api.trunarrative.com

Issued by R3

About this certificate

This digital certificate with serial number 04:40:71:13:59:42:ba:ed:bb:69:22:cc:08:26:81:05:27:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.trunarrative.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:71:13:59:42:ba:ed:bb:69:22:cc:08:26:81:05:27:f6
Serial Number (int): 370377518437566420966722725837799390783478
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:c6:f0:0a:f3:e1:e0:c9:3c:f7:92:81:2f:8b:27:88:4f:26:ac:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:33:be:fc:33:c2:7c:99:59:1a:f7:08:f3:62:26:3a:40:75:f4:62
Fingerprint (sha256): 48:9c:17:e3:eb:69:4a:97:f7:19:09:7d:a6:5c:cc:08:d8:c4:f2:02:d4:84:28:81:db:30:7b:49:ee:1c:cb:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.trunarrative.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.trunarrative.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.trunarrative.com

Other certificates including the domain name trunarrative.com

(limited to 100 certificates)
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
trunarrative.com
*.trunarrative.com
status.amanah.com
mylanstatus.globalvisioninc.com
status.channelengine.com
choicepoint.com
*.trunarrative.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
status.wavity.info
trunarrative.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
status.medpt.com
mi.portal.sagrado.edu
trunarrative.com
trunarrative.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
choicepoint.com
mi.portal.sagrado.edu
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
status.channelengine.com
api.trunarrative.com
mylanstatus.globalvisioninc.com
status.healthera.co.uk
www.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
api.trunarrative.com
www.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.medpt.com
trunarrative.com
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
status.madrasmediaworks.in
mi.portal.sagrado.edu
status.appetize.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
staging.trunarrative.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
knowledgebase.trunarrative.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.themoviedb.org
*.trunarrative.com
status.quick-vue.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
help.trunarrative.com
mylanstatus.globalvisioninc.com
trunarrative.com
mylanstatus.globalvisioninc.com
status.tecsens.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
mi.portal.sagrado.edu
trunarrative.com
status.madrasmediaworks.in
mylanstatus.globalvisioninc.com

Certificate

The complete raw certificate details for api.trunarrative.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370377518437566420966722725837799390783478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 13:23:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 13:23:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.trunarrative.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651254455856882490171177003423662886516437359467006710464409255226451334366206327963433865379576484110085419472787147009188266087394577170469464191518812325866026240357287317013276684072604394944880751454032769128061986378632574951517390937040078376820124646288470438931381287307922895952739862709133426132795319981080378720855171109784349873867855986487312599908688916382681428151365864776147715525962836614933716293565515262297177920363620027969231724010794455757140944680589352762512527730658764894310922572101575633281633310545687285177989193994288721681282729357613429362998475032019131623842435133458014480760933238889624194661812465187721953910856217421240321329939723726606297268883571504772240036885137239151053681332815879851718902501079943192701027766699850841645670942710082556867143945265101045834851210835013064171693827694310272769253533097500435316844325398717522502333983722383875133889394852985273357632299085313991794087777155049591569591643751088280342084763576911301686132700855615899423367600865108073390549435797715307648467432777154999871504300008507673032528498121692907300088574659584266564135111233697766591369266978980820145904877545315535225910443442947534315702237256907301671776034406526937778490683693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fc6f00af3e1e0c93cf792812f8b27884f26acb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trunarrative.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbc99eeb30000040300473045022100d9f4aebb3ab13437bfe39dc8ee7efa455ff4775c4951ebdb3e56e6a129350da30220725dd596f30460c9aa506f20379af52a911c8a5fe188f04608c3462bbe3fedbd00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbc99f292000004030047304502201e96a0ec0b36612dfdc8665911975f81b7e6fd1373215873af96fa78d00d7fe7022100ee3ffd315b1cff812dbac311d8419af98450411ca4a5768c6979019e264c0cae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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