backend.kanjea.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:75:80:bb:ae:6b:30:37:d1:ef:1c:26:b3:3b:7a:22:cd:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backend.kanjea.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:80:bb:ae:6b:30:37:d1:ef:1c:26:b3:3b:7a:22:cd:72
Serial Number (int): 388433296337395409243402486102533945347442
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:ee:2e:f9:47:7f:51:bd:9f:31:e0:bb:f8:bc:d3:9b:50:11:b4:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:de:04:85:7e:06:13:5d:23:29:61:d4:25:c1:77:eb:97:ba:34:cc
Fingerprint (sha256): a5:80:e2:aa:8d:fe:8a:ec:a5:54:16:be:21:81:2a:6b:cf:df:80:fa:06:bc:e4:dc:4d:90:90:37:1f:b5:38:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate backend.kanjea.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backend.kanjea.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backend.kanjea.app

Other certificates including the domain name kanjea.app

(limited to 100 certificates)
www.ladeklar.app
www.sellweship.com
kapi-prod.kanjea.app
negocios.kanjea.app
www.decoright.biz
staging.link.awarefy.app
www.cerpow.com
dinastiavallenata.com
otarkie.com
clade.ventures
www.bbpt.ro
www.panel.nataipalingkau.id
admin.canarymail.io
readwords.ai
jakesticker.com
www.bople.app
www.kaelkirk.com
www.stillerapers.nl
www.kanjea.app
www.foodchoo.com
www.kanjea.app
api.kanjea.app
sistema.hidronet.org
bobup.be
join.sh.favstay.com
i-dev.ra9.app
api.kanjea.app
negocios.kanjea.app
www.pthub.app
www.bbpt.ro
kanzlei-stoetzer-rosenkranz.fastdocs.de
leanlooper.com
apidata.app
api.kanjea.app
bullburgeer.com
hq.bitestechnology.com
takanchan.com
firemarshal.app
kanjea.app
sp0tz.com
denizco.de
www.winds.co.in
ktabr.club
scraphousemedia.in
app.connetic.org
kapi-prod.kanjea.app
www.tamirge.com
shops.kanjea.app
cloudon.app
www.royalnovasmt.ae
discounts.ai
www.dotitiep.app
admin.kanjea.app
dashboard.flowins.me
discounts.ai
tranhairdesign.com
freeriderjumps.com
www.buscadev.com
kanjeapi-production.kanjea.app
shops.kanjea.app
privacy.alfred.com.mt
kanjeapi.kanjea.app
backend.kanjea.app
business.vezham.com
1xdevelopers.com
trajecteam.com
www.kyntek.ch
ikbenken.nl
tiper.app
www.winds.co.in
www.bnimoveis.com
discounts.ai
app-qa.rentmindme.com
register.revolgy.com
ng-stuttgart.de
readwords.ai
api.kanjea.app
www.pinkpaws.co.in
control.allcore360.com
2019.helswingi.fi
kanzlei-stoetzer-rosenkranz.fastdocs.de
readwords.ai
2019.helswingi.fi
nosh.ai
readwords.ai
highend-pc-shop.com
kanjea.app
www.stillerapers.nl
influensters.app
backend.kanjea.app
ethronsoft.com
quikk.dev
www.tamirge.com
imagine.geeksonfeet.com
wvz.modenu.com
grouple.app
discounts.ai
auth.goodcrypto.app

Certificate

The complete raw certificate details for backend.kanjea.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388433296337395409243402486102533945347442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 23:52:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 23:52:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backend.kanjea.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842766194527976298357815163468046930035020456332931654146017524324895189122062505706131700525774516682784727148265934680947773854909417391955451938891743496074497514608437409161679081557832764679344086517244884836409490678225959490665540645797585998258867876984587604839286533690241993554689867564669813120491967053477702738650851090145429628977732925153245497402122686114054935116532887640901368393636253549399848869394797888489654162700197147703899603992535681605488225607658179040708335365776930285638663892595173229518147649404722457736842685001751305217332636621714996942444408737254846027684377506654468676562828254556253689315528696485248993711234458097459441698912304914282619181501727785558114903461280916930527989829654282405065235949546016599611761551088374931463717374009495378413568154427094453548685249937736660249102416400340770714414699143709995782417621438042963081445173648802008863149017021867349211592692939707571629377040510833605468143623648983399985956117623583000993367070382852881033392108775747465670919840550000432401956320682316148681285434632438463536005167538270647659631543977560739321704341052271512704748679777102197798077127124842178798597121323380505023684962537745561535107735587024357825898107343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08ee2ef9477f51bd9f31e0bbf8bcd39b5011b400
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.kanjea.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001659ceb0fd50000040300483046022100da104287fba6ed81cd248e3218198198a91f405a7d13e1f71221d53df33e2cf3022100b20fc6a72712b2d6ccabc9823e99d8498d7d3af50026ea2aebf3dd9727ba7858007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001659ceb106c00000403004730450220798a190610acc30081b00f7f1866701f1e51994bf978582fe6a72549df18fa0e022100aba83d6896a2a11c6c9cc2724cb7f2c5fd5301762b79c4bae0fbef002a3b7106
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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