recon.locus.sh

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:b8:ef:f3:8e:65:fb:5b:f5:86:fc:e9:91:4b:ac:0a:c7 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recon.locus.sh

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:b8:ef:f3:8e:65:fb:5b:f5:86:fc:e9:91:4b:ac:0a:c7
Serial Number (int): 331340566864154233919299669545456111454919
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:64:48:d8:ca:86:2d:a1:d6:1e:33:98:73:08:79:9f:49:7a:fc:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:ed:35:02:42:3f:06:e2:d4:24:b0:09:ad:ff:d7:3d:c1:23:2b:a9
Fingerprint (sha256): 86:5a:24:48:71:32:51:72:14:41:27:2c:7f:a3:63:db:c4:c5:65:8b:05:2d:99:a6:92:f7:5d:b9:09:1f:89:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate recon.locus.sh

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recon.locus.sh

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.cwaportal.com
app.obsecue.co.za
cityofla.briotix.works
customer.cleanexit.io
fe.unete.org
impossiblefoods.briotix.works
karademir.avasoftportal.com
portal.autoglym.com.au
purchasing.hanos.co
realtor.smarthomeassurance.com
recon.locus.sh
regaliportal.regaliinc.com

Other certificates including the domain name locus.sh

(limited to 100 certificates)
statuspage.io
statuspage.io
statuspage.io
statuspage.io
www.pricehelper.ru
statuspage.io
dashboard.locus.sh
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cert00070-azurecdn.akamaized.net
app.eid-check.com
*.locus.sh
statuspage.io
statuspage.io
statuspage.io
*.locus.sh
statuspage.io
statuspage.io
statuspage.io
cert00070-azurecdn.akamaized.net
gov.saudevianet.com.br
statuspage.io
cert00070-azurecdn.akamaized.net
statuspage.io
tls.automattic.com
statuspage.io
statuspage.io
locus-api.com
cert00070-azurecdn.akamaized.net
statuspage.io
cert00070-azurecdn.akamaized.net
docs.locus.sh
statuspage.io
cpkaccess.sbcollectiv.com
statuspage.io
cert00070-azurecdn.akamaized.net
statuspage.io
info.locus.sh
mktcreativo.mx
statuspage.io
cert00070-azurecdn.akamaized.net
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
tls.automattic.com
japan-status.dialpad.com
cert00070-azurecdn.akamaized.net
statuspage.io
statuspage.io
cert00070-azurecdn.akamaized.net
blog.locus.sh
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
blog.locus.sh
statuspage.io
statuspage.io
www.acaml.com
statuspage.io
statuspage.io
cert00070-azurecdn.akamaized.net
metabase.locus.sh
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
elmenucode.com
statuspage.io
statuspage.io
cert00070-azurecdn.akamaized.net
www.mind-of-mary.com
statuspage.io
cert00070-azurecdn.akamaized.net
statuspage.io
statuspage.io
leonardowebapp.it
statuspage.io
cert00070-azurecdn.akamaized.net
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.parchment.com
statuspage.io
statuspage.io
appstatus.glentel.com
statuspage.io

Certificate

The complete raw certificate details for recon.locus.sh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEMjz/oGU4MH3hnebu3BqvpOJliql
Z1AVrf5cZYb2npco18M6AiBnolmimi6Fur44ToZtPT5aKvr380R43TGFLw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331340566864154233919299669545456111454919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 22:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 22:00:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recon.locus.sh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000410c8f3fe8194e0c1f786779bbb706abe9389962aa5675015adfe5c6586f69e9728d7c33a022067a259a29a2e85babe384e866d3d3e5a2afaf7f34478dd31852f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f86448d8ca862da1d61e33987308799f497afcd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cwaportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.obsecue.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofla.briotix.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.cleanexit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe.unete.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossiblefoods.briotix.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karademir.avasoftportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.autoglym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.hanos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtor.smarthomeassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recon.locus.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regaliportal.regaliinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d65817ba8000004030047304502202cdd251be873c9d0e110cbecce943d932b6f14852d5969425a7f9edf803953ea022100f603cef8e92005609d5cb8c244ad78eb764933bd56310ea0c4df6d3b4203298f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d65817bc80000040300483046022100ec72225f876a5e16f39366c7b5394bc568dd2e3b5b968a19bc5c4901e4c66bf2022100fea1cbe4a48ed14daa2b0a1e35e3de4471d440cb855fde2945ed841edbb2cb7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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