dex.test.aks.skyscrape.rs

Issued by R3

About this certificate

This digital certificate with serial number 04:93:81:eb:e4:b9:c9:c2:cc:b6:57:ed:51:c1:ed:ad:3d:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dex.test.aks.skyscrape.rs

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:93:81:eb:e4:b9:c9:c2:cc:b6:57:ed:51:c1:ed:ad:3d:e1
Serial Number (int): 398643346904745992230738221528633505037793
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3b:89:bd:7e:81:bc:ee:9c:5f:3a:11:8e:dd:5a:0e:d5:02:8d:60:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:5f:61:21:73:27:9b:e8:c9:d4:bd:36:d4:8d:a4:d4:a1:3e:1d:4e
Fingerprint (sha256): 67:02:9b:3e:5a:fc:ae:0d:ea:cd:a9:cf:94:ad:01:6c:94:99:0c:dc:b6:7c:9e:e5:35:30:03:5c:14:9f:63:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dex.test.aks.skyscrape.rs

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dex.test.aks.skyscrape.rs

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dex.test.aks.skyscrape.rs

Other certificates including the domain name skyscrape.rs

(limited to 100 certificates)
web01.aquafin.skyscrape.rs
*.ivox.skyscrape.rs
web01.3c-staging.skyscrape.rs
ci.skyscrape.rs
web01.roland.skyscrape.rs
grafana.kops.internal-test.skyscrape.rs
web01.aquafin-staging.skyscrape.rs
kubesignin.test.skyscrape.rs
*.int.skyscrape.rs
web01.roland.skyscrape.rs
ci.skyscrape.rs
web01.roland.skyscrape.rs
prometheus.kops.internal-test.skyscrape.rs
ci.skyscrape.rs
alertmanager.kops.internal-test.skyscrape.rs
*.int.skyscrape.rs
web01.roland.skyscrape.rs
*.int.skyscrape.rs
prometheus.test.aks.skyscrape.rs
frisket-tools-dr.skyscrape.rs
*.int.skyscrape.rs
whitelabel.surveyanyplace.skyscrape.rs
test.skyscrape.rs
web01.roland.skyscrape.rs
web01.shared.skyscrape.rs
production.skyscrape.rs
dex.test.aks.skyscrape.rs
production.skyscrape.rs
*.int.skyscrape.rs
web01.roland.skyscrape.rs
*.ivox.skyscrape.rs
web01.aquafin.skyscrape.rs
web01.aquafin.skyscrape.rs
int01.ziekenhuiswaregem.skyscrape.rs
web01.aquafin.skyscrape.rs
publicproxy.sweepbright-beta.skyscrape.rs
*.concourse.skyscrape.rs
ci.skyscrape.rs
test.skyscrape.rs
web01.roland.skyscrape.rs
web01.roland.skyscrape.rs
crazy.test.skyscrape.rs
frisket-tools.skyscrape.rs
marketing01.skyscrapers-int.skyscrape.rs
backend01.wieni-dagkost.skyscrape.rs
test.skyscrape.rs
web01.aquafin-staging.skyscrape.rs
frisket-tools.skyscrape.rs
alertmanager.test.skyscrape.rs
web01.aquafin.skyscrape.rs
ci.skyscrape.rs
web01.aquafin.skyscrape.rs
ci.skyscrape.rs
publicproxy.sweepbright-beta.skyscrape.rs
production.skyscrape.rs
test.skyscrape.rs

Certificate

The complete raw certificate details for dex.test.aks.skyscrape.rs in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z7DrniNNOK5Zw8WQRht
D20rzNUXrE5+7/QuAMG8aJ7IBOagJJsNbgeYXmZhTQupmlZQkCxlYTb/DrMT4Wa2
SgMR5XlPthjHwt55KILg8SXKzapQ6IKOKyLD9VIuSA/rLdlSMep9PuBaUdAmgEWj
sapa1R0G3c/wlTQassyC1bpej0LW27eIBGiDoTPNxtXm4RtJKCLXFsR2Z91AgvPS
tp/0b7WWYt2ajF/KgVc2Esree5jMU6NUJGsBNYrp27tvqXfecizgQharicweIKUc
EyShCSd6iU0RbLHIuj0lf59WZ7UIZeGGybeo2JTgNEpZbJHks3XYDbQflgouUrpg
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398643346904745992230738221528633505037793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 01:58:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 01:58:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dex.test.aks.skyscrape.rs'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27472001811783054170830410260864890660122866233907685937970050264034858757079062516493963203099672641608529122706938016076677614365167331668721064861907522865783800315203773490755239677053821444553775236496053665822819450916166821436929404188899151587291886695663623384925475198437584168665216460285562049670302170125754314974197971341768747120080605588232380249963589571781749856394832741546895612670748151592537462733488731732335403529726732349838272686758340539627297195938500016291009825537610573213939140372160742780901893471334312690971765171720461077971232806931789544662239408983482763746843692804149052334249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b89bd7e81bcee9c5f3a118edd5a0ed5028d60e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dex.test.aks.skyscrape.rs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca4605050000040300473045022100bffc1b4eb53f7fe5a486462a54e1a273a94b00cb018f3b42ae2491dbbf0c597f02201022cd775a3f730dc88b43e6d64d9d18f50dbc8ab6618b78d0a234ad130d935e007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aca46052b0000040300483046022100aa93bd8026bfdfd890fed01ac80e032c3ed4ba477b4ca9a26abc49a6b1c69262022100cff25be71615aa265532aae83981a6bc88d394045c4809ad3804fe4e799730a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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