invent-app.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:2e:c0:63:85:bd:f3:5b:8b:52:a6:f7:54:c8:0f:05:0d was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=invent-app.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:2e:c0:63:85:bd:f3:5b:8b:52:a6:f7:54:c8:0f:05:0d
Serial Number (int): 433581878884633230513445835378622559356173
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:d4:12:40:1b:3d:69:93:3c:c1:61:88:5f:61:8a:f0:f8:86:1b:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:28:f6:2d:86:54:d2:2c:08:53:ef:37:45:9e:1f:ca:0a:04:38:29
Fingerprint (sha256): 5e:e3:14:46:97:da:62:9c:c0:5e:b6:29:a0:ad:c3:14:5f:e3:9c:7c:81:94:1d:e6:a3:17:4d:75:58:f2:4c:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate invent-app.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for invent-app.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backup.invent-app.com
invent-app.com
preprod.invent-app.com
www.invent-app.com
www.preprod.invent-app.com

Other certificates including the domain name invent-app.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for invent-app.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISBPouwGOFvfNbi1Km91TIDwUNMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjcyMjI4MjJaFw0yMzEwMjUyMjI4MjFaMBkxFzAVBgNVBAMT
DmludmVudC1hcHAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
zNrDDVhIsWUzo4N8aXMsJHHj829yleAZO2fWnfAT+ejsnitBnFDkTa5X598P0fPF
Byyr6RdyxO+Fwj4s2LmJqCF9zMOMFyMjrstzVp0NPqBjTckSXx2GnTTbQWAUI3/q
OHxMcy4fBI/QVZfMK2ur14QIsbBwazfB7BVMtUA/ew+2rwUJAbMGRhXhmzFgA+Ls
3LViN2DZ1NylMkcjSOoS18G1SR+GxPZebHhY2bx2zVFXvlRpPPJBcwofh+jKXs4G
j3pt7o5ImuZ9mAeLUl12130mY+VQC53Dt8jDyuxDW9CpxSWksSu2wki28jg6infw
Y7ZxNiTxIDvKZuNV641c8wIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQF1BJAGz1pkzzBYYhfYYrw+IYb3zAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzB4BgNVHREEcTBvghViYWNrdXAuaW52ZW50LWFwcC5jb22CDmludmVudC1hcHAu
Y29tghZwcmVwcm9kLmludmVudC1hcHAuY29tghJ3d3cuaW52ZW50LWFwcC5jb22C
Gnd3dy5wcmVwcm9kLmludmVudC1hcHAuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAtz77JN+cTbp18jnFulj0bF38Qs96
nzXEnh0JgSXttJkAAAGJma6WBAAABAMARjBEAiA7SWcNKWojDaKmTp02w9idjaKF
8BfyYepyH0x2spiKVgIgFstRuDvgEr5jJIeP/CXxFj7yHteulGDh53MY3tMAmREA
dwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYmZrpYbAAAEAwBI
MEYCIQD7O8sgokkOlSg37xiBgpaIxVhe5OygVJT+VXZ0+Ad/IgIhAKiFk9F8Y6XH
Uo+jPv6KqVBnt72AmLa7N2bc8In8Od5fMA0GCSqGSIb3DQEBCwUAA4IBAQBw+s5I
rTD/WurT7IA1aG0XtzWhCmh/vDxaeTE6qiAYPr7LWyrIiEttif8n/U/k/Fql9KsB
6qnHmBbbCc9VZ8GJhniMp8Hz2R7fmKV4TRT/jfh86JdJNtPo+uH4pOh5pmH/DZ/Z
A3fJHlmrKsUm2V3LqqflEsOxChwGFUpORyQrA0XW6lCOdOaMfHPwtz2gzjWGXhw7
4NRM2+GxQz2wh1ch+rZ1ZtrI+ryVLFGTZodOGPv9a7J0Tj3lhUcUBdHr2s9GcxMQ
r2HQZNpg7dzzQVQnPCU1hCg3hZJmKBPuosIuzivtbgfynDfyJMZxpZIYytB/QQYC
CsmI4w3GNUGDITro
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNrDDVhIsWUzo4N8aXMs
JHHj829yleAZO2fWnfAT+ejsnitBnFDkTa5X598P0fPFByyr6RdyxO+Fwj4s2LmJ
qCF9zMOMFyMjrstzVp0NPqBjTckSXx2GnTTbQWAUI3/qOHxMcy4fBI/QVZfMK2ur
14QIsbBwazfB7BVMtUA/ew+2rwUJAbMGRhXhmzFgA+Ls3LViN2DZ1NylMkcjSOoS
18G1SR+GxPZebHhY2bx2zVFXvlRpPPJBcwofh+jKXs4Gj3pt7o5ImuZ9mAeLUl12
130mY+VQC53Dt8jDyuxDW9CpxSWksSu2wki28jg6infwY7ZxNiTxIDvKZuNV641c
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433581878884633230513445835378622559356173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 22:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 22:28:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'invent-app.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25860489737575615892288170675712032829515231360731267133202499449345811147031961858216283289731884323340428917530799367187401896905579426604528371496804554867434476672641465981871224520057251953977398160846574149519194544000322263408841136279084491519407724948127263596341891060389377101359968622011524702752920598595192370505362511428111216111599654858166157559751585533064289315365066877149999560820603373802565532479969075349002181542760895005919220267273911384176381489502288255899128657830640642109493399297366535431973187250747917352817468402362185054906149698302931769134396302682674031621531685852233027378419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05d412401b3d69933cc161885f618af0f8861bdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.invent-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invent-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.invent-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invent-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.invent-app.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018999ae9604000004030046304402203b49670d296a230da2a64e9d36c3d89d8da285f017f261ea721f4c76b2988a56022016cb51b83be012be6324878ffc25f1163ef21ed7ae9460e1e77318ded30099110077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018999ae961b0000040300483046022100fb3bcb20a2490e952837ef1881829688c5585ee4eca05494fe557674f8077f22022100a88593d17c63a5c7528fa33efe8aa95067b7bd8098b6bb3766dcf089fc39de5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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