bioverativ.io.indegene.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:66:a4:c2:61:68:ab:59:75:04:79:b2:5a:5a:c0:e8:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bioverativ.io.indegene.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:66:a4:c2:61:68:ab:59:75:04:79:b2:5a:5a:c0:e8:29
Serial Number (int): 434336736925877328972126751902531504367657
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:4d:ca:15:9a:71:a2:c1:db:87:90:cf:b0:e4:55:2d:e4:c9:60:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:48:c5:4b:ec:fd:19:ec:09:35:e1:31:9b:31:89:55:32:51:88:c8
Fingerprint (sha256): 1c:96:70:5c:7d:e4:c1:c1:1f:3e:a1:97:e2:5d:8a:03:7b:2b:0e:ee:6d:e4:01:bc:b3:21:e4:0d:f4:73:5d:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bioverativ.io.indegene.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bioverativ.io.indegene.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bioverativ.io.indegene.com

Other certificates including the domain name indegene.com

(limited to 100 certificates)
qxitdesk.qxites.com
support.alpha-serv.co.in
helpdesk.caltimes.com
servicedesk.gerkencompanies.com
cloudfront-cdn.indegene.com
c3helpdesk.c3insurance.com
www.omnipresence.indegene.com
qxitdesk.qxites.com
hcp-prod.na.indegene.com
helpdesk.pirim.com.tr
helpdesk.pirim.com.tr
servicedesk.carsoncorporation.net
omnipresence.indegene.com
www.omnipresence.indegene.com
emailin.indegene.com
sjvtechhelp.stjosephsvilla.net
dev.meeting.na01.io.indegene.com
sdp.tianjinjuilliard.edu.cn
bioverativ.io.indegene.com
bioverativ.io.indegene.com
omnipresence.indegene.com
helpdesk.rdek.bc.ca
bsmys.indegene.com
email.indegene.com
sdp.thinkme.in
gate.na.aptilon.com
qxitdesk.qxites.com
office365.indegene.com
informatique.aubainerie.com
dmsbit.northeastern.edu
esm.tradefy.com.br
c3helpdesk.c3insurance.com
novartis.io.indegene.com
servicedesk.cruxdigital.in
median.indegene.com
emailuswest.indegene.com
bsmys.indegene.com
bioverativ.io.indegene.com
it.helpdesk.indegene.com
helpdesk.valledelsol.com
askme.poruslabs.com
servicedesk.cruxdigital.in
novartis.io.indegene.com
bsmys.indegene.com
servicedesk.januscontinental.com
rep-training02.na.indegene.com
omnipresence.indegene.com
demo.iopilot.com
dev.meeting.na01.io.indegene.com
airflow.devcystine.us-east-1.indegene.io
helpdesk.pirim.com.tr
qxitdesk.qxites.com
sdp.tianjinjuilliard.edu.cn
wiki.indegene.com
www.omnipresence.indegene.com
helpdesk.pirim.com.tr
servicedesk.cruxdigital.in
novartis.io.indegene.com
*.indegene.com
rep-prod.na.indegene.com
omnipresence.indegene.com
helpdesk.sunteckindia.com
bioverativ.io.indegene.com
support.softobiz.com
event.indegene.com
entrypoint-qa.indegene.com
sdp.thinkme.in
askme.poruslabs.com
helpdesk.tamimi.com
sso-dev-na.indegene.com
helpdesk.itsmtest.co.in
demo.iopilot.com
email.indegene.com
wiki.indegene.com
support.softobiz.com
novartis.io.indegene.com
tag.indegene.com
sso-prod-na.indegene.com
qxitdesk.qxites.com
demo.iopilot.com
novartis.io.indegene.com
servicedesk.voyav.com
servicedesk.januscontinental.com
askme.poruslabs.com
prosource.indegene.com
wiki.indegene.com
*.indegene.com
wiki.indegene.com
devweb.indegene.com
askme.poruslabs.com
askme.poruslabs.com
www.omnipresence.indegene.com
sdpcloudtest.malabargroup.com
azmys.indegene.com
helpdesk.pirim.com.tr
askme.poruslabs.com
omnipresence.indegene.com
novartis.io.indegene.com
myit.indiabulls.com
wiki.indegene.com

Certificate

The complete raw certificate details for bioverativ.io.indegene.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4G5yw+HubJQkttja1n
FBXyblGDAqG9BVH/3nowshsoZHFeidaLy6wwcfZxZ0U6yY9l4ia4ww2l2TSDoRyF
ma6HkYJZz1biwE5es2OlxAedQYDiBKHLyC4FNm+6rEuQMRgp8qqxGGzqPEg7SZNQ
VFbDTHOPSYiMzeoGtuK6qjcTbzsElqrolt2urdSIxxUhfL2qRYbWUI0xgztQt0a9
IozOTW5mOyoZAdDhjmEYvwLSUcNRAkZZQhMRlWDrBbO5md4T2a1QrmVgRLf+XFHq
oVlz8Y4gPJlw4HqyDfWHYjglfNcMVNmIMGaxSCXrDLg3EtSrLXIlM3be6IODbu0+
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434336736925877328972126751902531504367657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 23:03:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 23:03:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bioverativ.io.indegene.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20512751617123301948781116946607911437219517751489760202020131697819945245812430329714634181355552782019071684260122112343921893218701710266654101397781415077145634275793409317647245379309546999652840451676697043246556225151726498502310698592774652328590781540020608273372093124611650058876671679354861449735828218778998524254077401476765233904211862064337365890717399957459218928683710591366849431095583605316047127274326487749875991070852813119755812542392001069338301863367433160676234165427105249946911244716404308403896762928281407596843809336150791526868349335116608001780818537270791897745241641462309946474011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad4dca159a71a2c1db8790cfb0e4552de4c96047
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioverativ.io.indegene.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165023ecbeb000004030046304402206774ccbce7c2985b70086b4bb2c2af903c0290f462fcc4d6856baf7beea5197f02204103ee30d9d1918aaea7f5d0458f0f3bd0c61bad12b87b98c052d11328a215fc007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165023ecd9e0000040300483046022100d445e6e959449eada95987c0f1d302298675759ea701feba1cfc097f761b1f7302210082a592e617ff314783ba966ae7a59fdbaa7438cb414a194b41c057985c8025b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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