR522qDhGxm3K9UjeHsvt0hozy6zMscjueqa5Jc2i0dSVH3FpY
stHrR1nN3JzePUF1o3qxkSTgzKWUgpBqpxJpHVSNmNjPqLAMGuGarX0DplVQHzr4
HEktt4nBxHDqm0LZnHFAZO9UB3ssPQulZ0fcLT+0Nkkl6dSbMOZxrI5wmqq9rtkV
u7ofc1K/jBgeyEHxVUEvd3Evz2/nWxJO/F6osWSkgEa7hqJeCGvT+UAtRLSY1aQq
3NuExBzmtrG6zOKEfH0esueB5ZRwvo7Fl9aepRKAesjy9/LW5DSNkakevDtwM1qY
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266726869995788293024979335501883764122608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 14:09:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 14:09:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ceqr.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26603938294367883361653873371435252664839564687158526187946832867798620535211268100890319496770998622951003236115919680032959614677477600495296070631944497895254354576376875768228832723507975873238396086097006808299759501043087005277190791085649420430786966396971198262128604734301167525012979008828559036870864657374056067695631071304720480432481530711196072386263558072156738554713137435286512755669479287256005425906015891168768967206538044558888182827722637475153464297396857417133057843124127421118271511389461381592940910310234983178703893370616960260544122536371156143546534336352717156081367583362712778479813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11a406357022df8614d03281dcb8afeeb2d6c459
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ceqr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceqr.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bfb5470350000040300473045022100c25c47239da6fc5c258e22dd7b5faac2e19ae4efc44f91b7e0fc11ab0201a6b102203ae70f300b36d2e15c793e6ff006ca156c84c9eec96ff138a8fb0f65f2b101ff007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bfb54724300000403004830460221009fd92f3732b1f56abccc6232b36e2ea1f4bec2e7252ad97cbc8d3ace02fd7793022100ef3a47220a71da1c69dc80dd7e26233e1f586e52a50580768955c9c3e5e38bd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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