www.susitk.io.aptabasiserve.com

Issued by R3

About this certificate

This digital certificate with serial number 04:86:7a:d9:6f:9d:1f:97:6d:5f:f0:67:99:06:be:d1:08:a6 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.susitk.io.aptabasiserve.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:7a:d9:6f:9d:1f:97:6d:5f:f0:67:99:06:be:d1:08:a6
Serial Number (int): 394210275702146867104363302854052063283366
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:92:26:55:4c:55:df:a9:e6:b2:6f:16:0f:ac:aa:b7:1a:b5:9a:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:85:49:72:92:71:ae:9a:5e:f4:b9:c7:dc:a0:5f:05:1a:3c:8b:17
Fingerprint (sha256): e0:92:ae:2c:d6:84:ed:08:9c:0f:db:f1:06:47:f1:95:1b:e4:d3:02:35:10:fa:d8:4e:80:73:11:c4:0a:44:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.susitk.io.aptabasiserve.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.susitk.io.aptabasiserve.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.susitk.io
susitk.io
susitk.io.aptabasiserve.com
www.susitk.io.aptabasiserve.com

Other certificates including the domain name aptabasiserve.com

(limited to 100 certificates)
1oaksl.com
aptabasiserve.com
trinitycollege.lk
susitk.com
susitk.com
1oaksl.com
adventuredreamssrilanka.com
ginumhub.com
hewaheta.com
aptabasiserve.com
era.lk
yashiholdings.com
aptabasiserve.com
yashiholdings.com
1oaksl.com
aptabas.com
tfbrugby.com
susitk.com
era.lk
tfbrugby.com
aptabasiserve.com
www.newburydigital.aptabasiserve.com
1oaksl.com
adventuredreamssrilanka.com
era.lk
yashiholdings.com
hewaheta.com
www.trinitycollegekandy.aptabasiserve.com
yashiholdings.com
yashiholdings.com
era.lk
1oaksl.com
*.susitk.io
susitk.com
adventuredreamssrilanka.com
juniorgeorge.com
mespl.lk
aptabas.com
susitk.com
totalfitnessbay.com
www.trinitycollegekandy.com
*.websitedemos.lk.aptabasiserve.com
cpcontacts.susitk.com
ginumhub.com
hewaheta.com
aptabasiserve.com
yashiholdings.com
aptabas.com
totalfitnessbay.com
tfbrugby.com
adventuredreamssrilanka.com
trinitycollege.lk
newburydigital.io
ginumhub.com
hewaheta.com
susitk.com
mespl.lk
ginumhub.com
hewaheta.com
1oaksl.com
susitk.io.aptabasiserve.com
ginumhub.aptabasiserve.com
juniorgeorge.com
sappowersolutions.aptabasiserve.com
totalfitnessbay.com
yashiholdings.com
www.trinitycollegekandy.com
ginumhub.com
1oaksl.com
trinitycollege.lk
www.susitk.io.aptabasiserve.com
adventuredreamssrilanka.com
mespl.lk
susitk.com
hewaheta.com
yashiholdings.com
mespl.lk
ginumhub.com

Certificate

The complete raw certificate details for www.susitk.io.aptabasiserve.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISBIZ62W+dH5dtX/BnmQa+0QimMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjcxMDU0MDRaFw0yNDAyMjUxMDU0MDNaMCoxKDAmBgNVBAMT
H3d3dy5zdXNpdGsuaW8uYXB0YWJhc2lzZXJ2ZS5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDALgVa+YbTUh959KqBla/RlOhMFXXTuSJxAXTxqNFE
VJX43fsN7OIo59Xuhb0nrusaSuxqTdBQh0/UWkJN7X8xbTJONinXhafgRMb4W185
ZFgfBMRejondoPTZImVoFUOU2x1yFWmZekb6jePxaaruA1d8FCBYvMaK1MACHX8C
xsHt3bCr0C/zrdacSI1BmBbu6V2PAlh8DaUYAsF4Uor9W3gSHBV2yxJJYXQcqpJg
IpsqSUAG7x0qIOheXuLvRz5KpkR5Aic72rN8XK1lb5UAM3Hd7k3u0hJHQIfPmEI+
WWg9cR3qhR33wfLYlXIWvgdIs9FnTtdakbvPD7k3BmNTAgMBAAGjggJYMIICVDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAiSJlVMVd+p5rJvFg+sqrcatZomMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMF8GA1UdEQRYMFaCCyouc3VzaXRrLmlvgglzdXNp
dGsuaW+CG3N1c2l0ay5pby5hcHRhYmFzaXNlcnZlLmNvbYIfd3d3LnN1c2l0ay5p
by5hcHRhYmFzaXNlcnZlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABjBChILIAAAQDAEgwRgIhALvdl/nPbypR6gzZK8AJghDChjCl/OnrRR03
eo/zKq3tAiEAuPs1IFzg3qgdZg/NMDWF0Fh66qjVgppp0ahzSrzmEp0AdwDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYwQoSC8AAAEAwBIMEYCIQCX
x3R5SJntTVEI9lTWcEm1ZxvHl6edP5se17YNWS9zzQIhAJpvuKGZcpXZMqXC7ijo
nzIpQolH3n5SRWUX4VRsdsH2MA0GCSqGSIb3DQEBCwUAA4IBAQCk13mrr986xKDn
z549JbjLRfl7rEWrJcKmcFsKFQa8es3UTx1CsTO9k6LN3eSNLyH9ZOBhzV/0ww59
z7LcTtR0tlJ6DhBBsK0sNaqmfKGKEh6/3G2J1J78I16pCWpzod7K0NbGk0x5diLN
VBjJV6dkx/37XAzYbU+nmgFs4IcRvvMOqQCIjDzfH88hZJZfGibr6kPYhwR4XK9f
gONWNuu6IgbqR426l21/Mr6MHyXoq/mrbCBNPoNlk4CyWkeqWnWN6wwEsLwCEaKH
h9XehQXUihYbOvXo9W4+KNNJ7GPBH5ZOblrHRVkmgvX+1nu+8yES15dV2rylAi6h
vKJwlrAM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC4FWvmG01IfefSqgZWv
0ZToTBV107kicQF08ajRRFSV+N37DeziKOfV7oW9J67rGkrsak3QUIdP1FpCTe1/
MW0yTjYp14Wn4ETG+FtfOWRYHwTEXo6J3aD02SJlaBVDlNsdchVpmXpG+o3j8Wmq
7gNXfBQgWLzGitTAAh1/AsbB7d2wq9Av863WnEiNQZgW7uldjwJYfA2lGALBeFKK
/Vt4EhwVdssSSWF0HKqSYCKbKklABu8dKiDoXl7i70c+SqZEeQInO9qzfFytZW+V
ADNx3e5N7tISR0CHz5hCPlloPXEd6oUd98Hy2JVyFr4HSLPRZ07XWpG7zw+5NwZj
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394210275702146867104363302854052063283366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 10:54:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 10:54:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.susitk.io.aptabasiserve.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24260448314654342797070037769752016803858105132050199451162979697313803659739847522621280388507354685612689474565825419079699296260145538335544881312676906891321610425893236889007347081697487993777388521853316252797803456536090231587972764735821063660579613878432369017512682665104161047936305376336020824061756820331090269745215427398426486132950097245963733743159087604704905562766038569855731394574397579564049070015154954189711855737172384022011671038504195115105519383183029598519793087202981308144544304085672921139451228571409154898076616118654650727252035783027334975116049051040572383800347309394443284931411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							089226554c55dfa9e6b26f160facaab71ab59a26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susitk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susitk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susitk.io.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.susitk.io.aptabasiserve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c10a120b20000040300483046022100bbdd97f9cf6f2a51ea0cd92bc0098210c28630a5fce9eb451d377a8ff32aaded022100b8fb35205ce0dea81d660fcd303585d0587aeaa8d5829a69d1a8734abce6129d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c10a120bc000004030048304602210097c774794899ed4d5108f654d67049b5671bc797a79d3f9b1ed7b60d592f73cd0221009a6fb8a1997295d932a5c2ee28e89f3229428947de7e52456517e1546c76c1f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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