api-test.hlo.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:eb:28:80:79:2a:93:ce:9b:45:3e:41:c4:21:bd:9d:59 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-test.hlo.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:eb:28:80:79:2a:93:ce:9b:45:3e:41:c4:21:bd:9d:59
Serial Number (int): 331407321890705135562920538167891327819097
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:87:34:c6:1d:66:09:0f:d6:0e:57:eb:6c:48:e4:af:15:cd:7e:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:97:72:fa:b1:2f:c3:38:f6:d2:09:ba:e4:cd:19:89:4d:d0:53:f3
Fingerprint (sha256): b3:62:fb:f9:89:20:b9:25:42:a2:21:00:ce:f6:5e:e6:c5:1e:07:d1:e3:8c:f5:49:92:fa:a0:7a:4a:0a:8d:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api-test.hlo.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-test.hlo.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-test.hlo.app

Other certificates including the domain name hlo.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for api-test.hlo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331407321890705135562920538167891327819097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 00:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 00:41:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-test.hlo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859478007402240681944164439208209400894559998122198767165269556398496538630066876977028116631968055125663379021555892658294237125297035434683660444177338409924800636387194886311101431562037397313266041425501678551323413746032133594598915304657291357176453927431294923442815294039732747649089073721339346594856603640529799096780926195476947356934489498569305163861915337246029972260797822210460751669907114812858378148556675766689221509381141896692416241495625936834894055928096540719417186982426513871689937103109074824765189758084565722819308526020974598823746736337977185979028779593297137587349732621013231487480104273388656777773170385829288883518776892071175600907801213157699011053516975553585889685790755788610263519298585568801903266067524612052911616762398517875202313104552000998975262240179776481276791911991122513383201909446260572155776290055389215923129144479971094664575870876539763731249372186832941003588985325373906907320801570752405384289060567066881938272159598150293387010992216885150098934226121873350089276398250847709563324920213738236065826122734125890029910955871571862940941447233729053214259699413489075584304932268623911454534084734321430859124972832235194733285348230663838672885842696832662337208343229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c88734c61d66090fd60e57eb6c48e4af15cd7e19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.hlo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016efceb3fb60000040300473045022100f58e59664e21bf707effa911316a83110d0e183020e02f0137ba6bc72874407002206ca163ca5f519d74b6231343a337174b818a3369da1b81eeed95d17eb301797900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016efceb3fb300000403004630440220364d5142b4d14f6bd3d8d19b73b1c68885323ad8ca35748e31d838a0ae4b641c022045519eb9f26be6da421b7fce2648ec2b29d9e4720720c675665fc88f9a72864c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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