deus.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:76:70:5d:e6:08:ca:3f:44:85:21:87:6a:f5:6d:2f:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=deus.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:76:70:5d:e6:08:ca:3f:44:85:21:87:6a:f5:6d:2f:45
Serial Number (int): 312196362811740637869364899768260597985093
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:18:8f:b1:54:e6:48:f5:e5:94:4c:7e:e5:01:6b:e4:92:7a:b6:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:1a:96:1e:e8:21:7c:13:6f:f6:ba:ce:e2:57:36:1b:df:fa:b1:86
Fingerprint (sha256): 91:d4:ec:9e:fa:ce:53:21:c8:28:4d:d6:c7:16:19:5d:d1:8e:70:17:45:64:25:42:59:b1:07:87:81:25:c5:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate deus.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deus.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deus.ai
www.deus.ai

Other certificates including the domain name deus.ai

(limited to 100 certificates)
praeclusio.deus.ai
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
dashboard.payline.io
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
abramovslava.com
liveintent.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
deus.ai
firebaseapp.com
firebaseapp.com
deus.ai
firebaseapp.com
firebaseapp.com
firebaseapp.com
fiaochdaniel.se
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.adroady.com
deus.ai
www.rajugurung.info
firebaseapp.com
firebaseapp.com
firebaseapp.com
personio.deus.ai
app.summerchallenges.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.deus.ai
sancus-gen.deus.ai
firebaseapp.com
www.minimeter.club
firebaseapp.com
www.motif-lab.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
deus.ai
www.kalepa.co
firebaseapp.com
playreplay.io
firebaseapp.com
staging.app.deus.ai
firebaseapp.com
firebaseapp.com
easywork-businessoffice.be
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
deus.ai
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.arthlabs.com
blog.ryden.co.jp
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.guitarpick.fm
deus.ai
firebaseapp.com
firebaseapp.com
firebaseapp.com
beta.cupcakecrm.com
firebaseapp.com

Certificate

The complete raw certificate details for deus.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISA5V2cF3mCMo/RIUhh2r1bS9FMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTQyMzI1MzlaFw0y
MDAzMTMyMzI1MzlaMBIxEDAOBgNVBAMTB2RldXMuYWkwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQCweQaE9GWZzKhAwQvLSOoZO2w2LnlQqx8oYtoanJBW
6WkuVBsvJOfUAxUedOVNO6Gv+Zi+vhiF0mBXLc8Wpih4qNQefgQnyAhZlwA4td/t
Z312t8Lpo5uL37O6oW/Zl7heZpmwnaTedkP39lgTADOVFGMI4TABxiWrbbbfx5YT
/9ORI9NYUgIms+lGryUP9lollbEhSdf674HbDbK6cXRQXt84A6p5jqJvUbBc7dbP
UrdsO2CFMyU7XuxIz2KOOBMcdh0VXkRYtPN2bcZnT+n0qveSHeLo8K2jydBQHu6c
hSozOUdQzPx8ylslkXeWOgPk3Z2qUFkG+0KevTWBkPDyn1vVsw5+wY6rhbAE0AW2
W0ne/VjkomUoNOXPPDKjufp1w74Fyacf9ag21+u9x3xQDTyhmRX2jjqJ/hBLsdB6
gScPH5NcWoASCFUvV636dxUSFwPZFSWbIQRIAiPD6705ooml6PUGXjBsi/Gnjdr9
LvSRuovwWGBHriXdYddQ2eLkb61x4CMtorsWnNtsWDKNUhlZCQpsMp5yz9rPTARg
23xSSBQnFz5vZ9gajkF9DTwTZHw80tJ8I7YxGn4xbsiH0MUt8fQzXpARiS/TzfkP
5ICBjNZ1RJmuoF/1meIYiwYj09kksIYN6WQmqLUGIo5fLg6ZZmsniZhA4sQeiNvz
OwIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQxGI+xVOZI9eWU
TH7lAWvkknq2ajAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMB8GA1UdEQQYMBaCB2RldXMuYWmCC3d3dy5kZXVzLmFpMEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvBvJKXAAA
BAMARzBFAiBXWdL2oyEckn8FoqlxTtCL0Y+AwlYpCXIfbdo7pGRJzwIhAOcdDYsK
QHXJTzbRaNAQoE4fn5fSdo/Ux/KghSromE7JAHYAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFvBvJKRQAABAMARzBFAiEA/kNNtGmK+KBI8lu13Zp6
lUegz7nZHp4okCaBwr3HZLICIAEC0ocB5jwQOyHcS1WOFs9Y3dCIA+PwskjmM6pl
AI6PMA0GCSqGSIb3DQEBCwUAA4IBAQAzvj1Jr3csppPtSUNHWsEVUxlgytsJqvOe
tIvNwmwAl1BpHVMWS2qrLSKtUGpUK6pD+BLqrMb2fq/9X1gQUjIaWwGwfk/8Drg/
4hd9otYj0Snv1PucuzSqBZan8srRvcgOrn6GlctO+0y4CyaeP0gh3HhIPueKPabZ
Bt1X1/F6wWl+Of1GXSP+wdOntwUmgzB47XjO3OCca4iirh9HrttRrZZDpycQOpJq
Sz4KYp5XsPye/6MBYxxiRgjx7X6TLzPkG1ZrpG12v0XIWgjgLDr/zGRst/1tjQHd
NNAI9tEeLnzfbYHQ41FoUeunpsmtuVHibLZqzt6+e1qUxFCklPzc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312196362811740637869364899768260597985093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 23:25:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 23:25:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deus.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719946031070658597075157730989740407991794760084489742048449151634401003579737527968524512667962549512518343084487930871053510716240019634681171109683858065321891879016077838575242020533251403298294047417295163523911976433647145475813299023765663507332323861148418145832484179889134203532807138455562019145577035087543070684030131269606570976765834078331097487378894329404970136429579137097367549187639437691499461134438053813327664360724908199930279382969142741909079407150676348042317001919526033769463289430455554488722914493657053247807266545546468120961556000537318968982395644574785198624925842532045432461315931671761107578020130126216321669522749127211503258868467077781719919239259948410099774054727802978289423135001118954496462921833705402536966016836993249743912821327359301013755587097191156811942298024617701060157231482592853622977677502907906373857853804339838211413682257583642552753572978562015826810190991195337572198603832716013816816926606608113163152673361421035476146572381522403416025686483676742275631017543056949271863903571668870825571499991597912785736509449082208554431189151708388483658907211990768585741473166302405002655334483380294858158016743403268907694384900258735807788889000108382181857798386491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31188fb154e648f5e5944c7ee5016be4927ab66a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deus.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deus.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f06f24a5c000004030047304502205759d2f6a3211c927f05a2a9714ed08bd18f80c2562909721f6dda3ba46449cf022100e71d0d8b0a4075c94f36d168d010a04e1f9f97d2768fd4c7f2a0852ae8984ec9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f06f24a450000040300473045022100fe434db4698af8a048f25bb5dd9a7a9547a0cfb9d91e9e28902681c2bdc764b202200102d28701e63c103b21dc4b558e16cf58ddd08803e3f0b248e633aa65008e8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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