support.communicationgenetics.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7e:ed:7b:08:14:8f:17:d1:1f:c6:ff:b0:9e:46:79:6b:b3 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.communicationgenetics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:ed:7b:08:14:8f:17:d1:1f:c6:ff:b0:9e:46:79:6b:b3
Serial Number (int): 391640387810481983057315047055589180533683
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:57:b7:e4:e0:71:9b:77:99:79:45:50:92:7c:6a:64:3b:b7:b4:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:68:7a:8b:d1:1d:a9:da:e8:94:a6:b8:ce:27:d3:48:ad:43:5b:c5
Fingerprint (sha256): 35:89:e2:b0:cf:cd:88:96:28:b2:73:77:71:5f:4d:9c:ac:4e:b4:6c:6b:97:8e:74:54:13:bc:47:d6:72:a5:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.communicationgenetics.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.communicationgenetics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.rjwgroup.com
soporte.geekcenter.pe
support.3sigmatrading.com
support.bowee.fr
support.communicationgenetics.com
support.exactus.net
support.ezfive.com
support.facilicaresolutions.com
support.hardwoodgames.com
support.laemmle.com
support.marksdiamonds.com
support.skillnet.co
support.triniti.net

Other certificates including the domain name communicationgenetics.com

(limited to 100 certificates)
service.visionmaxfleet.com
communicationgenetics.com
support.usairtours.co.uk
communicationgenetics.com
*.communicationgenetics.com
support.communicationgenetics.com
communicationgenetics.com
*.communicationgenetics.com
*.communicationgenetics.com
*.communicationgenetics.com
desk.gocloudforce.com
communicationgenetics.com
support.3ilogic.com
support.fieldsheer.com
desksupport.antivirus365.net
communicationgenetics.com
*.communicationgenetics.com
communicationgenetics.com
communicationgenetics.com
communicationgenetics.com
*.communicationgenetics.com
*.communicationgenetics.com
documentos.implex.com.mx
help.thgkc.com
communicationgenetics.com
*.communicationgenetics.com
communicationgenetics.com

Certificate

The complete raw certificate details for support.communicationgenetics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSX3nftZCOlrrg0Nz4kE
+SNnJ0jUH5qkNprH6ugt01zgEmgkKsYb90ppDpmNuv7NOyN0isFyBWUfMULyAdzp
jc5XHcPz8cnDmd2pXb6MLNfdnulsLKFdY1u0VBTN1C9lBt8iSYoDhPGkJWfqZaJS
pHyEfrpd3iJzeYWNyZksFLEk2Waa4YcnM7j7SxVrZxXU1KF6HFmvO2zUYceZ9hyz
/bn6WIyPh0OvQqHUh1P/P87hWk8W30OwjM+L6tHHKGPi5WQOi7Oxg3SsFZO+ZC4c
RUE5Lxgwz/tfUjMdfJ9jnmaZ/gbKF7IX25pt4hy9N4W0Sa3vKEHFg2iW661rI5ps
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391640387810481983057315047055589180533683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 21:00:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 21:00:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.communicationgenetics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22362902329909546616371027844555596720584634443701467740757497404094417738147846070884157266902238189048984403680388665060162401583307546633495095793672138447789414599487377658724832930007074723981527443176651366904907524977735281746926475462890835114188756317107709503056464384215194764102229998225337726897466197874266771547215907724716247072545763823636872618944075872641026809014587499313049120294040205245387425788747524162466230775354031739832963449870571907313271763666685442782771574392651544007983392218264050620614292474046014885745719658763208735972419133448487678742190306388235765650028341140514166959259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2957b7e4e0719b7799794550927c6a643bb7b4b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.rjwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.geekcenter.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.3sigmatrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bowee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.communicationgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exactus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ezfive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.facilicaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hardwoodgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.laemmle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.marksdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skillnet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.triniti.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe90554b4000004030046304402207c662b1f1ac3a2460b96eb470990bf0e74aac22d440af3a31621f2d0d3bd001402201817c1a64741ec75966ab4af0f22c9ea0e992a8cd077b0fc66a98691f987eb3100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe90554e10000040300473045022100ae68e089944b7837a17ea2c4f2403bb439a0b1e4d6fe9aa6041c1a20c87d8e1a0220526b3701d2a0098dc8aeac71bdd69e0843c1937eaf388a578dc77922a2147b29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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