kapiv1.edaun.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:13:a1:dc:a2:cb:d8:d8:ad:bb:bb:bf:0a:27:bc:e9:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kapiv1.edaun.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:13:a1:dc:a2:cb:d8:d8:ad:bb:bb:bf:0a:27:bc:e9:ef
Serial Number (int): 272592271670414009481881486704854131599855
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:2d:f3:5c:26:44:7d:68:f0:01:bc:d7:aa:54:d9:9e:9f:dc:ce:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:86:71:86:db:00:a4:e3:ba:55:fa:2d:3f:5f:56:85:ca:a3:5f:d6
Fingerprint (sha256): 64:83:52:b9:bb:dc:2b:d6:62:a8:eb:58:85:6c:d3:b7:7f:a5:8a:36:a9:11:5f:e9:3b:95:ec:ae:e6:80:8a:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kapiv1.edaun.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kapiv1.edaun.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kapiv1.edaun.com

Other certificates including the domain name edaun.com

(limited to 100 certificates)
api.edaun.com
ereader-staging.hashlearn.com
www.zipplog.ca
kliptalogapi.edaun.com
analytics.edaun.com
collectingdust.net
fda.console.bringo.me
dema.dev
portal.bookinglily.com
edaun.com
qa-webapp.unwindinganxiety.com
kapiv1.edaun.com
artemisbaumann.ch
edaun.com
www.edaun.com
edaun.com
analytics-api.edaun.com
markusnordhaus.de
sodaden.com
epsilondev.edaun.com
epsilondev.edaun.com
kapiv1.edaun.com
www.edaun.com
www.edaun.com
kapiv1.edaun.com
gapiv1.edaun.com
www.edaun.com
astrohankey.space
travexagency.com
app.gobarefoot.co
www.edaun.com
www.psoat.org.tw
webstore.nearbymarts.com
muesfile.com
alphadeltagames.com
devbetter.net
www.edaun.com
gadmin.edaun.com
gapiv1.edaun.com
pandaal.in
app.co2tt.com
www.travlocally.com
kapiv1.edaun.com
eleph.c11g.app
travel.abank.com.br
kapiv1.edaun.com
edaun.com
merterim.dev
kapiv1.edaun.com
kadmin.edaun.com
preprod.eddress.co
edaun.com
cestaurbana.com
edaun.com
www.edaun.com
kliptalogapi.edaun.com
www.richardcprice.com
www.edaun.com
kapiv1.edaun.com
locator.semperfidelispark.org
api.edaun.com
api.edaun.com
www.edaun.com
api.edaun.com
epsilondev.edaun.com
babitai.fun
gapiv1.edaun.com
gapiv1.edaun.com
static.smokeless.world
sidecart.thehellopos.com
fikzax.com
www.edaun.com
www.edaun.com
avclohara.com
amplebinary.com
analytics-api.edaun.com
aviatavi.com
api.edaun.com
edaun.com
www.edaun.com
edaun.com
alphadeltagames.com
studio.karla.ai
api.edaun.com
aepsy.com
fikzax.com
analytics-api.edaun.com
amplebinary.com
admin.edaun.com
chat.edaun.com
www.edaun.com
chat.edaun.com
edaun.com
app.enrollme.co
www.edaun.com
aviatavi.com
www.edaun.com
api.edaun.com
cestaurbana.com
www.edaun.com

Certificate

The complete raw certificate details for kapiv1.edaun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272592271670414009481881486704854131599855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 19:13:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 19:13:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kapiv1.edaun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742752808385381578495409693282531941455812509424375408340192605693089738797130167065631660498412372400403630921901835659751519398424072740139118906824797868125567714330880708186624733721846852568509302229602791276891725907661762890553951710340762490411850511532740775602858193075659002030477550969960419187197449142922655570551888534273657220445335512939906545614061857027144049572626771060388740687912919920052299403875301548432244067771025260519275290113869698258524896401543043323515216961891366427926545575984295919752572702939078608652789964634624398529058009642762798406747179055620511006593462078742748686195443731369976948783702137017597169691725526276000807483114313128167945622129733641767995774356385172683340641253108362603359726738761443114273861742862610410432873657413256777345996179092472013443182394514186968340958736912496651611998425540100585307023637033905425573716558596807156825762194433980549384271011413653924430863857412645749685761651711075207066575233179219222786801358298929968843638167285250595370011493724975609459864324653405844303869498464482382580578435814444675173272972367422724532014871008463803135820825512588157022098720559832534558063321024485558099651018622796974752043124803930545386889665941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							642df35c26447d68f001bcd7aa54d99e9fdcce6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapiv1.edaun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ce94f7beb0000040300483046022100b997a6c881cd83df355f2914f506f487cf2e7d3d214fffea385b8ff46000b8e3022100ca2e85c271cc775aa734d8e3ca3e876df9ea6c86100d7bd85958fc3ffc9db802007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ce94f7def0000040300483046022100cdad9469863ece2b8034532dd1ea14a93d10d24937ae9047f1c19dc9b7c37c99022100a0a12becc8767612f36992c3bd9610020fd676433e720d02896b7f0a8f7b50f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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