traefik-staging.affect-tag.com

Issued by R3

About this certificate

This digital certificate with serial number 04:af:74:b8:06:4f:5b:02:fa:d0:d0:47:5a:cd:5a:bb:1a:8a was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=traefik-staging.affect-tag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:af:74:b8:06:4f:5b:02:fa:d0:d0:47:5a:cd:5a:bb:1a:8a
Serial Number (int): 408153703896319887540852483933957128919690
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:91:5a:b8:a8:37:cc:ca:60:f7:e3:a0:21:1e:46:f9:e8:b7:32:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:0a:ae:25:61:c0:4c:85:6a:c1:6a:30:a1:c4:f4:45:29:06:c6:3d
Fingerprint (sha256): e5:c8:7c:96:9a:b4:8b:8e:56:e3:d4:9c:76:33:46:fb:85:b9:0c:b8:7b:cf:57:04:f0:bb:13:ce:76:3b:3d:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate traefik-staging.affect-tag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traefik-staging.affect-tag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

traefik-staging.affect-tag.com

Other certificates including the domain name affect-tag.com

(limited to 100 certificates)
support.ovvdistributie.nl
support.ovvdistributie.nl
cloud-staging.affect-tag.com
cloud.affect-tag.com
helpdesk.jotronics.nl
helpdesk.velocate.com
affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com
support.ovvdistributie.nl
api-staging.affect-tag.com
support.ovvdistributie.nl
support.ovvdistributie.nl
support.affect-tag.com
radioplayeritalia.xdevel.com
support.bigmarketplace.eu
api-doc-staging.affect-tag.com
support.ovvdistributie.nl
cloud.affect-tag.com
cloud.affect-tag.com
affect-tag.io
affect-tag.com
client.trakeen.com
help.cxinsights.io
traefik-staging.affect-tag.com
affect-tag.com
cloud.affect-tag.com
support.ovvdistributie.nl
affect-tag.com
affect-tag.com

Certificate

The complete raw certificate details for traefik-staging.affect-tag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISBK90uAZPWwL60NBHWs1auxqKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDIxOTA4MDRaFw0yNDA3MDExOTA4MDNaMCkxJzAlBgNVBAMT
HnRyYWVmaWstc3RhZ2luZy5hZmZlY3QtdGFnLmNvbTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAO5zFljnm8zmaOIsaKwQOCQa1w3ujRxYcsyXOqoYO8yF
col0TMqLkO7I3/RnJAqPRzgcCg+GsCOKljF9vsNrXVw+62XGIF6NsVDKPyGre28c
n/DXIiSynnR4bGbw7GYwe5YE7852tTDpZZbDIx5Lv/C47qABJ9xL6tiw9UfJNRTB
rkyp7GIeAhVZTzJJJF1owm8g2QyZVUhvuiqstdPVJzl0WLrDssrVlu740aSc8qI8
5WyyaI+Ufp37y2pbh9bdsGHsDj4swlAzk90LQ1jt5NjkKyXnscQy3/4aE4YoD6hF
3FU4mLflnW5U6ycwHivcaDzDQak4tCRprL9vwbFuoyvkotxX+6Pj538vweN8Ziz1
sIkS9bmsovt7EV9twcDWhvAb4srXOE/9nsmztSb6GetNI6w0TIJIl1S9E9DlYNrn
R8NHvNxO21g38m/NVXRHt/q3cc9QSXuTVABp0pX276Mw6iCYCZFeoYmOto7jGm2T
0HQ0julvXdgV+r3VW+Ka6JkSP1wMmxiY0kL/YouUA5e6EEIJI09UNIPUy53Xbmhp
2NtjEL9Cm7hTpAAA6xmHDXfSCZAADbWeFPCozRuxD20xE/YDnxhjTW/ean0B0a6i
x86MxKgYQKgnozIhncIZQAgDGjVJg+BdfszOcWTLx9wXTLDi8rkTFFN58Zfyfdk3
AgMBAAGjggEtMIIBKTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDeRWrioN8zKYPfj
oCEeRvnotzJOMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG
AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG
CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCHnRy
YWVmaWstc3RhZ2luZy5hZmZlY3QtdGFnLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMXLNJlz
oheZAWIewLanb0OudS8bnOwvHxw37D4IAzPc6RY8jiLuxEJWLfYFBQnOTmSErRTx
qBflSz2Q+XObWWWHonnEuGO6nuXt2JBuRFyb3WXBHLtyn553Me1eIfze5tpr6sBB
2or/IB3gSwAV/S5L5cRvlJqxOQhc10O+5bvxnkd1Tl2/fTmI9YqNgSavBfYgz/o8
kh//HtbAJAG/cfncwbszVtifebEJpPBSnJwgqOQEGgV+MnSFOcy69p89iE0GRvIW
Qms6ZntiK2RwKEGzmezV1dNcF/GVu67PSzq+dJC7jaVmmxBxd3w5ReEzyPY5B2mR
MZWRFHGCM7cjxg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408153703896319887540852483933957128919690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 19:08:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 19:08:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traefik-staging.affect-tag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972789331925475273756585495958096087105851819895530436044323482976269487654040760565123052519365020536978520526788625765155601220744145182331656235347172405615991427227186755549326246447675295558912146624838374472192324251074107181743166649125938227453665300156033077109145327946247028371922234817625591762492543542796001954523663084794730415819328895841153071001786194865826287776129826582876339384964337187450880820977847412590830212480242367835287883411091909260914821383144738534370147598035871015883659844186973360262536461343937770114568778642114594334951058676229022862601810627165608313016396445700712952614121804256381913834376963567264257990118524917772646475635937645143060366460527574754601533239734670182218821457216185390418563276043899523832822759728026222817775164815283928773103782017243848374226267866625440016939453586465125249853770243532396429542956378598152119291648995185865435278806907216957244139526304429531206927042120417034419487798989975246465987673237681154717784949983032489968684215953316635282615818076878168959568289260018139794777574662790245667170612714146218822803491197424281750162469568341528434467627699293386948096442442345058329656011299027717326400938756795122753860656972852461321366395191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37915ab8a837ccca60f7e3a0211e46f9e8b7324e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traefik-staging.affect-tag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060c5cb349973a2179901621ec0b6a76f43ae752f1b9cec2f1f1c37ec3e080333dce9163c8e22eec442562df6050509ce4e6484ad14f1a817e54b3d90f9739b596587a279c4b863ba9ee5edd8906e445c9bdd65c11cbb729f9e7731ed5e21fcdee6da6beac041da8aff201de04b0015fd2e4be5c46f949ab139085cd743bee5bbf19e47754e5dbf7d3988f58a8d8126af05f620cffa3c921fff1ed6c02401bf71f9dcc1bb3356d89f79b109a4f0529c9c20a8e4041a057e32748539ccbaf69f3d884d0646f216426b3a667b622b64702841b399ecd5d5d35c17f195bbaecf4b3abe7490bb8da5669b1071777c3945e133c8f63907699131959114718233b723c6