www.digirad.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0b:6a:76:7e:a7:9a:eb:1d:31:dd:94:18:2b:01:9f:20:c4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.digirad.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:6a:76:7e:a7:9a:eb:1d:31:dd:94:18:2b:01:9f:20:c4
Serial Number (int): 352333763190616476003721888088735241674948
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:95:13:81:d4:b9:c7:29:fb:b2:d3:00:4a:e3:cf:86:fd:a0:f8:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:33:ab:9d:d5:e9:ed:0a:6d:2e:d7:60:d0:94:b0:6e:7b:dc:1c:41
Fingerprint (sha256): 1f:f2:b7:f6:4f:cc:ee:b5:f7:e1:31:58:82:dd:34:33:54:3a:c4:ac:ac:93:86:54:63:f7:4c:3e:ab:c2:51:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.digirad.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digirad.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digirad.com
www.digirad.com

Other certificates including the domain name digirad.com

(limited to 100 certificates)
digirad.com
www.digirad.com
support.digirad.com
www.digirad.com
www.digirad.com
digirad.com
digirad.com
digirad.com
digirad.com
www.digirad.com
helpdesk.digirad.com
helpdesk.digirad.com
digirad.com
digirad.com
servicedesk.digirad.com
digirad.com
digirad.com
support.digirad.com
webportal.dmshealthtechnologies.com
*.digirad.com
www.digirad.com
www.digirad.com
digirad.com
wvpn.digirad.com
*.digirad.com
support.digirad.com
helpdesk.digirad.com
wvpn.digirad.com
*.digirad.com
digiserv.digirad.com
digirad.com
www.digirad.com
digirad.com
helpdesk.digirad.com
*.digirad.com
digirad.com
www.digirad.com
digirad.com
webportal.dmshealthtechnologies.com
digirad.com
*.digirad.com
www.digirad.com
support.digirad.com
www.digirad.com
support.digirad.com
digirad.com
webportal.dmshealthtechnologies.com
dgkbox.digirad.com
www.digirad.com
www.digirad.com

Certificate

The complete raw certificate details for www.digirad.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs61Xz26g6Y81tO7UtPWE
R9tPw7xQsFJR/+2UizXEofezQNGTHcWnsGiYb1FLjEV4V5Shj9Aph4gJh7A3U19O
oi4RO9oOxAYCrIH/w1W96Bj1H68sb7T4Gpp2EPENHITXJ0XNJYl41KpTRwOIfrYS
nNG1eOD07zeMt6l8bMQAygdAc72WN9CAIFRD4NF5Tc398SSxU7UBglIEocWv7/tU
FzmUFlbtgJP/CHQLgxk0ZOlvEA8jUvXOOEbfw9zJpXx0uZE1l4escP0m+i5etpap
dHWdUhvjXHiGqO/uo1daC8HN602UL7iQZV380dnzOdVrOcHqo/VLoti2oarFoSJP
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352333763190616476003721888088735241674948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 21:23:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 21:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digirad.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22682135212451575112055180950479876355443846053050746662383367744881763371644041126168560003226434001971749199778935161531096979847419192262924654036163178020722650764396752782517960600763831334958333144089109920774971958700270320908934504348504219843437217086375995862516596150725077153318269339496377935397788084915091374221657297919445424210631886044903727546025507616156154286954994546539770039910418743412997579365321680505226370762698340752027985852731870375967562761541794042875350231284762461348973772684958096325577530221328427374622233081156897928250324894886080005745080860948319103741258436440058191040321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75951381d4b9c729fbb2d3004ae3cf86fda0f8a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digirad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digirad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c9760c54a0000040300473045022100f2157c50e145faed88eafd8a7224d38a87012eaf0380ccab7eb8325563655563022034cf1d307b6f561423672657f711cf791e6a93089a62a8df1d4e46c8ef8c516a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c9760c738000004030048304602210091df252da9e32041a3dea6477610485e2e74e11c922b5bf4177e53b4a574f7da022100cbfba8f3ef0d7266f5fceda90d3f7065d264436c5386b4cf6ca3384d14d5f901
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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