api-staging.affect-tag.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:13:2e:48:15:f5:d2:df:03:81:49:b5:83:1e:60:f5:be was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-staging.affect-tag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d7:13:2e:48:15:f5:d2:df:03:81:49:b5:83:1e:60:f5:be
Serial Number (int): 421635348254691523865477775661599018775998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:4d:85:ee:8f:f2:06:97:66:0c:d2:0d:70:af:e5:5d:06:1d:87:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:e4:6b:91:2a:ae:04:9b:93:4a:76:bb:5c:32:78:e0:74:c6:02:f0
Fingerprint (sha256): 85:32:ba:ea:0f:72:c7:bb:d0:12:5a:b8:78:8b:8b:2c:d1:ef:96:40:05:96:8f:29:89:26:ec:b3:70:7e:2c:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-staging.affect-tag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-staging.affect-tag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-staging.affect-tag.com

Other certificates including the domain name affect-tag.com

(limited to 100 certificates)
support.ovvdistributie.nl
support.ovvdistributie.nl
cloud-staging.affect-tag.com
cloud.affect-tag.com
helpdesk.jotronics.nl
helpdesk.velocate.com
affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com
support.ovvdistributie.nl
api-staging.affect-tag.com
support.ovvdistributie.nl
support.ovvdistributie.nl
support.affect-tag.com
radioplayeritalia.xdevel.com
support.bigmarketplace.eu
api-doc-staging.affect-tag.com
support.ovvdistributie.nl
cloud.affect-tag.com
cloud.affect-tag.com
affect-tag.io
affect-tag.com
client.trakeen.com
help.cxinsights.io
traefik-staging.affect-tag.com
affect-tag.com
cloud.affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com

Certificate

The complete raw certificate details for api-staging.affect-tag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421635348254691523865477775661599018775998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 19:08:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 19:08:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-staging.affect-tag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694467794889222324408935840774758338286851595970195899557089151505508061502104598378212262997277193014873293400101785143647465759308475689843387927067615043261027672816023966601219351887409752410971851423891404621784525729719477239151825616458476015614051933920152080770478161896119634892932352374418819324071765212308900407190996697271370668389895526959213071871532006688287559683068751826163058392455890116762395626558215547978085093399690618112094001332347374388968071421774658061939343818194248397560138646206713669731391126153251566929171225989620343975666650838193129699747408030280432466128791546089843382185142536926673259818412876914028265900147401657765723545006570646987663564861431369178570875658869777815712148336947159549562006371861878231370713926811115929663514714281372487835107150499273291004221800714131074917173762823182565968458950308904391368809060020047842082506853291135195218629302658220022340051040953574553509828807559010060187271863190150237923181141403404553904921107596482644169945807568345473575751350049494748256022180034606542645736981513088823642124908684542107686297486547683075369697012756596928149641606673996031148341868731184905466039516902224675183133834932185621488978991643473449092363830091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd4d85ee8ff20697660cd20d70afe55d061d87fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.affect-tag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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