metabase.implystudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:8e:1b:2d:45:7b:ff:54:e6:a1:cf:b4:29:8a:2d:4a:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=metabase.implystudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:8e:1b:2d:45:7b:ff:54:e6:a1:cf:b4:29:8a:2d:4a:4d
Serial Number (int): 337068434737359268034073803262938951010893
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:89:55:89:d7:97:77:20:71:1f:ae:99:ba:b2:04:82:a4:a1:be:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:76:7b:72:c5:b3:f3:2f:da:96:59:96:7b:58:14:2b:ec:4c:a4:2b
Fingerprint (sha256): f3:94:42:fe:b8:25:0a:f6:5b:ab:49:45:a9:94:0d:4d:97:18:3b:80:c2:f9:b5:dc:7f:29:bb:3e:53:01:cd:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate metabase.implystudio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for metabase.implystudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

metabase.implystudio.com

Other certificates including the domain name implystudio.com

(limited to 100 certificates)
metabase.implystudio.com
recife.ftd.implystudio.com
registry.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
api.test.fretapp.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
api.staging.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
gitlab.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
api.test.fretapp.implystudio.com
api.staging.fretapp.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
recife.ftd.implystudio.com
ftd.implystudio.com
ftd.implystudio.com
api.test.fretapp.implystudio.com
recife.ftd.implystudio.com
metabase.implystudio.com
staging.ftd.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
metabase.implystudio.com
recife.ftd.implystudio.com

Certificate

The complete raw certificate details for metabase.implystudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337068434737359268034073803262938951010893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 23:00:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 23:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'metabase.implystudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755666572642434395434777263157273926838244732917204441929068957363226379580574937629462882703441028723503355498639534982841542891304357833553106322025440658960011303267127182184391825865537655864883280112780795935084809552075140084383350383412884850818347663622269103646367358886815792190807531613942390779530733575489140160129524814044678545725904618871956564374989622094481676040176260875061612763270358474615871586969863340379770687924321368264158431521328303798166570130645976357949567635494694219433797853945480275447223798040471051571296094769183708680604817677159967500405575965213041200813371054782664493480861293062703800146560664281583200756032349923365547481995151795947810206519791304575131178910459145618012420887526799043708934558792686382222985322887166294070048619629201125178415179832250003242342106633630351282924557238450457071465790510998616249714232921329234224658453963765703380655756090714859025845428648167087781434995407908672551701859423358823695117117491556399129804040820445822045950490986534190925977870949252058333478414198149144694002505543826734530827046085996196051968229217434603886618642702279840295913461031036587498072652140871886059486008952828900539786817129314402329478528895783382404051517867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e895589d7977720711fae99bab20482a4a1be88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabase.implystudio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fca8cb43f000004030048304602210091ca10ad174d336bb9531a0e161da57bb84e797f41d2f67a0abdca04ba06ca3a022100d32dc53bce96b40340516f17abeb6af741c41a58908bcf3896a8bf37d9cc7fad007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fca8cb4530000040300473045022044b7794b6a0ee9d899fe569dcd0f6e260e5d21c166474789dce406307d8bf00c022100a73eecd75a60b600e846c38bdc5960971b862d0bb23b359d7a5d53377b9798d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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