assist.diavicom.com

Issued by R3

About this certificate

This digital certificate with serial number 03:69:15:8d:60:3e:ed:45:c8:49:7c:23:bc:13:3e:0e:ec:ab was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assist.diavicom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:15:8d:60:3e:ed:45:c8:49:7c:23:bc:13:3e:0e:ec:ab
Serial Number (int): 297095154175844715583035450948004191595691
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:df:f6:2c:c3:05:6f:f4:5c:f5:50:61:ee:3e:41:0e:3b:ac:9c:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:0d:bb:b9:5e:83:43:ee:7a:c2:52:0b:b3:28:a8:4b:87:cd:19:40
Fingerprint (sha256): 37:7d:18:72:2b:be:21:93:c1:b5:21:a7:e9:03:78:95:d6:cb:93:dd:7e:1e:68:d8:9c:ac:60:ac:80:54:7d:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assist.diavicom.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assist.diavicom.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assist.barrowbc.gov.uk
assist.diavicom.com
assist.digital-startklar.de
assist.hanspunt.com
assist.littleit.net
assist.mgi.digital
assist.monitorsanywhere.com
assist.ohhdeer.com
assist.okam.ch
assist.orandke.com
assist.tutis3.com
assist.updateyou.fr
assist.voramedic.de
join.themoneygeeks.co.uk
remote.velocity-eu.com
remotesupport.icecostorelogs.co.uk
support.carewatch.co.uk
support.dempseydyer.co.uk

Other certificates including the domain name diavicom.com

(limited to 100 certificates)
assistance.essentielweb.com
assist.werbas.com
assist.diavicom.com
assist.mgi.digital
assist.mgi.digital
assist.oneeightyone.com
portal.webdesigntilburg.nl
diavicom.com
books.woonzorgdoetinchem.nl
assist.oneeightyone.com
help.mensinga.it
60gp.ovh.net
helpdesk.ictzaak.nl
servicedesk.netordre.dk
60gp.ovh.net
assist.abctelephonie.com
diavicom.com
assist.werbas.com
assist.oneeightyone.com
support.exsto.be
assist.oneeightyone.com
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
diavicom.com
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
assist.bool.ie
diavicom.com
assist.oneeightyone.com
support.ticketselect.io
asistencia.okadrive.com
support.exsto.be
assistance.essentielweb.com
console.diavicom.com
help.mensinga.it
60gp.ovh.net
asistencia.tuchoconsultoria.com
support.citylegalservices.co.uk
diavicom.com
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
diavicom.com
support.topsys.fr
assist.mgi.digital
diavicom.com
diavicom.com
assist.nichecrm.builders
diavicom.com
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
support.ticketselect.io
assist.baeumlin-management.ch
console.diavicom.com
help.mensinga.it
desk.houseandpeople.pt
support.ticketselect.io
join.byzz.plus
60gp.ovh.net
asistencia.tuchoconsultoria.com
console.diavicom.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
support.britishschool.ro
supporto.webeasytech.com
assist.abctelephonie.com
assist.oneeightyone.com
projecten.rgjb.nl
assist.oneeightyone.com
assist.nichecrm.builders
diavicom.com
assist.mgi.digital
assist.oneeightyone.com
support.xeranet.eu
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
console.diavicom.com
support.cloudants.nl
hilfe.skycom.gmbh
projects.spektrum.consulting
support.ukictltd.com
60gp.ovh.net
support.contextprime.com
projects.surmount.group
support.ticketselect.io
assistance.essentielweb.com

Certificate

The complete raw certificate details for assist.diavicom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6mOYcuqSn7bCxw2NgemcIQg1mjLA
wPf09hDyssGH76jTgjvkzbUVWxudWUW38WfG8aOUdpO9Nw8SU+0Xj5wPrA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297095154175844715583035450948004191595691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 13:27:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 13:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assist.diavicom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ea639872ea929fb6c2c70d8d81e99c2108359a32c0c0f7f4f610f2b2c187efa8d3823be4cdb5155b1b9d5945b7f167c6f1a3947693bd370f1253ed178f9c0fac
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97dff62cc3056ff45cf55061ee3e410e3bac9c14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.barrowbc.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.diavicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.digital-startklar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.hanspunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.littleit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.mgi.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.monitorsanywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.ohhdeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.okam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.orandke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.tutis3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.updateyou.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.voramedic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.themoneygeeks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.velocity-eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesupport.icecostorelogs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.carewatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dempseydyer.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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