www.dotmac.ng

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:5a:21:a9:e0:a6:15:9b:f7:fd:28:7a:96:f4:6e:b7:37 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dotmac.ng

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:5a:21:a9:e0:a6:15:9b:f7:fd:28:7a:96:f4:6e:b7:37
Serial Number (int): 322707489151992369497093673039861350577975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:e4:b6:c4:de:82:9e:ee:c2:4d:65:d5:0b:48:17:95:1a:01:68:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:a7:6a:9d:41:e6:88:aa:da:80:25:3f:ca:b0:7d:cb:77:d2:62:d4
Fingerprint (sha256): 2e:af:58:37:b7:f6:07:d0:e1:8f:a1:e5:79:fd:1b:27:a6:14:d0:2b:27:32:f9:be:f3:82:2b:bd:a7:60:b3:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dotmac.ng

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dotmac.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dotmac.ng
fastnet.dotmac.ng
mail.dotmac.ng
nmec.dotmac.ng
www.dotmac.ng
www.fastnet.dotmac.ng
www.nmec.dotmac.ng

Other certificates including the domain name dotmac.ng

(limited to 100 certificates)
desk.nrroofs.com
my.blackwiredesigns.com
imperva.com
dotmac.ng
metropax.doit.dev.br
expense.360explore.com
help.simplesclique.com.br
support.wisdomtree.com.au
expense.broxelbroadband.com
selfcare.dotmac.ng
hrms.interbind.in
selfcare.dotmac.ng
atendimento.agenteverde.com.br
expense.rmgcreditservices.org
help.simplesclique.com.br
expense.rmgcardservices.org
imperva.com
employees.abmcu.com
*.dotmac.ng
expense.45z.net
atendimento.agenteverde.com.br
help.metaprisebanking.com
dotmac.ng
expense.rmgcreditservices.org
hr.wellforces.co.nz
expense.copymarklaw.com
help.simplesclique.com.br
expense.omnihp.co.uk
help.simplesclique.com.br
imperva.com
support.dotmac.ng
dotmac.ng
help.simplesclique.com.br
selfcare.dotmac.ng
hr.healingartsboutique.com
people.datatobiz.com
help.metaprisebanking.com
help.simplesclique.com.br
support.dotmac.ng
dotmac.ng
dotmac.ng
www.dotmac.ng
support.tabschool.in
expense.rmgcreditservices.org
expense.gupshup.io
books.koffice.in
support.wisdomtree.com.au
help.simplesclique.com.br
expense.keterna.com
people.lixo.in
expense.360explore.com
atendimento.agenteverde.com.br
support.tabschool.in
expense.360explore.com
expense.360explore.com
help.simplesclique.com.br
expense.rmgcreditservices.org
help.simplesclique.com.br
imperva.com
support.tabschool.in
dotmac.ng
metropax.doit.dev.br
help.simplesclique.com.br
expense.keterna.com
dotmac.ng
expense.broxelbroadband.com
soporte.bo.cl
dotmac.ng
hr.wecipr.com
support.asylum-serve.com
jitexpenses.shipblu.com
support.wisdomtree.com.au
dotmac.ng
atendimento.agenteverde.com.br
hr.healingartsboutique.com
books.detohome.com
expense.gupshup.io
jitexpenses.shipblu.com
expense.360explore.com
atendimento.agenteverde.com.br
expense.360explore.com
expenses.synkron-international.com
soporte.sanelmann.es
expense.thebynggroup.com
support.wisdomtree.com.au
support.dotmac.ng
atendimento.agenteverde.com.br
support.asylum-serve.com
imperva.com
help.simplesclique.com.br
tamil.awake.rkmm.org
*.dotmac.ng
help.simplesclique.com.br
selfcare.dotmac.ng
expense.360explore.com
depense.groupelna.com
rebates.tviewc.com
desk.nrroofs.com
expense.rmgmanagement.org
smarthome.ebn.host

Certificate

The complete raw certificate details for www.dotmac.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGvHlB1n91p8yNVAa/mr
Ml3jgMoWM+zw6IvlczyfcY712AUJesDmYbZ9ELG/38MTBqW26VF2TB87sGbe0rmO
ZrkOQ0vcBt8v5/AsOpvWnoy3o61kGM2+5uTIB1SJB+yRpNzDEDxD6Wy2BA5FzVnG
LJPw5L/UeRJTwV+y2p5TlOGTb7QWTRQnPHQQcpZ72i20XYVKraqqdRNCIgRGorzs
9wWZvz7hVGOXe26KTti27s8G82KoK2iu53LsobHcYHnJ+rdbQ//ZebCJY0yQ9mI1
zUdZnEFsK/0FN7G5/L592rBqSazuGLSWOaUaQi2ENqhUC+M3fqcPH5HWA/lmmf+e
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322707489151992369497093673039861350577975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 06:10:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 06:10:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dotmac.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20756230117926075151945469923252175162822846611055237926211740830327978898877850892984882841930977654751170172476748604722671487125320760040576453208127708565414062702176992312366502922738983120504333580211297924622167320689758676806801055950703399605455165295107931844333550106625168479933191228195053062144782439371872337171028715864176215910607605423018101731764061643489029998142992275779279986615702423364011876212399719169410551453004686482294194715930535375976595371446712861792204246148186755255261600505098343128206154944750096730303071436276181432972320103217103120686164882364014960146934886340381340835329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3e4b6c4de829eeec24d65d50b4817951a0168b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastnet.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmec.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastnet.dotmac.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmec.dotmac.ng'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164d046d129000004030048304602210086ec32b65ee9a20d90205178037df79869bcb70848488c0a50fa4bb0101fd86e022100d8c5b0356b61e4ea71b2e45df5d4e9641d5e98e3ec2c01824da00b01ab4035fd0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164d046d2460000040300473045022100db414e5e15c1d6fc0c3b08694f62060c3cbd12d7e1e61b17dd352857a25928be0220398910774ad084fcc3146e591cf9d40f1c35c593b1c67e8ca367e12f0d9cd109
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a55abc1a947179a8e9958cde0367c6673f990eb679267a5ca9fee3f3175ee0d8d0ecb560bd1ebb548f867598c31e16a0d6f489ef70aff9d03d52b065824ff4bfed541b68e892c458a2fff22897e9a841b999f1a3d6806283c2244ff9380e8f4d8a7e2aa3ae4a75a48964228943fd1e14897e8630d52146889ebb7594ec187c0e99823ed27088b2f0beccb6cfd35769c685a250249748cd270f944cc31a6e8dbbdc46e6128a49d7cd1158f50750aed50216afd6aee226f170b4d414c6b019a5cdfcde65de8b21c457444a6d6391f912a7801b524ed0c7e9956f28fff0cb1223b929a2e0ccb11d6c48f8d0c85a25b28d2cc20269a3465747925a9263e0e839075