heatsealco.site.insivia.co

Issued by R11

About this certificate

This digital certificate with serial number 03:cd:f6:77:d8:9c:a5:5e:12:29:27:b5:55:56:62:a1:3d:e4 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=heatsealco.site.insivia.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cd:f6:77:d8:9c:a5:5e:12:29:27:b5:55:56:62:a1:3d:e4
Serial Number (int): 331422355377773626391481013131327236554212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:94:c7:1e:88:30:69:7e:15:e7:6d:ab:49:73:b2:31:c4:93:be:c9
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 52:4e:5f:6f:51:10:4b:dc:07:64:8a:27:c8:fe:47:c5:a2:4b:5e:56
Fingerprint (sha256): cb:dc:0d:f8:64:06:85:35:01:a4:43:dc:31:5c:14:72:0f:7f:1e:eb:89:a5:ad:21:ab:f7:16:e4:14:be:b4:bc

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate heatsealco.site.insivia.co

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heatsealco.site.insivia.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heatsealco.com
heatsealco.site.insivia.co
stage.heatsealco.com
www.heatsealco.com

Other certificates including the domain name insivia.co

(limited to 100 certificates)
xprofintech.com
heatsealco.site.insivia.co
4walls.dev.insivia.co
gatewaysafety.com
te.dev.insivia.co
shineinterview.com
insivia.co
gatewaysafety.com
shineinterview.com
shineinterview.com
te.dev.insivia.co
insivia.co
nuron.build.insivia.co
shineinterview.com
4walls.dev.insivia.co
heatsealco.site.insivia.co
tinnerman.dev.insivia.co
te.dev.insivia.co
insivia.co
nuron.build.insivia.co
shineinterview.com
shineinterview.com
shineinterview.com
4walls.dev.insivia.co
sni.cloudflaressl.com
heatsealco.site.insivia.co
www.nelsenwatersolutions.com
4walls.dev.insivia.co
nuron.build.insivia.co
nuron.build.insivia.co
xprofintech.com
shineinterview.com
shineinterview.com
xprofintech.com
shineinterview.com

Certificate

The complete raw certificate details for heatsealco.site.insivia.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHhZ9hEbL7wGQzlkwWYH
PYrWuaqqc0Xii3gvq/SrZc4PD7SH4KxH1B4HFPoOnEh+Ectvs8y0mAeFbxkNcNBU
RxGe21pdlg3NSBXLaWjgUSRPjWLVPUt8/gg+a3Ew1DfkgP7vurkgOUDiDAh0e7IF
CgoEQheTlBzdN0YlC8M5dg+SvgxUhT9hpgdUNhUKsCWxiMl/GBs2UpQfwEUQEqmF
ecmBGuE9/Qsr5fMagvYzsXoJVkMTSsYDgXVpBbOHpGIEMyWETCNaV15XOE+y7AfU
IfFsk6/xxiOgwPPXs6yMBX5xBofNYrFaizEvXy25A6f5/n505YB7KXyH7JQeIfXg
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331422355377773626391481013131327236554212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 13:48:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 13:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heatsealco.site.insivia.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24297102046125027666181679987194764108417415012552091693859757035814112524397582478477768740229391578462431623563441656450373932811797901856062908656793279276840229076975338024189804899152310048950130670569698980982764887127975938675168012693129023305282460428828518677037180150639472840109060437133893514618682554758719706685228787405788813420278291936195297909876416613411166715209261510662854851972887175165327934983740356011920464558998356700835608408022317450339592715642104265674550676451029244384981547823848330049226466973313874908789432094692488045734625929727978270608994446569440259121291626239027030908959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a94c71e8830697e15e76dab4973b231c493bec9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatsealco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatsealco.site.insivia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.heatsealco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatsealco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019026abe4b40000040300483046022100d43325591f97d672cf0a3ef09090e6c1cfc7d2e9d08552f98d36756d1a9ff57d022100fe514f79ab8e5e70cfaccb7ff31579cccf0b2a7482df28ef60ce24cf07ce7f1a0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019026abe4b7000004030046304402203bb5ac7476e17148e29f0b4814069022b9d6844010bd6af203d205d85c8cd03502205886362c8b4dd601c591d8a0412907af75af350a1cb570b8cdde420567a8a964
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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