app.cwi.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:22:28:1e:b0:b2:8d:09:ae:b7:69:6d:e8:42:43:a3:32:a4 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.cwi.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:22:28:1e:b0:b2:8d:09:ae:b7:69:6d:e8:42:43:a3:32:a4
Serial Number (int): 360072072674940399286020694921156533367460
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:5e:1b:7d:44:f6:b8:ff:11:8e:26:29:b1:47:70:e7:9e:0c:a2:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:25:90:ba:2f:24:c9:ec:e5:eb:a9:23:0b:1e:33:8f:ec:8b:99:aa
Fingerprint (sha256): cf:cb:70:1a:cc:8e:3c:15:aa:a7:d9:b8:44:a3:23:c5:88:dd:a9:57:40:20:5a:c5:d4:cc:00:8d:58:8d:bf:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.cwi.me

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.cwi.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.cwi.me
app.getgeofencing.com
app.onspotdata.com
bigdatashow.mobi
console.refinition.io
did.marketing
dmgpta.digitalmarkgroup.com
geo.flowershop.media
geo.jbgsmith.com
geo.mediajel.com
geo.sitoaudience.com
geodata.display-logix.com
localiz.com
onspot.rtbiq.com
portal.esquireadvertising.com
target.interlincx.com
www.choozle.mobi

Other certificates including the domain name cwi.me

(limited to 100 certificates)
app.cwi.me
app.cwi.me
cwi.me
app.cwi.me
app.cwi.me
app.cwi.me
app.cwi.me
app.cwi.me

Certificate

The complete raw certificate details for app.cwi.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RQpvZBfyEFVg75XtSsI
XB/fuklUvciXRd3OkXccH0n1MTvDM86n0KzBCK8fa8FX5pf0Mm01c/fhHX4IzBfD
3Pj7noSH9I4L4heJPM2CfT33XaLT0oSQbwo0M91aJu11jKSXud2PGmJsLsVlOC84
92pw2OnTDw7gElFle8mHGuwOf+ZoqkOfivEv6CzWN33ZuMQqh0gINKLg9jq1hbqW
M26TgDY4PNbUJp15b34y+AsZLV2AhMfkpYkSJwWt32OAx59f91xesF2gNscnfhzA
c27zJ82SjB6Y79nDM4TlMgE47D9W25MEDrs5MJjAq1IpbP4nTlpRg4Gj/YwRcVvK
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360072072674940399286020694921156533367460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 18:34:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 18:34:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.cwi.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27403654947553593220797555514998765056638759999467273379625203855850018037641162967867190225728202782331805950662775902119173505760702458129497507353164810885932240729497872275347979047658629201649587525376856220420270541347684795333408662706767612902072813968557512981861453675431226634872133316129459089516152456555896731191769880875534854985776430290090057821210315468249980015298562567891442026283592808137643389168295966084050980679232067155117151463962489374819885527141645336227142150704505649616883239873473624515610059639415734645943480858527906254913609363162352442884578230232231511469014920012015412693519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db5e1b7d44f6b8ff118e2629b14770e79e0ca204
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cwi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getgeofencing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onspotdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdatashow.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.refinition.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'did.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmgpta.digitalmarkgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.flowershop.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.jbgsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.mediajel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.sitoaudience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geodata.display-logix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onspot.rtbiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.esquireadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'target.interlincx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choozle.mobi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0469ac040000040300483046022100e3f404e9e2196ed975aca6a79d11e09128dccea076a2ef7e41033236739ab55c022100b9b0cee455c3a79066fa5cd3684c92b26bc5a63d2714a45f0a5594e9ed108bea0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e0469ac390000040300473045022100e399fc6f16a373d4ca0b09dfda5db883bd8c3ccb971f9ec1539de33334ce18f0022062745f2dfdb6c97f1f4963cb550e50b684d72627da77c7b3d5e2ec39d064f274
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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