staging.lunch.givve.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:6f:d5:fe:22:0e:7f:e8:1b:30:20:7f:a7:e3:ee:d8:cb was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.lunch.givve.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:6f:d5:fe:22:0e:7f:e8:1b:30:20:7f:a7:e3:ee:d8:cb
Serial Number (int): 332944810269871095120173984725148191611083
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:6f:80:97:12:4b:85:77:47:3e:99:9d:6e:41:ff:ce:57:94:64:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:24:cf:02:3b:18:3c:85:34:62:35:96:e2:91:c9:61:2e:e9:0e:f3
Fingerprint (sha256): 4a:f7:d8:06:1f:22:1d:4f:57:23:cf:a3:74:0d:f7:b0:df:f8:f2:cf:b7:fb:9d:94:ad:c2:97:1f:6e:cb:f3:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate staging.lunch.givve.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.lunch.givve.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.integration.lunch.givve.io
*.staging.lunch.givve.io
integration.lunch.givve.io
staging.lunch.givve.io

Other certificates including the domain name givve.io

(limited to 100 certificates)
www.natthrafn.is
www.jlbiz.dev
jmtherapy.in
www.uorder.com.br
evergrace.co
staging.kiek.app
www.thebestyounow.co.uk
evergrace.co
izusun.com
*.givve.io
*.givve.io
auth.tracksy.ai
soniclegacy.it
*.givve.io
www.fruity-flowers.de
app-dev.medzy.ca
www.nudgegram.com
buforddentalassoc.com
www.purplemovies.com
*.givve.io
www.dohut.app
www.natalfeliz.org
staging.maslo.ai
staging.lunch.givve.io
*.givve.io
givve.com
www.qwest.app
www.dohut.app
staging.lunch.givve.io
www.roadcast.in
www.netanel.io
beta-v3.tecore-client-cdn.timeedit.io
*.givve.io
www.qwest.app
cms.parsnip.ai
test.fastgrowth.co
finance.omoyetips.com
app.geteat.co.za
tuvao.com
www.cognidia.com
catering.bouncebox.co
www.thebestyounow.co.uk
*.givve.io
staging.maslo.ai
soniclegacy.it
integration.lunch.givve.io
*.givve.io
dev.paulrichter.org
*.givve.io
b2b-staging.givve.io
www.tapotap.com
ahmednafies.com
*.givve.io
app-dev.medzy.ca
www.pixea.sk
erp.mygestioncloud.com.ar
*.givve.io
link.clintrialreferapp.com
cpas.llamy.be
go.11aa.ga
www.directbasing.nl
www.preface.app
dev.link.hailto.com
dev.api.vmbreakouts.com
*.givve.io
placenote.vertical.ai
dev.link.hailto.com
*.givve.io
joshv.codes
*.givve.io
oleggromov.com
link.clintrialreferapp.com
www.capfil.pilfil.com
www.natalfeliz.org
www.houstonlewis.com
*.givve.io
placenote.vertical.ai
*.givve.io
app.unibit.in
scriber.giridhari.org
app.geteat.co.za
www.nursemypc.com
auctions.uveye.app
www.johnrykken.com
mirk.co
www.capfil.pilfil.com
addu.co
www.natthrafn.is
dynamiclink.staging.passbuy.com
integration.lunch.givve.io

Certificate

The complete raw certificate details for staging.lunch.givve.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiYef31ilnuYFEuixgt8
ZCXv94MTeHxvxceP+gMR5i3sNv4Zo7hcnw22/JZNJXrshPCMHJ6g8IrQoJaF5cjj
h86TC6xhPa1CCiGXXfxKfvb0rxsr/97TpY/lktjVrPIsben3JsUHWaRwRRnYtWqF
TXz7Xd8guoHxiwkB+KSHyORXJGC5BEVXtQiPiCLAywHyK9kf2OniLiBQv06BeB1i
0l94op4Gg619rj6PSmrE5SsywoBlBdeXGrFfcX+0ViuhFCwLHgfsF4C3lxnffzfY
xED2f4GnXNnvX71iCu8DnRVDxIi2nXC0tYs+TS1M9ls1oAm3VxnMkvmOuX1gIXmK
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332944810269871095120173984725148191611083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 05:50:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 05:50:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.lunch.givve.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24509028408401566199125852884378094770053557906519212325645866651646373980587700643310092160420264593997274009390244541736515475392894232656848316031774419022680209605593082366728314755889329770174165072289449292541881053520393370532328708057101483761343731794656403844526295850320707925469987796492723135762066771852858191744625621953937679922886380001338592058462064504733238565463046533907010115654276177757534016304447834561604802510825569741920689860699130244382351005308298252615174211103236707173976363590307932348046612335435643554477370424346111641199373471053642730431313673974270295179798219558551924869843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							786f8097124b8577473e999d6e41ffce57946470
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.lunch.givve.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.lunch.givve.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.lunch.givve.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lunch.givve.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170be0ef7020000040300473045022100a35d7ea33a2d5ed85c6a97df47c8b7854da354138503bb5bc4a0d4e4d7ec9ce00220055dd906bc6007d84214da47e4b5cf71dc56854a3c3573f93019182352aac835007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170be0ef73600000403004830460221008864f9896c8aa30921c40a2767ab07b90ac18eaeae41670ec7f8e9c11e35331f022100f381e3b73d9f5501a67bce9553e02448284d1d0ca271e39d476c21aa0023b6fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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