Real evidence: tls-cert-api

Captured: 2026-08-07 · Source: kubectl/openssl on production cluster fintrix-production-k8s

subject=CN=api.fintrixspay.com.co
issuer=C=US, O=Let's Encrypt, CN=YR2
notBefore=Jul 26 13:52:10 2026 GMT
notAfter=Oct 24 13:52:09 2026 GMT
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:36:45:da:32:83:a8:98:7b:0c:e6:0e:ae:20:4a:7c:3b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=YR2
        Validity
            Not Before: Jul 26 13:52:10 2026 GMT
            Not After : Oct 24 13:52:09 2026 GMT
        Subject: CN=api.fintrixspay.com.co
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:7d:46:b2:e3:45:9e:2f:9a:e3:58:7f:7a:
                    85:17:ed:21:9a:e4:57:84:4f:03:50:1f:d5:91:0b:
                    f2:30:7d:5a:77:9a:1c:fa:5f:6b:71:ac:bf:c6:b8:
                    d4:3c:06:22:77:3d:dc:23:6f:42:a6:49:87:dc:71:
                    f9:9d:4a:69:f0:29:35:e7:7c:d5:9b:c2:ac:d3:66:
                    2e:2b:83:3c:47:a1:2d:48:40:e4:76:74:33:06:37:
                    72:14:9f:af:de:ab:54:51:68:03:99:ba:b7:63:a5:
                    91:f2:fd:36:99:50:c5:e7:ed:00:d9:8f:8c:e7:cf:
                    66:78:38:24:4f:05:a0:8e:db:d2:40:59:9e:fe:72:
                    df:1b:fe:07:e7:54:a0:70:78:94:b8:be:dc:59:bc:
                    2f:36:b5:3f:93:27:fd:f7:43:b5:9e:98:58:39:0e:
                    a5:88:2e:35:eb:2e:c2:90:e6:06:84:9b:11:e2:bc:
                    17:61:0c:d3:3e:b0:0b:cc:4e:54:fd:6d:52:ae:45:
                    df:83:67:f8:8c:09:3d:97:b1:23:a4:0c:e1:3b:17:
                    93:66:2b:69:c0:bd:c3:bf:a3:2f:03:de:a5:ea:7f:
                    be:22:34:f7:56:e1:12:6c:3f:64:cf:1a:a3:4e:18:
                    e7:7d:a8:0d:98:b2:c9:12:b1:a3:27:be:82:c1:6d:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                6B:66:8A:83:73:7E:3A:09:BE:36:DA:0D:C9:26:15:36:C8:CF:E3:10
            X509v3 Authority Key Identifier: 
                40:15:2D:26:79:ED:32:20:9E:DF:9A:72:1D:D6:32:1F:81:0C:81:0C
            Authority Information Access: 
                CA Issuers - URI:http://yr2.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:api.fintrixspay.com.co
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://yr2.c.lencr.org/60.crl

            CT Precertificate SCTs: