api-local.pikkop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3e:94:0f:48:28:fc:9b:47:08:d8:9e:78:35:fa:7c:2f:d4 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-local.pikkop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:94:0f:48:28:fc:9b:47:08:d8:9e:78:35:fa:7c:2f:d4
Serial Number (int): 282631169635788766151124182105384850042836
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:9b:f8:18:0f:26:fb:44:f9:da:83:63:05:15:5b:51:12:b7:ad:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:cc:38:eb:fc:4c:c6:e4:13:d2:23:d0:90:4c:f4:02:1b:b9:06:0a
Fingerprint (sha256): 88:13:03:3a:9b:17:39:d3:b8:56:40:7e:d9:09:1f:b3:f1:cf:87:82:46:66:c0:3f:25:eb:47:26:fe:44:29:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-local.pikkop.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-local.pikkop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-local.pikkop.com
blog.pikkop.mx
local.pikkop.com
local.pikkop.mx
pikkop.com
pikkop.mx
shopify.pikkop.com
shopify.pikkop.mx

Other certificates including the domain name pikkop.com

(limited to 100 certificates)
www.digitall.me
www.russellbenton.co.uk
app.pikkop.com
www.pikkop.com
pikkop.com
thasaltydawg.com
www.pikkop.com
www.car-evolution.de
pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
pikkop.com
api-local.pikkop.com
api-local.pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
pikkop.com
api-local.pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
cory.benbraham.com
www.pikkop.com
app.pikkop.com
www.pikkop.com
www.frontendshere.com
pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
www.pikkop.com
pikkop.com

Certificate

The complete raw certificate details for api-local.pikkop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJE7kF0ho+1iCM0Ej4PT
ipU3RI9L5pQa24U3Wtl9MakcmnfbmxEP29dRNTm47eOm3WbrCQWM113n65itJq1p
vXEw4X/1UuRovbY8UaU+h6jyQX1tmoQST6tiqX9iReQYDijGuIjzGGzzH0zs8ZGY
0Hti4gz4HX4z/DD99/LbHMsuJl1xN3o86eKB82vdLWILYNNMZPemMHbNhJAp86YM
qbhu1Vy0vB9wr/CVlpJps02Bl2gv/4P1lvwj8SvDBtqC8A5yoeBJPfqBmeMcWp7F
+pA/8ioPS8y0DgVdmHw5dYW/r52y20Bk0wgUCiXW9HfwE1DitHrcwZSc/IFotc3o
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282631169635788766151124182105384850042836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:38:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 00:38:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-local.pikkop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20774698913981548332206986647773251919467203205060958107816163463368763296613252363851844478821673574046687036986965429042000670728901885761217223596816652796733918209792197834934174138943331228784603761333941642749259791136373213741731803476128808683743058494881569127582944296955381489592424307648876551232565854192272237027512399073617810091469006878183136851374178673835242223456190781554791283897889571373991492633991874004241246575675705584274666673770910878449673991990834439585641779929202492985850149712741253174482275918858557941653804364806285650449941228429154332080435128865947513119430356388530566850811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc9bf8180f26fb44f9da836305155b5112b7add8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-local.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1393aed30000040300483046022100fe5759a85a063b70b87f9c51e19bb85cefed3f09536cddf184be27b5d96df1f3022100f6ed4e0387ba61edd5c9f14630b45ecf0f34558d10644f041cc0a28237a17d370076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c1393aed200000403004730450221008dd3dd8716650091c45aff4bfb556629485c4f34cc59d533d3e24e67f76dc9b3022057766eb909a3e964158c089f414866aaa4010b471c67e195e0916df70b30baee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030bface0e52246ccef8064eb20ed9bcf26ebc40e456d4bcfe191dff1dec9523667d2500fdebb60348404c0d0e44b4cf01b219d4906fbbcabd18726061196ac9f5b30a6307f68aa1d6e225a59ae3423f46d37fe61a17ef1de0dd560da38f8cc85ac19ba14854d940c35c1ea04ba9a4c301c3a86c59dff2521dc0cab15d70abe24ed59813de535be42980566daff02fb49dcb21a20315031a1c5f3b53435766592a368897b49e6c6ce90a079d6b4acb796be25efd1db09328fd71efe611c1472d4fed8220a4cc1480843d8284ebb2405394f6e3c86316eb845729dbdf9f1c6ae4fb2f5c5d2efb2c2efc7177c30f101ef8943e423d55aadfd293d3ab7b36367c59d