dsview-nsac1.nsa.arm.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:b2:fa:5a:0c:21:a2:92:9a:50:23:8d:40:9b:07:6c:79 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dsview-nsac1.nsa.arm.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:b2:fa:5a:0c:21:a2:92:9a:50:23:8d:40:9b:07:6c:79
Serial Number (int): 348346763843962408677756705547855759633529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:2f:7f:bd:6b:b6:a9:eb:da:99:cf:40:03:77:7f:86:eb:47:96:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:d4:3a:0b:84:7a:d2:e5:c5:41:3d:c8:06:fa:e5:b6:b0:1b:dd:d1
Fingerprint (sha256): 04:03:7b:5e:49:0d:df:80:56:54:be:2b:67:6c:92:c6:05:3d:6c:d2:4b:4b:0c:d1:57:fa:4d:29:6f:36:a1:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dsview-nsac1.nsa.arm.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsview-nsac1.nsa.arm.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsview-nsac1.nsa.arm.gov
web-nsac1.nsa.arm.gov

Other certificates including the domain name arm.gov

(limited to 100 certificates)
iop.archive.arm.gov
www.arm.gov
yum.arm.gov
dev-armflow.arm.gov
opsweb-sgpc1.sgp.arm.gov
dqwiki.arm.gov
devoss.arm.gov
devoss.arm.gov
dsview-nsac1.nsa.arm.gov
cmdb.arm.gov
plot.dmf.arm.gov
cmdb.arm.gov
dq-amfc1.amf.arm.gov
prod-web4.adc.arm.gov
adams.arm.gov
www.dmf.arm.gov
rainier.arm.gov
access-enac1.ena.arm.gov
dq-amfc1.amf.arm.gov
ldap-nsac1.nsa.arm.gov
wiki.arm.gov
app0.arm.gov
rainier.arm.gov
www.ops.sgp.arm.gov
adcmonitor.ornl.gov
dev.www.db.arm.gov
dev-web3.adc.arm.gov
ecr.arm.gov
dev.arm.gov
www.arm.gov
dis.arm.gov
www.arm.gov
adcmonitor.ornl.gov
dq.arm.gov
i.arm.gov
dev.arm.gov
dq.arm.gov
iop.archive.arm.gov
kiosk.arm.gov
dsview.arm.gov
campaign.arm.gov
iop.archive.arm.gov
cmdb.arm.gov
www.xdc.arm.gov
dq-api.arm.gov
adc.arm.gov
pcm.arm.gov
opsweb-sgpc1.sgp.arm.gov
adc.arm.gov
dqwiki.arm.gov
adfsproxy.arm.gov
www.dmf.arm.gov
jenkins.adc.arm.gov
discourse.arm.gov
kiosk.arm.gov
www.xdc.arm.gov
armsso.ornl.gov
*.archive.arm.gov
web-amfc1.amf.arm.gov
dq-api.arm.gov
radar.arm.gov
access-amfc1.amf.arm.gov
engineering.arm.gov
adfsproxy.arm.gov
pcm.arm.gov
dsview-sgpc1.sgp.arm.gov
yum.arm.gov
oss.arm.gov
armsso.ornl.gov
campaign.arm.gov
warno.arm.gov
www.arm.gov
grafana.svcs.arm.gov
keycloakx.svcs.arm.gov
adc.arm.gov
access-amfc3.amf.arm.gov
wiki.arm.gov
wiki.arm.gov
armsso.ornl.gov
prodweb7.arm.gov
www.arm.gov
dq-amfc1.amf.arm.gov
www.arm.gov
prodweb7.arm.gov
pearl.dmf.arm.gov
www.arm.gov
code.arm.gov
www.archive.arm.gov
access.vsn.arm.gov
task.arm.gov
bcr.arm.gov
www.arm.gov
access-nsac1.nsa.arm.gov
opsweb-sgpc1.sgp.arm.gov
ecr.arm.gov
www.arm.gov
iop.archive.arm.gov
plot.dmf.arm.gov
www.db.arm.gov
opsweb-sgpc1.sgp.arm.gov

Certificate

The complete raw certificate details for dsview-nsac1.nsa.arm.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HRg+RQXNuVZr6nmVwJz
jcJvP5cAwbbeDepWsaWSLU7+GsUOqKNA4PYE5NeJixYjMloMTkPt5MIvVh1dyIU4
U5uLmiY7Ckcij7menWOHHnDuUcVIoQS7fhuH3D4xdjdsjVqHzH+sY85MWgbs8rII
APtINWMoKKoe0TfQDA1ufkQwSk6YNuGjS4H91BPhUDhk4QEiJw8j4OTQTYpU5ChI
Hq/IugXQZxNRy+6Yu6+w0num/roMyIz404ekld9TrTQxZkEj3n3KWnDuJdx6YIav
D4qOcWe+xEygCOQzkITP+B3Pzt5VniPSVrDTscf07+8UkjqT2GqFghPu+sNSaD9X
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348346763843962408677756705547855759633529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 19:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 19:07:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsview-nsac1.nsa.arm.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28334768837890366875827301408184373883075983605736018311910424206198618812380059881163564957856574922406708057290503043920144605672889717302310438237356743181584057796602363506680269730967057605642721241473109672324048965729167784440063780489160529032612608614624602243927442606346911907343482767215901792760837801176198681506872985638898893221033218464086028739354910596953830394878576241082714631183588733698166555748195875010086003716748813220923364725388182905339559184954606267061080449009351141718689208714127944792408854871284639796962480259563889367441173384287880626464490080369802712024318881768187984041937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a2f7fbd6bb6a9ebda99cf4003777f86eb4796c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsview-nsac1.nsa.arm.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-nsac1.nsa.arm.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d4b2368c50000040300483046022100a04666a9c620c7a5176c23a69664d4de0ea17af782bd22f364df38868e6ed2e1022100a2f3e51b95654a9b53fe550e73f15d28c5a0d6d68fdce6593fd74f168f32061400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4b2368e40000040300473045022024d65bf100e9150241b9b66c39adde507db8ace91c0f946c995594d95e962bc1022100fa1b40f0b713621b2ed172dfbea2b1967fe048ad3cdf34960ca9eb231a08a22f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045b2a97506bc49668c6a0fd300082996aa6ee2b82939839ed4bcf2a90d5f28126a33b93003253ec499ee193c1bc05952a321f5acc5b7de3f3923827fbd425cecd0f968305367604b31a5f9284d090970b88d11761f8dea86f651b99f9f7c5bbc162feea1f7243a7696d04ca9a91ae0965aaba7b9992a1f0f12bca794f52efc00aaef0e0de783c8178ef33c2db2cf441f37a264d2d4fdbf39a00d31b7d7d0352b6a7566d68e24d2376c3ce2abe317fbb0db2d5299ac441064b8f6d4f57d6b040783c79608d7f61d6742700ea2ca09855c8c42ef8483205d8690f006c4481a10067ce86a840ac4671026abf975c711dec169625fdafe7f8c1feb214c52146b6b3b