partners.ruckusdev.ruckuswireless.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ff:a5:a0:ac:a0:c2:df:a3:a5:b4:8c:89:24:a6:7d:f6:8a was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=partners.ruckusdev.ruckuswireless.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:a5:a0:ac:a0:c2:df:a3:a5:b4:8c:89:24:a6:7d:f6:8a
Serial Number (int): 435441304179993439746640997293251612243594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:98:39:2a:10:fb:66:89:db:96:6c:ea:a8:a8:e4:54:87:30:c3:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:b0:89:1b:9a:f4:0b:34:8b:6b:84:bf:d9:f7:20:82:50:29:6f:bf
Fingerprint (sha256): 46:45:bf:6e:79:79:9c:b1:62:29:bd:b7:54:24:59:a8:e7:69:dc:cb:38:1f:2b:b5:d0:ff:09:6a:fd:ec:5d:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate partners.ruckusdev.ruckuswireless.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partners.ruckusdev.ruckuswireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bridge-registration-qa.bridgeapp.com
dps-stage.pluralsight.com
formalshirts.marksandspencer.com
leagueoflegends.com.cdn.cloudflare.net
myft-api-test.ft.com
partners.ruckusdev.ruckuswireless.com
refer.dotloop.com
sendgrid.trytuesday.com
www.brandstorm.loreal.com

Other certificates including the domain name ruckuswireless.com

(limited to 100 certificates)
onelogin.ruckuswireless.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sendgrid.trytuesday.com
supportqa.ruckuswireless.com
secure03.stage.lithium.com
*.donatello-lab.ruckuswireless.com
*.ruckuswireless.com
devalto.ruckuswireless.com
sni.cloudflaressl.com
ruckusci.ruckuswireless.com
ap-registrar.ruckuswireless.com
info.ruckuswireless.com
support-preuat.ruckuswireless.com
*.ruckuswireless.com
*.donatello.ruckuswireless.com
sni.cloudflaressl.com
*.cloud.ruckuswireless.com
marketing.ruckuswireless.com
secure01.lithium.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
partners.ruckusdev.ruckuswireless.com
sni.cloudflaressl.com
*.ruckuswireless.com
secure03.stage.lithium.com
ap-registrar.ruckuswireless.com
BDC-BITBUCKET.RUCKUSWIRELESS.COM
secure03.stage.lithium.com
secure01.lithium.com
TM.ruckuswireless.com
apr-client.ruckuswireless.com
devalto.ruckuswireless.com
ssl4731.cloudflare.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.donatello.ruckuswireless.com
scalealto.ruckuswireless.com
intalto.ruckuswireless.com
secure01.lithium.com
msan7.myabsorb.com
sni.cloudflaressl.com
secure01.lithium.com
devalto.ruckuswireless.com
renewals.ruckuswireless.com
store.ruckuswireless.com
qaalto.ruckuswireless.com
training.ruckuswireless.com
git-stage.ruckuswireless.com
sni.cloudflaressl.com
msan7.myabsorb.com
ssl509634.cloudflaressl.com
secure03.stage.lithium.com
qaalto.ruckuswireless.com
sni.cloudflaressl.com
ssl4731.cloudflare.com
sni.cloudflaressl.com
elastigirl.ruckuswireless.com
refer.dotloop.com
sni.cloudflaressl.com
devstagealto.ruckuswireless.com
myft-api-test.ft.com
forums.ruckuswireless.com
ssl323110.cloudflaressl.com
mc-ios-dev.masterclass.ninja
groove.spin.pm
msan7.myabsorb.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure03.stage.lithium.com
sni.cloudflaressl.com
*.ruckuswireless.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
devstagealto.ruckuswireless.com
myft-api-test.ft.com
qaalto.ruckuswireless.com
alto.sg.dataexplorer.int.cloud.ruckuswireless.com
myft-api-test.ft.com
sni.cloudflaressl.com
apr-client.ruckuswireless.com
sni.cloudflaressl.com
ssl509634.cloudflaressl.com
sni.cloudflaressl.com
msan7.myabsorb.com
ru.ruckuswireless.com
msan7.myabsorb.com
sni.cloudflaressl.com
www.ruckuswireless.com
*.ruckuswireless.com
sni.cloudflaressl.com
sni.cloudflaressl.com
serviceloc.ruckuswireless.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.donatello.ruckuswireless.com
click.ruckuswireless.com
qaalto.ruckuswireless.com

Certificate

The complete raw certificate details for partners.ruckusdev.ruckuswireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx43M2VpMh/yGxaLi1AGo
adAhlKYryH6ehxrjypv3WzDuYy8cuMaKjdliuwOvO1dWYHADeEjR6pP3970Z7WNx
cX3Rx8XUiHSorTK3m6ZiLq0LdmD6gwDsTERtC+KdtyNp9JezHQUupoP9GfmboaYO
MLoyQkDyT3CJnpFMZ57RQ5zwMH0xvzRCg0atjm2hnD+3P8piLNZskIdXte5u8VYS
cwRDUYVbcXx6hMr/M7sXHRPUzfBM3Ii8bx7U39e9ZDDSE6CA5gP7fO6GRwq+gkJl
ww+o4/53GF7Mit+7jNsENMDiODTY9ZOxculo1RYnBQjAzondelaoftyyRo+/OAAj
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435441304179993439746640997293251612243594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 01:15:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-14 01:15:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partners.ruckusdev.ruckuswireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25191346968807401403211887175799737305526627263848233206408709140975670599422935694570047575653050295601929819498426706584440160571224553215425848734135062075855625345415297129169964837285259129993758602608913249812168089514940409824366712758729066800205652886574830399964785976991438387235693888133223759869799786115808458783294761649565134756268586147091938765163300975596661229808446545011507437072834573171359410906882119579540580080400286610921583831475299646557346703846585145171602807140543468195124114564820348507704546006026801989642771538748587870207455570092097674398833818717371716481056881264821180310457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7598392a10fb6689db966ceaa8a8e4548730c33b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (275 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-registration-qa.bridgeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps-stage.pluralsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formalshirts.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leagueoflegends.com.cdn.cloudflare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myft-api-test.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.ruckusdev.ruckuswireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.dotloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendgrid.trytuesday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandstorm.loreal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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