docs.synap.ac

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:4e:c0:a3:e6:b1:18:1b:9a:c9:36:a4:a9:5e:bf:6a:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=docs.synap.ac

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:4e:c0:a3:e6:b1:18:1b:9a:c9:36:a4:a9:5e:bf:6a:bf
Serial Number (int): 415249167672523038315128514032865246145215
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:14:1c:4c:39:48:fd:40:e4:91:97:94:1b:e4:ea:20:de:fe:34:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:47:81:27:cb:d8:00:fb:c6:6e:a9:a3:7a:67:c1:0b:8d:62:9a:37
Fingerprint (sha256): 68:b4:f4:0e:df:cd:cd:e3:05:6b:04:2d:23:69:b3:3a:97:39:23:d7:50:c4:cc:cb:68:33:43:46:bd:0d:c1:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate docs.synap.ac

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for docs.synap.ac

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docs.synap.ac

Other certificates including the domain name synap.ac

(limited to 100 certificates)
bannerman.totemapp.net
synap.ac
about.ksting.com
synap.ac
*.synap.ac
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
synap.ac
synap.ac
archmission.totemapp.net
archmission.totemapp.net
updates2.synap.ac
*.staging.synap.ac
about.ksting.com
synap.ac
academy.synap.ac
archmission.totemapp.net
archmission.totemapp.net
app.synap.ac
business.synap.ac
app.synap.ac
synap.ac
about.ksting.com
academy.synap.ac
synap.ac
about.ksting.com
auth.powermyanalytics.com
about.ksting.com
*.synap.ac
oauth2.kyl191.net
www.synap.ac
business.synap.ac
about.ksting.com
*.synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
academy.synap.ac
updates.synap.ac
archmission.totemapp.net
synap.ac
business.synap.ac
synap.ac
archmission.totemapp.net
academy.synap.ac
*.synap.ac
synap.ac
archmission.totemapp.net
synap.ac
updates.synap.ac
updates.synap.ac
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
help.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
assets.synap.ac
synap.ac
docs.synap.ac
business.synap.ac
about.ksting.com
bannerman.totemapp.net
synap.ac
archmission.totemapp.net
marketing.synap.ac
archmission.totemapp.net
*.staging.synap.ac
archmission.totemapp.net
synap.ac
about.ksting.com
assets.synap.ac
synap.ac
synap.ac
archmission.totemapp.net
docs.synap.ac
*.synap.ac
synap.ac
synap.ac
marketing.synap.ac
about.ksting.com
synap.ac
staging.synap.ac
archmission.totemapp.net
about.ksting.com
about.ksting.com
synap.ac
business.synap.ac
synap.ac
staging.synap.ac
docs.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
about.ksting.com

Certificate

The complete raw certificate details for docs.synap.ac in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415249167672523038315128514032865246145215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 04:46:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 04:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'docs.synap.ac'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800824599264456777636999776800127580902326935678342032382708919714772860437702566506507190018620076315239624820223748450878651008923165113457580975392980152459673009885912525251568191448980373330877674882724869126643126683795959034074105090814558897110604927560072743453379454634034134033954443445265803777760747827568021139312391900401722861335237398724063063437216511101162440704262293137377684629995765122043110268847925188804682686618519810822371620827964111042046427703413791700483848865437857437058016955235380661644169948172331431589114291868860355460330839609460589880738846064283491005019243726283652941614826198497489495079419500212841331294781098218324158873739756022527556696331757441692669118170489699723624015414318938333848768994312009477113520502562344525378058278444698871734843211774114097605972431099425193889647670888631590001182121754807923005343721309821883939268427261245563436699946904769299385627477427882446320966137674260547527212991477057550617880755423249483110365946022878457716083834481469459106363660119547778847570087205731845577185593301289553939252523930513993643066759122665892585058439923637809284080651823783764445395657267070735112692449635804930546899169913030415268933546250376362856447558587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb141c4c3948fd40e49197941be4ea20defe3455
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.synap.ac'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187f9e59b76000004030046304402207f66579aade5f65eb187b35edc445e5e30abd5d66b9c36683a55f16820e88b6902205828a91c9767e2738773f594482e240220319dfb14fbf1c0cc08a6e07a6e53ca007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187f9e59b870000040300473045022100935e50143aea7cd30da636b78fcbb89a3e7583c8e2efe629eef52551b5411aeb02203c86b3b93d912e41d5b8ce9e77ebbeeada9c239af4c8d1f930fcdf50f8c88b97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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