dechra.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0a:c6:c4:17:3d:0b:e7:80:1b:c8:38:04:64:a1:6a:7e:5c was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dechra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:c6:c4:17:3d:0b:e7:80:1b:c8:38:04:64:a1:6a:7e:5c
Serial Number (int): 265003886769171833742861899659761272127068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:02:9d:2e:92:8f:49:ee:ba:dc:ae:93:6e:76:86:a9:c7:32:4d:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:2c:42:e7:d8:58:dc:48:b9:60:cb:69:2d:7c:f4:43:2e:b3:e5:a9
Fingerprint (sha256): 08:d9:f7:cf:c0:dc:86:be:e3:65:88:ec:c4:8c:a2:a7:0e:de:08:af:e0:0f:99:80:8a:c2:84:f9:c5:34:7b:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dechra.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dechra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

br.hub.com.dvp.dechra.espresso4.dk
dechra.com
dechra.eu
dechrainternational.com
dechraplc.com
demo.br.hub.com.dvp.dechra.espresso4.dk
distribuidordechra.com
hub.com.dvp.dechra.espresso4.dk
www.dechra.com
www.dechra.eu
www.dechrainternational.com
www.dechraplc.com
www.distribuidordechra.com

Other certificates including the domain name dechra.com

(limited to 100 certificates)
webmail.dechra.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
USMS0006.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
dechra.com
www.highq.com
www.highq.com
www.highq.com
brand.dechra.com
www.highq.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
sip.dechra.com
www.highq.com
Projects.dechra.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ibercliente.dechra.com
www.highq.com
appletest.dechra.com
ibercliente.dechra.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
citrix.dechra.com
www.highq.com
sip.dechra.com
owncloud.dechra.com
dechra.com
www.highq.com
academy.dechra.com
www.highq.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
herd.dechra.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-us.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thrivefinancially.dechra.com

Certificate

The complete raw certificate details for dechra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDxVfa8tXLp2CiuncHwe
+/cKLqwTS6ads2IZ0Fqm52q3NtG7VNgrgOTURI+/S5xksQQB/QVha5W3H1yLYVFW
V4zxdpmKI2yIQvv//Gg2PZuRRESOjPZJmH9NQbKe5Cq6wONNTO40fY2rkjMjYNzf
D4PfbtkZEma1ndSrdVUyReMOFuJVXKf3aEHmOXsGq2eZbeZbXU2X8g+/k0NwSMQt
vG+pLoZHzkcHBJyvT0v6bSxoE/7cDEseg9Q8c6yV1onj78K2mb3GahadQ4b5pi9V
V0HSFnoNU+0HOuq/uNp8aKlCUS/+Et2k9tapJaqHx8BAw3W0aMc+Fr+ix+Jx7Gss
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265003886769171833742861899659761272127068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 09:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 09:28:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dechra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21237787013433469983877448861880552460288645252437676824395346345796777454041122973373311085290190769035602484913441783528086195769901943255851835027520489727035239233979099120999071834787492983103450974766192568442451610595752639655013954561771017229059923576621617381951141641219936597812686417339546062393959903767928955422871611838168375967022651200210198119695259560374348148567509231336294628183535600535171141017126578698228336139114866323155013071198466823241618492158969398869099071185708025852957499725485212394301904601494755843329272500786569270740287811304427227700696722874162374326753492192955097361439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d029d2e928f49eebadcae936e7686a9c7324d11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.hub.com.dvp.dechra.espresso4.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dechra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dechra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dechrainternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dechraplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.br.hub.com.dvp.dechra.espresso4.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribuidordechra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.com.dvp.dechra.espresso4.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dechra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dechra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dechrainternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dechraplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distribuidordechra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189018be05300000403004630440220235a6c3123dae997333a31b39e88dc724563dd90564c75f69283e24e573105ff022019f6c38f133d075613e5c508e7fc0639f6a649502b3819bd2cc6d819044fe3050075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189018be0610000040300463044022005b1c8779817956cd621f9e727c8e8a06b426f0f0bf46c0ed2297944fc68b00b0220561fd9824b8ee7493744b2c7ff6c7556bc9f99f65b4194070708fe8168e3d31d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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