api.test.fretapp.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:93:14:69:d4:4a:44:ac:50:d6:78:a1:00:18:86:74:3b:c3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.test.fretapp.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:93:14:69:d4:4a:44:ac:50:d6:78:a1:00:18:86:74:3b:c3
Serial Number (int): 398497785721259758487834867275758208039875
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:f8:47:45:d5:8c:e9:f5:92:a3:db:ad:af:0e:1f:74:98:e1:80:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:8d:76:40:2a:f8:2b:12:f5:3c:18:42:5a:7e:96:25:db:de:de:bb
Fingerprint (sha256): c7:0e:9a:8a:e1:54:8a:97:d6:9a:aa:13:a1:25:e0:96:01:a5:4a:ef:77:8e:8b:03:eb:0e:ab:cb:33:dd:b4:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.test.fretapp.implystudio.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.test.fretapp.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.test.fretapp.capyba.com
api.test.fretapp.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for api.test.fretapp.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398497785721259758487834867275758208039875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 19:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 19:09:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.test.fretapp.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750915061336432007798807715074771214596120824257334565953050140155746231185503922315610594567810650759413400835341046807044051773286460925075758140399484715465424191672606844577391269962512044119744125752587082205765900940541496579205816239833224388835792981632265798681087762719934488971653796728861002318510200133013924115844677896099053345245233163216373721248945398106086670524258994580438935136529824116623536504446841895490496173358080404612626487676963634872209688191023960692333687739962776747400982290421102710426406974394494700608833476703079627468365654643955145723071570599928046043895873763186162439278308363041723129915951233095144327887092073797628163948942594034540677233230017561108475273008914142306681658806236876584919636532288008055973793287132759839731360300896852700531093693037645597570625815272544778775688802380779959227994247703550899475729806921208916815686588237232072292274696776269760034114613832108652491967153851543537080768563432470965063312855645475186101415678550908716095252196910544662578128475714088549598544938492739565721710211270039446708710790589331580158194025123885559633655248707446311888012311277690340698299062313827342264776973908205619233590921914163019462617841499580775124025037231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4f84745d58ce9f592a3dbadaf0e1f7498e18043
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test.fretapp.capyba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test.fretapp.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b2942c72600000403004830460221008b3a42279176d29c9e78fc4e223b6f8453d5a90365dfbe589b5e4e8152d47df7022100a10d7edc7240f817fb18a27e5d9d9dee8b2d52c4da1040d0202b73a806b2ae7c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2942c71900000403004730450220332bac1381a09a9fb9f70900486e6be6f7316ff3da4ee963a7b9b4a2ab1013cc022100f87b9abcd4df5ffe701d595574c2913b16b985baafd7f2d2c45844c9fe6bc580
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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