api-local.pikkop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f9:ab:24:81:1c:5e:4a:06:fc:4f:54:17:e1:8f:00:5e:47 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-local.pikkop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:ab:24:81:1c:5e:4a:06:fc:4f:54:17:e1:8f:00:5e:47
Serial Number (int): 433406940618999200362824292050527680749127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:d5:1c:5f:13:98:20:be:f1:8b:8a:f2:2a:fc:a7:e8:eb:4a:20:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:3b:4e:37:fe:1b:95:06:2d:9c:84:e7:ed:a5:3e:d3:ad:29:26:5a
Fingerprint (sha256): 8b:d6:18:4c:de:73:3d:43:ba:60:52:72:a0:04:56:54:45:4a:1d:e0:1c:bb:ef:d9:1e:d9:d9:40:56:9b:0b:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-local.pikkop.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-local.pikkop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-local.pikkop.com
blog.pikkop.mx
local.pikkop.com
local.pikkop.mx
pikkop.com
pikkop.mx
shopify.pikkop.com
shopify.pikkop.mx

Other certificates including the domain name pikkop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for api-local.pikkop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL7b7K0ujoCIv1SCKegf
Edc1yvbxJDj8EOSTRYMzVwC0eO682MwRtn1P3YtPkm1ywt8E6ivyJl6IeqThhbcS
3naxcUph+ni95echrIRVV6hYQ9hPIHxjxuPfOGTGBTI5GzXrwAmCT3DOt95yS0nk
dePDcfC0bOmncif1byxvZ2Bv1W6GwSqwL1n0hz4Yx3JldfGpUOnmdEJOnBfahjCN
ttcREoqvxvXDf9SpCZYmqPi46MczhTIb7QeoLjXQw/Nhjy53LdVkzrputqqwOZ6i
l7A3olfaWF7vpP2jqiQpO/Jucr0vyI1z96shUE5XvH6Ngn0pa5702WyZsHaGS8L/
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433406940618999200362824292050527680749127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-30 13:38:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 13:38:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-local.pikkop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25341777113387879751037350110508511865043805442491001886455251479001435467675767146836660546290798851331315246639044870078960758036697870882833060686942947297822025590269421657356688747005097001946524763223502160491525634172564338318648499189151369151501635515188589056250806252866834397528811137059080587779592250040208646333708925603924272079450708907694377277297091815930552548284296749717139503713620551794288874936249701124795755575309350047286403683891719077723682566887556476632532107170376566282688624346544968183714824279809534272785462855607302568063710191979849976239135387408055943565839194619306743889729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bad51c5f139820bef18b8af22afca7e8eb4a20d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-local.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189a73c33ac0000040300463044022035e721bf68f210eb38a686d2abae4864eda2729e7a68cf2a55f9a192e77cc00b02201ab3cbe104fc5c87b43cafaaf2db7b6cea648fdc0a8ee6dc5ffcf47ed37680400076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189a73c33c50000040300473045022100ec0557054bcc355b31486d9c97b22857f669a1e6eeba11cdb6ab7565b3f858fd02202b0e759738ece5a78b4b51f8d76f1803bb80a771b0c55633b1187a73edb6d2c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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