ammac-test.roostify.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:ec:a0:15:79:76:c6:6a:09:64:1c:a1:37:b9:d0:c4:16 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ammac-test.roostify.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:ec:a0:15:79:76:c6:6a:09:64:1c:a1:37:b9:d0:c4:16
Serial Number (int): 294318494029747406590907872031893414265878
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:06:51:97:68:bf:e2:92:b0:ad:38:1a:34:a1:c6:93:fa:c4:4e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:47:bb:f0:87:f8:69:d9:e1:31:fa:76:e0:81:d6:57:44:f8:24:3c
Fingerprint (sha256): 2d:6e:34:bd:5a:c6:b3:b3:f0:b9:e8:0d:42:80:34:0b:5b:0f:b7:1d:bb:25:1e:7f:d8:e3:6e:cf:52:0f:06:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ammac-test.roostify.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ammac-test.roostify.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ammac-test.roostify.com
rlttest.roostify.com
test-frame.roostify.com
test.roostify.com

Other certificates including the domain name roostify.com

(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
insights-dev.roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
books-lb8.airmason.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com

Certificate

The complete raw certificate details for ammac-test.roostify.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDaicYFWQS1BzIkNtvgA
Y0vxv+tCcE7ScbZ7fICe594Bxg2kEYel91ynbaXy62DnKkZGsmnZbgMnjpr5JCtm
H5pGFneYgnSFbwKKtChiApaSaCGPLFnXboJJVD+QbWn5a5NpRNuChuXN4LdTirBv
c1ujaMzu2vvyXq9Z82BebfsZT40lqFmftzhjQRL7/18nbqHkYWJW94aYEmRmwnTp
N6UiGmiWMFnDyidSKqK347W9P4ycOVwjITraa1GlYJfa+cFoja0BTOvMTk6JD6zN
qRwxfhz9CjyWpq53zZuGlVwBlbbv/+NnfVNNq4cVfa5OCL4zZTvphJOGQY7t8yUO
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294318494029747406590907872031893414265878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 21:26:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 21:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ammac-test.roostify.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23254789411740115836023523685928947798684204324778600790863066368057377342230182126723708757885071187885843652200122961646324479262334321638632274864303724912356478992390757684349790809918642761332591386992626618864750569220707010612395035065195105847012140114784792370777077318991572304952017793699182841250146828803894361049872157346558192751186354414035621567856062753029233332202603689666104584528166030689347265044197638014768091840358332440015422560939207033774556246144325770223713316380898301193339813958297494690512838805706997792090804264682956780942702836758972949667741182492565632439397240052878003211863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4006519768bfe292b0ad381a34a1c693fac44e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammac-test.roostify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlttest.roostify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-frame.roostify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.roostify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162f9c37e600000040300463044022045505d69da3955170e86d907c84faeefc017c1f1f02a11156561a66b743dad370220142907f94b2a23889dd7af794645205acf92b88ce784613cfda91f1dd0c7bad1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162f9c37e700000040300473045022039d2f72ede1c3ab00c66de68f7e1ba296f7dffc5efe0c719915787c20aed5cc5022100ab6f87c9cc9c27dd600e9e488dc75d88cf67afd9e8f09bdde28650a9b5d3ee87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000447a497f4cda31ddf906980859c23088707c11b2c078ecdad798825b15b48befcd9fd92834489e19ed8b09731d7b2d3f3dbd7caeb03fef4334d942466cdc7b9a91c94119f92b56bd80bc63e53cdbe4b0a72beb1f5244f4c0ee61dd60d4634bbc8cf244a23b02c0ce2fe9f72025532705960aad5ef6ce595845400e3a2f03f1c459cf6e3437e7b456c2bae805fa0583effa9175a834acebde5d11488c0b7c64aff2bd3c2b2a5bacbbabc493d9ac05707e9f7f20284c7172cb676f38c7aff4121023dd64949dc84ff18991e2d825bb75c9b80e08553ea96bc99a90502664b3658485c6bb325fe6488cbe92a77968bbddfcccf600e5591a609eebd5702ec3f1d5a