ams-134.collaboratory.avaya.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:8c:bc:c3:fd:23:95:88:49:64:03:ab:41:7d:2c:bd:ba was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ams-134.collaboratory.avaya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:8c:bc:c3:fd:23:95:88:49:64:03:ab:41:7d:2c:bd:ba
Serial Number (int): 327538709024287705198638209588922210368954
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:67:b9:8e:d8:b0:fb:4f:82:6b:ea:25:18:da:9e:59:b0:be:d7:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:68:96:90:17:b8:be:b0:58:27:5a:0b:32:7d:83:f6:1b:c4:fe:2d
Fingerprint (sha256): 08:98:f7:cd:8d:2c:ae:02:14:32:54:76:ba:1e:52:fc:b7:cd:af:1d:22:80:a5:c5:50:dc:b8:a1:b7:c1:34:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ams-134.collaboratory.avaya.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams-134.collaboratory.avaya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ams-134.collaboratory.avaya.com
breeze1-134.collaboratory.avaya.com
breeze2-134.collaboratory.avaya.com
dev-134.collaboratory.avaya.com
dev2-134.collaboratory.avaya.com
smgr-134.collaboratory.avaya.com

Other certificates including the domain name avaya.com

(limited to 100 certificates)
usmail.avaya.com
meetingsstgrecording.avaya.com
US-FEWEBEXT.avaya.com
www.avaya.com
conferencingcollab.avaya.com
yum.avaya.com
nasm02alpha.avaya.com
apacwebconf.avaya.com
bpo.avaya.com
PMTGUS2AESRDN01.avaya.com
www.avaya.com
ccaas-cc-messaging.experience.avaya.com
onexcesapac.avaya.com
eumail.avaya.com
usmail2.avaya.com
plsalgas01.edmz.avaya.com
plcenvmap03.avaya.com
xbp2-2.avaya.com
view.avaya.com
insideknowledge.avaya.com
xbp2-1.avaya.com
aiagateway.avaya.com
careers.avaya.com
sbc1-moon.bpo.avaya.com
license.experience.avaya.com
sales.avaya.com
ipo-gen.experience.avaya.com
downloads.avaya.com
ams-102.collaboratory.avaya.com
na-east.webmail.avaya.com
ALARMING.ESP.AVAYA.COM
esp.avaya.com
aads-cec-ext.experience.avaya.com
downloads.avaya.com
ams-186.collaboratory.avaya.com
meetingsstgrecording.avaya.com
ara-na1.avaya.com
lrnna2a.avaya.com
xbpt-2.avaya.com
xbp1-1.avaya.com
etsccsym2.hsc.avaya.com
earlyrenewals.avaya.com
gateway1.avaya.com
rfa.avaya.com
ccaas-poc-chat.experience.avaya.com
ag2.avaya.com
downloads.avaya.com
guest.cnp.avaya.com
exec-webconferencing.avaya.com
ca.status.clio.com
www4.avaya.com
guest-preview.cnp.avaya.com
sso.apps.avaya.com
app37.avaya.com
sip-trunk-1.collaboratory.avaya.com
breeze1-184.collaboratory.avaya.com
collaborate.avaya.com
meetingssip.avaya.com
documentviewer.avaya.com
allowlist.sterda.com
usmail.avaya.com
sbc1-moon.bpo.avaya.com
fax.avaya.com
espl.avaya.com
meetingshttpstunnel1.avaya.com
plds.avaya.com
yum.avaya.com
qpt.avaya.com
xbp3-1.avaya.com
viewcontracts.avaya.com
ams-199.collaboratory.avaya.com
itss.avaya.com
allowlist.sterda.com
ppwmrp02.avaya.com
aacalpha.avaya.com
emea.webmail.avaya.com
ca.status.clio.com
mysap.avaya.com
account.growthspace.com
espl.avaya.com
adi.avaya.com
portal-uat.experience.avaya.com
sancert2.avaya.com
avayasftp.avaya.com
pnp.avaya.com
www.avaya.com
*.bpo.avaya.com
atac.avaya.com
aura.avaya.com
alphaiview1.avaya.com
suitecrm.experience.avaya.com
eprocure.avaya.com
ca.status.clio.com
pleqcrecus1vdn.avaya.com
alphaconfportal.avaya.com
usmail.avaya.com
krs.avaya.com
allowlist.sterda.com
itss.avaya.com
ams-134.collaboratory.avaya.com

Certificate

The complete raw certificate details for ams-134.collaboratory.avaya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV9yldgYCdKFJb2SaI9x
uYC/jfVtJiO4dbjwfqdSjQ02ujGhl1cn8HOTWPc5QFGXZGQSrFstK/A3MvKucbQO
K2MdiV8M88z4KnPVpCG2HiveT6B6RefAkX57D5KSkG/VWJMIWZAve1cOHIZVuPMm
0+6u3LIgLQ8VeXaq9gj7I1d88kRkYaCT0rF4HH9ntZ6fZiwwVwaX46s3QaiV7U1m
DTk9oRogphVlM8zo+BnqBi7fMm9lmjDKg5deh7prHTQDk7/tqME7VW3AGARF2Caz
EvJkPCqyQkVpVzGEQDn6pF3fi+31cQ7d/gO4HNsE9LRSQFkY79J8hSJJT9EDGyFi
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327538709024287705198638209588922210368954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 21:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 21:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams-134.collaboratory.avaya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23401153383967863854194835519340289636475016591030243247789667328919320340318175367943012615664405269865479274781285152151766611905369348821754531189867445440782579056307481960390301677694245490424017610820896109071287112702777571866105648358108817988077855615902400004592857910193406080390690219760831867307875628623692817211260225471390955357411553541233307061891435393286010727792726041351876828440953330576296507547972666672552803450621556424899242803673329833998514952383698716745108759187197211194867530028568010540584791643216383133867644831400550987915485105876562292109347100624055947871986884124599302316573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7067b98ed8b0fb4f826bea2518da9e59b0bed7db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breeze1-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breeze2-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smgr-134.collaboratory.avaya.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e58215570000040300473045022100e5715dbdd48ef82bed0d6a9497677f3fcec26ed6fe9e66dba8c8a0eeeb43da6702207c668b2dad0e5db9f98a07ad83ccc48d898cc4cfb56406e01eb4948770e18a99007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e582157f0000040300473045022100f47a455451e357a745beb053251d4a3182b0f11f9a2d6cd0e0fd7791b5c4e5a502202f3578d394949402c5a42b10a67a3847477f418e5f0188b806e3824b80097c5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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