platform.fit

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1e:74:92:55:e1:40:a6:1d:e9:2e:bf:4e:20:27:d5:ec:0f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=platform.fit

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:74:92:55:e1:40:a6:1d:e9:2e:bf:4e:20:27:d5:ec:0f
Serial Number (int): 358812564999372697556153615280785763724303
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:7f:ea:9b:04:20:df:33:de:28:a3:db:8d:bb:51:23:11:9c:09:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:4a:e2:94:47:d1:7b:7d:6b:96:d5:23:19:cf:df:60:83:ea:6d:af
Fingerprint (sha256): 8b:46:b2:7a:67:b2:e0:b8:6e:6e:2c:42:87:91:3f:40:36:aa:ef:f0:41:b1:ae:97:14:06:ed:e5:d6:14:11:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate platform.fit

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.fit

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platform.fit
www.platform.fit

Other certificates including the domain name platform.fit

(limited to 100 certificates)
blog.candy.ac
drakerresearch.com
ptp-member.dev.vive.co.th
www.aarshremedies.com
app.mou.fit
lumsumtanthasatian.com
diogo-santos.com
spedir.com
www.alamane.net
demo6.platform.fit
www.hlavac-business.com
app.stocksolo.com
www.mind-touch-app.com
test.liveinahive.com
marklisanti.me
www.hijulia.app
www.solal-experience.com
lottogold789.com
www.unitdynamic.com
agriculture.kawa.space
www.hijulia.app
sigma.master.appdashboard.nl
app.ghostbento.com
app.pokeraid.me
staging-moneylion.thelevel.ai
lst247.gocad.de
www.kevli.info
dev.designscramble.jp
imp.biibiic.com
platform.fit
create.peekaphonegame.com
www.zkbail.com
www.memoo.io
links.engzketab.com
rokthai.com
tripleaaaplus.com
more.imb.br
smekalisty.com
tiny-note.plate.icu
app.myclinic.today
staging.cbm.uhda.health
www.sanadairy.ae
www.solal-experience.com
calculator.thecarbonauts.com
create.peekaphonegame.com
ideajamlive.dentsuaegis.com
denkmal.org
rokthai.com
mytriplan.ankuragrawal.xyz
medimynds.com
docs.zylitics.io
www.bootspruefung.de
featherlessagency.com
guestapp.hoteltoolbox.gr
spedir.com
www.silkroaddanceacademy.org
halda.app
www.d-wilkinson.co.uk
link-development.iynk.com
novapay.co.zw
ideajamlive.dentsuaegis.com
platform.fit
lctexpress.com.br
philanievolk.com
platform.fit
rehabilitationspsychologie.at
anishrai.com.np
demoapp.eden4.au
bidtomato.com
app.startex.cl
demo5.platform.fit
link-development.iynk.com
sparxreader.com
aromahotel.vn
www.straightedgedesigns.com
flying-dutch-man.xyz
sodarani.com
aj4.co
docs.zylitics.io
link.2zero.earth
flying-dutch-man.xyz
mertl-luxury.com
lgapp.mayamd.ai
app.thelewisclub.org
id.alt.ai
www.shopgreenup.com
store.nithinorganics.com
www.espaciovidaysalud.com
www.thefirst.in
storydsoftware.net
stg.canvas-iot.com
stylizz.co.il
www.unitdynamic.com
mountain.legacy2020.org
diogo-santos.com
jwsglobal.com
stylizz.co.il
costabravacalonge.porcelanosapartners.com
www.textfixer.net
josebernardes.dev

Certificate

The complete raw certificate details for platform.fit in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz/Gepu2HsZtMGxemcpdW
ya3vSybWoz4Sy2Hb7J7XTsvtDXmjxzAhBc0QWM/q8r8W9ntc2emYjR8dgPCwC6tD
IJnTRCQMsHhWRHyQDwETFAdb0fSczhVx0Z25dyWF61bin47xjMgJcC0jz6hg05SY
8vzOAV5Etakd2uoG8OHbkX13Vm0aLjmcq5VIC4ghHZgbqfI9mhaVGOtYeBhJgq+a
LjiWVYel4E5oFfx9Kcg2Kv3s1NIYjQ+OogNw2kb4il8WAkmiteV6xRnDG5HgkxDy
S/+74vRzblLm+WhMne2DaqcUdMBLnND4+bCp7a2L2Vp+ZKIJ99p3g+hDbYJ7I+pZ
YaFfESznfZscuXPMCX8MLn7qzb3vegDcSr5ItxQ/oCjGlxCYjuTVaoMKWgc/a9PW
r8QtTB8r9tfMHXZOYiUXOQSw5EzJBW6VMqBNLwQ7hFg7mr/onwYxfVZ5JngmWkdp
YQEO5yAEj12nqxx7LXyhmvs52DPkmVLwOAvl1qeDZeDS22Nm2VaeJ6t/CSnVkg5Q
oGOpVYgkeCiMy9Tp3ZKPu6YHZAlUnFrq/cGj9YIggvCFxshiasOGrYy+wPaQwNU3
rMkm8tXV7KFY6HOEGUfY71C9ymIb1CzK4HPSqiYT+/V4+PzOAyTC5h26IlWEWYUZ
WntBk1+1jRF/w8rJNRlf5JcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358812564999372697556153615280785763724303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 17:23:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 17:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.fit'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848336800662378578273171371576026218622668044029837359632689943750143187203597951190039111706192365336763372165696536588779827171673295922680759725487647737784325159086816582461401813552834211400842316780779626996834862475446001026704940643015169126024028073503192886148838117260546910096757099863764282693179603426125658558052998734196380008412394397473654643817718307699988148462820273575991686865970784960134166619020003090910116575633972482188428977748757554406984639152892274513280515791512031841409768112061598388977842362801592385910189701872461371490079703291640905948671874604143547284442153701765909127704029836176202798069728630531036964984479843875277273389364521022669784805185616275315261453501918982102072586859366127289542921779979255025832052500708853232194211089585889341564269045865327496884564325634456850923092615354428943977265855812504954221708890024802558876240465247183496131311774813109474737471646706578748581765955575745447640365739981170194845622429218415381872104750993895154743863092687429968917055271646379505346720008457736326973980465721380076257095079279575084127371470885975484608629198036684200276396316533414343077284104857740471934467504849369013972497182765928201555509662109374750434185438359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							347fea9b0420df33de28a3db8dbb5123119c093a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platform.fit'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001703aa405f7000004030046304402207863c668c61b29e7957f07887d76d072570d8385e78ffe8747f06ac0780a7fb8022069c03410c6888c1967fcdd5b641d07307c9e254c8e3ad6e7f54971199d080c1d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703aa405ec0000040300483046022100b7aac5fa5d90ce71fccb08ce5408d02e2a88f728c7e7524c9b378fa59f2cf2f2022100ff109bfd93747c9795e37932968ec53d4b93ff267cba274c33fb8decbee9a1e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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