core-platform.atassi.sdev.ovhcloud.dev

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:d4:eb:29:20:e1:50:86:55:1f:b5:cc:45:97:20:c7:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=core-platform.atassi.sdev.ovhcloud.dev

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ff:d4:eb:29:20:e1:50:86:55:1f:b5:cc:45:97:20:c7:2c
Serial Number (int): 435504164650932279045022119572059094828844
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:d5:3b:31:94:d6:e0:5e:86:69:dc:29:eb:bb:8c:6f:4b:b6:d6:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:a5:ad:ae:ae:09:a0:2f:53:04:dc:7b:d2:b5:f9:06:d4:87:eb:5e
Fingerprint (sha256): ce:24:83:53:51:5e:22:2a:af:b2:a5:30:ba:8a:c1:98:2c:63:6c:06:40:48:44:de:cf:92:d4:e6:11:3b:6e:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate core-platform.atassi.sdev.ovhcloud.dev

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for core-platform.atassi.sdev.ovhcloud.dev

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.core-platform.atassi.sdev.ovhcloud.dev
core-platform.atassi.sdev.ovhcloud.dev

Other certificates including the domain name ovhcloud.dev

(limited to 100 certificates)
private-cloud.status.ovhcloud.dev
itstatus.stmonicatrust.co.uk
adtrust.wellsky.com
ac2ada-status.elastic.co
private-cloud.status.ovhcloud.dev
adtrust.wellsky.com
private-cloud.status.ovhcloud.dev
itstatus.stmonicatrust.co.uk
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
itstatus.stmonicatrust.co.uk
adtrust.wellsky.com
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
core-platform.ckoerkel.sdev.ovhcloud.dev
ac2ada-status.elastic.co
vcd.atassi.sdev.ovhcloud.dev
ac2ada-status.elastic.co
ac2ada-status.elastic.co
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
ac2ada-status.elastic.co
customer-services.status.ovhcloud.dev
node2-b30df4d18a6ccc1d.preprod.clouddb.ovhcloud.dev
core-system.ajin.sdev.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
itstatus.stmonicatrust.co.uk
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
ac2ada-status.elastic.co
core-platform.ajin.sdev.ovhcloud.dev
node1-b30df4d114c61871.preprod.clouddb.ovhcloud.dev
node2-b30df4d10f171ac3.preprod.clouddb.ovhcloud.dev
node1-b30df4d10f171ac3.preprod.clouddb.ovhcloud.dev
adtrust.wellsky.com
customer-services.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
itstatus.stmonicatrust.co.uk
core-system.ckoerkel.sdev.ovhcloud.dev
node3-b30df4d10f171ac3.preprod.clouddb.ovhcloud.dev
ac2ada-status.elastic.co
core-system.ckoerkel.sdev.ovhcloud.dev
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
core-system.atassi.sdev.ovhcloud.dev
node3-b30df4d18a6ccc1d.preprod.clouddb.ovhcloud.dev
customer-services.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
customer-services.status.ovhcloud.dev
customer-services.status.ovhcloud.dev
core-system.ckoerkel.sdev.ovhcloud.dev
core-platform.ajin.sdev.ovhcloud.dev
private-cloud.status.ovhcloud.dev
customer-services.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
private-cloud.status.ovhcloud.dev
core-platform.atassi.sdev.ovhcloud.dev
core-system.ajin.sdev.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
mhpstatus.intermountainhealthcare.org
core-system.fcazals.sdev.ovhcloud.dev
core-system.ajin.sdev.ovhcloud.dev
itstatus.stmonicatrust.co.uk
ac2ada-status.elastic.co
customer-services.status.ovhcloud.dev
ac2ada-status.elastic.co
private-cloud.status.ovhcloud.dev
customer-services.status.ovhcloud.dev
customer-services.status.ovhcloud.dev
private-cloud.status.ovhcloud.dev
node2-b30df4d114c61871.preprod.clouddb.ovhcloud.dev
customer-services.status.ovhcloud.dev

Certificate

The complete raw certificate details for core-platform.atassi.sdev.ovhcloud.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435504164650932279045022119572059094828844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 09:08:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 09:08:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'core-platform.atassi.sdev.ovhcloud.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825795738141297876225866099933529630760578105957948573575787193292737786953891001862615602031204432595395140924579722544070406851476430071114939766352291765755612800361663866136304123547974163340145088432829725245499645599905658302715379926636658347200429996098923568449214354137827610595324400004438474837804547652544803490942099683559847375931874119795287629647674356536361210045823645652825394167777545402989127539461015009928651401306845928117082251767413647980101140240894826180721081472433752232048795964354801950820098158699330896399621644760244695319022082350100854835200494205063601075595343174066995324047690333904194870752575453440980527681170613135850804686817672132022476285444808135750929999219905471583024706325746620419604974192503847669384414020623560598884429749743254854337687198355469778679270698533456413081737617144856229212539682900287686827608039762828652641826099276222873404645086298381486607459383052652214095955576036267500015091438953683840091713048250888266043979470977664279893498978493827958333594664034922025134796500958270729414554045357410847564838620588656107613340220899936810207819943679604153913005706476680636959686918768756892336202662463127467320898895096423463661535885745242758994051058421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bd53b3194d6e05e8669dc29ebbb8c6f4bb6d679
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core-platform.atassi.sdev.ovhcloud.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-platform.atassi.sdev.ovhcloud.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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