adjusters.scope.claims

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:7c:3f:45:55:91:c5:c2:92:f7:90:95:56:3a:70:98:a4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adjusters.scope.claims

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:7c:3f:45:55:91:c5:c2:92:f7:90:95:56:3a:70:98:a4
Serial Number (int): 337044696044174266960459979152712478529700
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:64:60:2f:ae:b1:5d:f9:13:e1:30:49:d9:bd:f3:ff:85:e9:93:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:09:10:5e:44:ae:d3:19:23:04:34:a8:51:b2:1b:0d:3c:4a:07:5b
Fingerprint (sha256): 82:cd:13:d9:07:6f:b2:4f:2f:47:a4:4f:b7:e0:30:3e:8c:40:e4:b3:b2:15:25:ed:23:7c:87:da:d5:fd:41:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate adjusters.scope.claims

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adjusters.scope.claims

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adjusters.scope.claims
www.adjusters.scope.claims

Other certificates including the domain name scope.claims

(limited to 100 certificates)
timeplacebook.com
api.scope.claims
scope.claims
scope.claims
adjusters.scope.claims
api.scope.claims
app.scope.claims
api.scope.claims
app.scope.claims
dev-api.scope.claims
dev.scope.claims
scope.claims
*.scope.claims
scope.claims
vmeletrica.com.br
app.scope.claims
api.scope.claims
api.scope.claims
www.allthefood.app
api.scope.claims
ntmdev.com
app.scope.claims
adjusters.scope.claims
mamarepedia.com
adjusters.scope.claims
adjusters.scope.claims
cdn.termonos.com
dev.scope.claims
founders.canary.com.br
scope.claims
adjusters.scope.claims
conscoach.com.br
dev.scope.claims
dev-api.scope.claims
scope.claims
app.scope.claims
adjusters.scope.claims
adjusters.scope.claims
app.scope.claims
app.scope.claims
*.scope.claims
adjusters.scope.claims
adjusters.scope.claims
api.scope.claims
fire.ioo.li
www.socialradiocompany.com
*.scope.claims
dev-api.scope.claims
*.scope.claims
dev.scope.claims
scope.claims
adjusters.scope.claims
app.scope.claims
dev-api.scope.claims
benco.proton.ai
fds.zone
adjusters.scope.claims
*.scope.claims
api.scope.claims
scope.claims
www.scope.claims
adjusters.scope.claims
app.scope.claims
*.scope.claims

Certificate

The complete raw certificate details for adjusters.scope.claims in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnzpvn4sIDcT7HJ0TAJh
F2wSBvDVxLcnt2boIhi6XxgHQ3ZlBbiNanlzdEZThFOcO/t9uy992XiUafVR52rL
4CZF4I/zw8tDaRVQYSx8MFy9kcKbIZb2Gl2DrjbNjCsXmirwy3tvNOTGu//nSSLH
NzcsiuZRJbGU34vNFr2y6y7xsFz8l1iOBdfNO6Jj2qRIR+aqkkMwF8PND6qM+xBG
BCbmghxn7l5cyGQsLSDYXME5vLzRpERxYHD8tgBMaH/DD1H4VofJRduS/XrIQOs5
v9ymf0Ea+yncdTFJEqomD5aCGFYYBqgd6//dvG33Iq0e0tY184S1hFUXAUo7EArG
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337044696044174266960459979152712478529700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 12:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 12:56:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adjusters.scope.claims'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23036968430907482876145667923901378509504949839309176948849609947526940803271853388948468193675339657171168508533929309775918728861334180109131723108803477802295690209052114870099798104041182268708842733606737625409454228387591330315836901135185770654527775599883017570550655807910701933103218188301194264082791721505961082033601394387828547380126111430283064700957737050880013365756120860261853284625350999407891680204638221744384741401183839331861028324897179072356149399743171109337786644270269741991663391229695704661124438269208505050662545553092228725422060160304482266008757771517485693860246554051291067893281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6564602faeb15df913e13049d9bdf3ff85e99354
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adjusters.scope.claims'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adjusters.scope.claims'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165956b57b90000040300473045022100c4a180cb32710bf6a47a40843f57a2bfb06ec049dd6f63b26c54d4b3a067758e02205750d2eef8d7694db4aa09b819391f11d97787adcd71674b20ddf2da0eb35c71007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165956b59760000040300483046022100bb5a5dd969a89a89e12d18ea2dcf3d7631cd3ded3a51d30c2035352070d5c9a9022100cfc33df1b1b52d07d1b36bd064d62f5b46149bf11c852e456940d5c41e9e7c6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0017a8e3267d3baba4a63eb05680166115e4ae2e4b3e5de9d3bee7171262111754348da61da5e8f88c43cb00d590abb7d1a1d625e9992f43339fa4681ddc239bba678f176106c37d6300fc644e4b0ce3d2488046f96dd6d8793f80c9e63f8e3784b7cc1ca29a34e04a3b5ee3f79ffdccdc0815cabc061a75ee989dc039ba7a61dec873d8c892eb3b9882824fa2a2330b8d5e8f21bf8bd96df623c318e26c162f8b941c20ef1a7cc3d42c651e9d0c040e1c58aa7588523a09fc448160b01c933c5fd416c7d8e096567bcf008136861c33c490c158e1d4b4bca1ab08cba4ea66595127b9b882d9b83783d3088c385ab818bbb88729423e5670949c55af55dba4704f