ssl-widget-cdn.rpxnow.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a4:c4:0b:16:2c:e4:93:da:00:e0:c2:8b:15:40:ad:2a:2d was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-widget-cdn.rpxnow.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:c4:0b:16:2c:e4:93:da:00:e0:c2:8b:15:40:ad:2a:2d
Serial Number (int): 317403752222523727096849413278511966005805
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:10:f2:27:68:f3:5c:db:b4:eb:f1:d3:f2:6a:54:cd:43:ec:fa:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:2b:a8:7c:ea:cc:89:d8:9b:3b:e1:0a:23:23:14:1d:7f:69:d9:df
Fingerprint (sha256): 5e:6c:49:16:eb:4c:52:5f:45:d6:51:e1:6b:6f:72:2e:d1:8a:e3:71:6b:0e:f7:69:89:9c:99:1f:1d:5d:80:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-widget-cdn.rpxnow.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-widget-cdn.rpxnow.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn-social.janrain.com
cdn.rpxnow.com
social-cdn.janrain.com
ssl-cdn-social.janrain.com
ssl-widget-cdn.rpxnow.com
widget-cdn.janrain.com
widget-cdn.rpxnow.com
widget-cdn.rpxstaging.com
widgets-cdn.rpxnow.com
widgets.multi.dev.or.janrain.com

Other certificates including the domain name rpxnow.com

(limited to 100 certificates)
*.rpxnow.com
uc12.janrainengage.com
*.janrain.com
rpxnow.com
*.RPXnow.com
*.rpxnow.com
*.rpxnow.com
Login.maximuscle.com
*.janrain.com
*.janrain.com
*.janrain.com
*.eval.janrainengage.com
rpxnow.com
*.janrain.com
*.rpxnow.com
*.janrain.com
*.rpxnow.com
ssl-widget-cdn.rpxnow.com
*.rpxnow.com
*.janrain.com
*.rpxnow.com
*.janrain.com
*.janrain.com
*.janrain.com
*.rpxnow.com
*.rpxnow.com
*.janrain.com
uc09.janrainengage.com
*.rpxnow.com
*.rpxnow.com
*.rpxnow.com
*.janrain.com
*.rpxnow.com
*.rpxnow.com
uc12.janrainengage.com
*.janrain.com
*.RPXnow.com
*.janrain.com
*.janrain.com
*.janrain.com
*.rpxstaging.com
*.rpxnow.com
*.rpxnow.com
*.janrain.com
widget-cdn.rpxnow.com
*.rpxnow.com
widget-cdn.rpxnow.com
uc12.janrainengage.com
*.janrain.com
*.rpxnow.com
*.rpxnow.com

Certificate

The complete raw certificate details for ssl-widget-cdn.rpxnow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/kBUGSSUJtEU3VTBVu6
QJu7m+m0gEurchxpjp45OYYJwANtJk5XvfTaEcDnlv59FAi5XJot61sX/2al91Vi
YM9K5ia9LPhaKvtLWmFGmcn6Xo7h6Obd60I29hYaY3q8iXs27tiJjAgEeZl51slO
IrHezJJWGkhIdhycKy702v3e9YnHmgQ+xgCphwcCKe1uR0EC6RCGo0s4QHUIZt1o
ovhROkJSWyNRRy4Fxvb2XqZJOv6ISoHIOVQ5RUu2omSl6iMvCw33ybV1vwm06yhK
XE5X/NL0htOf9oU2ULm5cGckOmX1Asmp6qIAWu28Oc+WYL0k3t2T+rCMmxhoapTF
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317403752222523727096849413278511966005805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 07:23:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:23:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-widget-cdn.rpxnow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24234305255982666297817308855351009254281788104336741272685862907562228416929339162631027096753288450995669680744140029798105281002251226717868972875326196101365118565315141145196112774148315208692966298716200969941263380047998921675492319355365226996328770104027656689395491554879998849308832633064257233568485534916751470509374113519478166948968659961860717804790266629432013666922563937375402471595995841294992991715145207180148321175501312814229027336077355501029414233158726038316669716116195086749040569521967800502184439760971167097005305885638205203601549259566088666400882411772373382129471490271405845824827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f410f22768f35cdbb4ebf1d3f26a54cd43ecfa20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-social.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-cdn.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-cdn-social.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-widget-cdn.rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-cdn.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-cdn.rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-cdn.rpxstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-cdn.rpxnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.multi.dev.or.janrain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3cbbda0d00000403004630440220423855fe9e2bc19691ebb5c46fc8b57a5253b6ea43cf2633450ad9205560812a022054c1cd79a0419432607d28010c041416bfa76ca50caad2d6562334392f3da17f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3cbbda000000040300473045022100b918ee2d6dd3a0dbc755a25bd78aa699f639154dde1f698fef7b7478240d3be202200672f55dec0a400ede7b9f2aedbb1d73b0348fa94b4dc4ea59e77bd5feb5a4f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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