helpdesk.gapsi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:71:64:e1:52:16:63:26:e9:99:57:20:ad:dc:8a:b1:01:cb was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.gapsi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:64:e1:52:16:63:26:e9:99:57:20:ad:dc:8a:b1:01:cb
Serial Number (int): 299922857988649741367784098484483049718219
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:6a:71:5b:1e:c9:89:92:d9:3b:fe:34:f5:1f:91:9d:34:ce:4b:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:bf:6c:f6:f0:7a:13:ff:54:91:75:6c:5e:2b:b6:df:4a:d5:e7:f7
Fingerprint (sha256): 0e:8a:f3:60:55:76:04:d3:d2:e2:82:a6:7c:2c:6c:ff:62:42:7c:7c:81:57:15:99:ee:0e:3f:2e:8d:17:97:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.gapsi.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.gapsi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.asb.bh
helpdesk.datafied.com
helpdesk.gapsi.com
helpdesk.isda.org
helpdesk.proven-group.com
helpdesk.wafrainv.com
ishelpdesk.allenandgledhill.com
it-help.acquia.com
it.customindprod.com
ithelpdesk.starlightinvest.com
itservices.cpf.jo
itsupport.telradsol.com
otakhelpdesk.otak.com
sd.bmhc.bh
servicedesk.brandfinance.com
servicedesk.dh.health
servicedesk.nationalcorporatehousing.com
soporte.avansis.cl
suporte.agrocompetence.com
support.francescas.com
support.intellifi.ca
support.nakidan.com

Other certificates including the domain name gapsi.com

(limited to 100 certificates)
helpdesk.gapsi.com
helpdesk.gapsi.com
helpdesk.deistermachine.com
helpdesk.gapsi.com
help.mcesc.org
support.cityofwhittier.org
helpdesk.gapsi.com
help.mcesc.org
help.lafayetteco.gov
techsupport.maxsold.com
*.gapsi.com
help.mcesc.org
vpn.gapsi.com
vpn.gapsi.com
*.gapsi.com
support.sifco.com
*.gapsi.com
support.cityofwhittier.org
vpn.gapsi.com
helpdesk.gapsi.com
*.gapsi.com
support.cityofwhittier.org
*.gapsi.com
support.sifco.com
techsupport.maxsold.com
helpdesk.deistermachine.com
support.cityofwhittier.org
helpdesk.gapsi.com
helpdesk.gapsi.com
help.lafayetteco.gov
*.gapsi.com
servicedesk.brockandscott.com
servicedesk.brockandscott.com
*.gapsi.com
help.lafayetteco.gov
*.gapsi.com
*.gapsi.com
*.gapsi.com
time.gapsi.com
helpdesk.wafrainv.com
help.mcesc.org
help.lafayetteco.gov
servicedesk.brockandscott.com
helpdesk.gapsi.com
*.gapsi.com
techsupport.maxsold.com
*.gapsi.com
servicedesk.brockandscott.com
techsupport.maxsold.com
*.gapsi.com
gapvpn.gapsi.com
www.gapsi.com
helpdesk.wafrainv.com
vpn.gapsi.com

Certificate

The complete raw certificate details for helpdesk.gapsi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVwHEF2zo4fiNG7Ewb1y
qsdlS3A3hZBufKLLekaL5UNjGp+sRlB2KEzd3A52C8VFScdFGJ9xk0An+8fY2NkQ
1hgLM2o3HtyuVSwu0UB3jmZ0rWrWiYrUnTi8vy3VHi6dA3VJv3O8hQoaNRYIATRm
aRgxvtiJ4L8jqKdUI8L7+/+x43GbpPLtYU7IYbb4l+fhsA9W/za4JesCkY/m481T
8uXEx0kxIKvzHC6izPAJ4aUXR7R01nRnvE5bTrpJjzzS0Ds9EjW470ShYvg8gIOU
KIaZUf3RjwT8tI3QAci4nkJNwTgobFfbwFESiSLEnAGdFf94OonQ33LVC/X87Ket
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299922857988649741367784098484483049718219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 14:37:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 14:37:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.gapsi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19359841157504139750122544731325809471336516765721912991973994738145626542400980993408654949015433158873439042863350614505072283320117929342762635509049462296723690782106502469522831474126586120408619745099288442087507588467689406589077088708328136194294807000552780563064675296199310314880938188865231027444758128188202066558701942996055767291270563273876239696350418919860556684569642919286015772085834265149404949528810973699136940315452326086900550883934840464951691050985911487525591727312078681517852403267984183245123499739688791842208992561587248004191009487388070830212518881827894425535922554621937026837909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							506a715b1ec98992d93bfe34f51f919d34ce4b32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (529 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.asb.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.datafied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gapsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.isda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.proven-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wafrainv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishelpdesk.allenandgledhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-help.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.customindprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.starlightinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.cpf.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.telradsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakhelpdesk.otak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.bmhc.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.brandfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dh.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.nationalcorporatehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.avansis.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.agrocompetence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.francescas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.intellifi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nakidan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099a98fb0081c9ee26061040b8ef273771b3476e77c62738f80f048039add3233ef1d33d3efc4bc440eea8b8f97cd83e472aedcadc3c73e0ef6b506ce46f5182abbb5997bea808f4dba6eea83a066fd971624f5f0b1efd220b14b69051bd98a6cf38191ee8d1451f7b875edbd99640599e2224693a667c99391e358060ecc1fb6ee3f35f74471df52e9d8860adbbd4ce3be3aea396bbe4969cc7109e5038c98b3f9e40562d80989e18bb078d3489cef60bc77dce02b810f0c3b52259e924636cc17654d4ad60dbcf0ffac4f400bb0b107cfd57c091d3454fcc994e46bcc78c007a84c0213d1d4318bce634420dd2a721ba79c1fe76fe5705e79ce76cd04e302df