ams-186.collaboratory.avaya.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:66:c9:31:65:28:ab:2d:6f:64:20:c6:b6:27:e8:c8:77 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ams-186.collaboratory.avaya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:66:c9:31:65:28:ab:2d:6f:64:20:c6:b6:27:e8:c8:77
Serial Number (int): 341780122297713545570759480892511668979831
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:86:b8:d6:a7:7e:8a:f3:15:8b:c9:54:2d:1a:49:97:18:4c:ed:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:a7:b7:ee:f5:76:d4:db:7f:8c:11:9c:7c:4e:ff:10:44:94:f0:96
Fingerprint (sha256): 02:b4:78:f0:60:71:bf:d7:a0:a7:47:4c:dc:7e:7f:16:db:73:5b:27:e4:f3:fa:f2:46:0b:62:4b:76:3d:7d:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ams-186.collaboratory.avaya.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams-186.collaboratory.avaya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ams-186.collaboratory.avaya.com
breeze1-186.collaboratory.avaya.com
breeze2-186.collaboratory.avaya.com
dev-186.collaboratory.avaya.com
dev2-186.collaboratory.avaya.com
smgr-186.collaboratory.avaya.com

Other certificates including the domain name avaya.com

(limited to 100 certificates)
usmail.avaya.com
meetingsstgrecording.avaya.com
US-FEWEBEXT.avaya.com
www.avaya.com
conferencingcollab.avaya.com
yum.avaya.com
nasm02alpha.avaya.com
apacwebconf.avaya.com
bpo.avaya.com
PMTGUS2AESRDN01.avaya.com
www.avaya.com
ccaas-cc-messaging.experience.avaya.com
onexcesapac.avaya.com
eumail.avaya.com
usmail2.avaya.com
plsalgas01.edmz.avaya.com
plcenvmap03.avaya.com
xbp2-2.avaya.com
view.avaya.com
insideknowledge.avaya.com
xbp2-1.avaya.com
aiagateway.avaya.com
careers.avaya.com
sbc1-moon.bpo.avaya.com
license.experience.avaya.com
sales.avaya.com
ipo-gen.experience.avaya.com
downloads.avaya.com
ams-102.collaboratory.avaya.com
na-east.webmail.avaya.com
ALARMING.ESP.AVAYA.COM
esp.avaya.com
aads-cec-ext.experience.avaya.com
downloads.avaya.com
ams-186.collaboratory.avaya.com
meetingsstgrecording.avaya.com
ara-na1.avaya.com
lrnna2a.avaya.com
xbpt-2.avaya.com
xbp1-1.avaya.com
etsccsym2.hsc.avaya.com
earlyrenewals.avaya.com
gateway1.avaya.com
rfa.avaya.com
ccaas-poc-chat.experience.avaya.com
ag2.avaya.com
downloads.avaya.com
guest.cnp.avaya.com
exec-webconferencing.avaya.com
ca.status.clio.com
www4.avaya.com
guest-preview.cnp.avaya.com
sso.apps.avaya.com
app37.avaya.com
sip-trunk-1.collaboratory.avaya.com
breeze1-184.collaboratory.avaya.com
collaborate.avaya.com
meetingssip.avaya.com
documentviewer.avaya.com
allowlist.sterda.com
usmail.avaya.com
sbc1-moon.bpo.avaya.com
fax.avaya.com
espl.avaya.com
meetingshttpstunnel1.avaya.com
plds.avaya.com
yum.avaya.com
qpt.avaya.com
xbp3-1.avaya.com
viewcontracts.avaya.com
ams-199.collaboratory.avaya.com
itss.avaya.com
allowlist.sterda.com
ppwmrp02.avaya.com
aacalpha.avaya.com
emea.webmail.avaya.com
ca.status.clio.com
mysap.avaya.com
account.growthspace.com
espl.avaya.com
adi.avaya.com
portal-uat.experience.avaya.com
sancert2.avaya.com
avayasftp.avaya.com
pnp.avaya.com
www.avaya.com
*.bpo.avaya.com
atac.avaya.com
aura.avaya.com
alphaiview1.avaya.com
suitecrm.experience.avaya.com
eprocure.avaya.com
ca.status.clio.com
pleqcrecus1vdn.avaya.com
alphaconfportal.avaya.com
usmail.avaya.com
krs.avaya.com
allowlist.sterda.com
itss.avaya.com
ams-134.collaboratory.avaya.com

Certificate

The complete raw certificate details for ams-186.collaboratory.avaya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbY9XRsCxL51k0hhfW8I
WBt3UBlbHkCG9P849rnXUlTepC4NS7cVn8FCqgHQ1XbCuktWHNcEbr0mvM2NVHrX
CFlz1X5kDaxUzwTKyAi6g+XwqU7JMmgTcnAe9FPek/0Gkwp0ZhEFOB7pik/9H8ax
bhhdNqet66GmuUNRinKKPEfygu1Q7YUAVTIcvJ2h3WdLW5iyDrFZb3PkSFNCtDjv
lPp6EiH7lX1OEEAKDPt7+UQbchjKLTW+GNTpcRBHJMnXZCxJUT4Wy26wwqRL7bYa
kjGhHsg7rFtRMM9JfA2eKvwUoORJuLEKzb3r8veTqUIEqGxQp8mBm4KKB84cLd8d
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341780122297713545570759480892511668979831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 19:46:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 19:46:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams-186.collaboratory.avaya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24453858604811926545518771681718693396782869174867012094983845033746356886460017717280536002773937127113010502911731368366527751859594570865824914997719708987825279616662626991728317497702350603504318096408954987319569930459753683634716652654841650253434276228624947523081830800309772025862578503171434117854761464045814053131766991512310133558620920359813432999690571423659830200623113543618080547756986039916871121169463890931858831246153950931605801000407427678639036039553246732829429275763974910934643826017302834610078106836531796794703983129799140447926547076470156743762132875173173773355487111506464283237717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8086b8d6a77e8af3158bc9542d1a4997184cedb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breeze1-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breeze2-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smgr-186.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017021670da80000040300473045022100ef09bc255deac6ba1064bdfd38e38addb3e2633caed4446fdd7c3950a820e468022076b70cfbd072f71a0e9c2ed313363dfebbe55f6d42d9dcc04f3875cd186f6ea6007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017021670d8c000004030047304502207726da4ddda549cc659640c03c9f0a931f6547e81eb1d59a67e45c205da4e838022100eaa390bae1431de4bb42dd32074dcc9ab0a1f1087fe6cf3b2dec59b036ad75eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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