gapiv1.edaun.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:21:1b:23:8d:5e:91:0a:98:79:ca:50:21:68:62:dd:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gapiv1.edaun.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:21:1b:23:8d:5e:91:0a:98:79:ca:50:21:68:62:dd:0a
Serial Number (int): 316506606673433627662613313707297135058186
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:56:e0:1c:f7:85:33:27:77:9a:13:94:cb:e9:57:0b:86:e0:a9:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:af:42:24:64:cb:45:20:2b:e5:15:86:7d:3b:d3:b3:96:4e:bc:ed
Fingerprint (sha256): 59:ff:03:be:26:1b:6b:27:1e:64:f9:ae:5d:65:88:3b:af:b0:13:68:8d:d0:b8:f7:ff:78:96:02:ad:3d:3a:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gapiv1.edaun.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gapiv1.edaun.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gapiv1.edaun.com

Other certificates including the domain name edaun.com

(limited to 100 certificates)
api.edaun.com
ereader-staging.hashlearn.com
www.zipplog.ca
kliptalogapi.edaun.com
analytics.edaun.com
collectingdust.net
fda.console.bringo.me
dema.dev
portal.bookinglily.com
edaun.com
qa-webapp.unwindinganxiety.com
kapiv1.edaun.com
artemisbaumann.ch
edaun.com
www.edaun.com
edaun.com
analytics-api.edaun.com
markusnordhaus.de
sodaden.com
epsilondev.edaun.com
epsilondev.edaun.com
kapiv1.edaun.com
www.edaun.com
www.edaun.com
kapiv1.edaun.com
gapiv1.edaun.com
www.edaun.com
astrohankey.space
travexagency.com
app.gobarefoot.co
www.edaun.com
www.psoat.org.tw
webstore.nearbymarts.com
muesfile.com
alphadeltagames.com
devbetter.net
www.edaun.com
gadmin.edaun.com
gapiv1.edaun.com
pandaal.in
app.co2tt.com
www.travlocally.com
kapiv1.edaun.com
eleph.c11g.app
travel.abank.com.br
kapiv1.edaun.com
edaun.com
merterim.dev
kapiv1.edaun.com
kadmin.edaun.com
preprod.eddress.co
edaun.com
cestaurbana.com
edaun.com
www.edaun.com
kliptalogapi.edaun.com
www.richardcprice.com
www.edaun.com
kapiv1.edaun.com
locator.semperfidelispark.org
api.edaun.com
api.edaun.com
www.edaun.com
api.edaun.com
epsilondev.edaun.com
babitai.fun
gapiv1.edaun.com
gapiv1.edaun.com
static.smokeless.world
sidecart.thehellopos.com
fikzax.com
www.edaun.com
www.edaun.com
avclohara.com
amplebinary.com
analytics-api.edaun.com
aviatavi.com
api.edaun.com
edaun.com
www.edaun.com
edaun.com
alphadeltagames.com
studio.karla.ai
api.edaun.com
aepsy.com
fikzax.com
analytics-api.edaun.com
amplebinary.com
admin.edaun.com
chat.edaun.com
www.edaun.com
chat.edaun.com
edaun.com
app.enrollme.co
www.edaun.com
aviatavi.com
www.edaun.com
api.edaun.com
cestaurbana.com
www.edaun.com

Certificate

The complete raw certificate details for gapiv1.edaun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316506606673433627662613313707297135058186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 12:32:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 12:32:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gapiv1.edaun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939366380883872863646454007117469852221596333121454765597573760108607291913588074930433828391437710504497026338137287153899198982892774609235348319806841871440720667342178212756548862226743977690058492880832737098347376290837169289731346729885805640834653557041958498356113199546368950505546400006000246685007701699957829777157661371786137951916779789267289489714472239754846561804459697256647034833618040997368860469688849574944079733656460774126989668586904007480758092899489635193071266338154042349312534555908619669285456350871051723822419116852050001996357190826407193108307328792195296755047605668498525381007579316310529034470914345946776703628397645914353476640923512430954313264048513324640466181586310348398353164467007574048751505506073651255772378464289608277479406167613990512124348320443815946339240242069538049044002516548520449591863249507158709492613513901116697259730875927916048411267276492010571835823658883891243626262244501430671754771276020557473166358691140493856153594810779926949725118003297451133272397056582330952888225638096633288959991629193796867144388609035917416101797831606608443734783713617187441825420846942711112312633295896878705295078486218487522553424049696970155741140748024358951163078620579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f156e01cf7853327779a1394cbe9570b86e0a99a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapiv1.edaun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162a5750f5f000004030047304502205e510784de017add521155aa2379e5f36f801ca858817f92ec568b2cb6b1f6e1022100bb819587ebe0433e9c9094ca24bd73c1b1b104bfa2772533d1d6a306d30671bb007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162a5750f7c0000040300483046022100920e190d6ca1549a77268c2a3a2d3472c2037e4c90b7cb538f2573bd337a06f20221008da2ecddf6dbe66fb0b49e96e435a89259a5d992b89b9bd52f92ef8b66f5b652
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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