test.dynamictier.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:c3:9e:55:b8:10:27:78:0f:5e:2e:8c:c4:fa:ec:75:c5 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.dynamictier.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:c3:9e:55:b8:10:27:78:0f:5e:2e:8c:c4:fa:ec:75:c5
Serial Number (int): 311618387313328198855217512261537667773893
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:e8:12:cb:ed:2e:68:26:ba:57:81:80:0b:ac:84:25:eb:3e:de:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:0c:8b:f4:4a:ba:4b:a3:5c:2c:99:34:61:d5:00:bb:fb:8c:c1:73
Fingerprint (sha256): 45:dc:09:16:fb:a5:38:80:94:e0:63:0d:20:d0:ed:cb:70:de:64:94:5b:94:64:27:2a:15:ef:be:f0:3a:12:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate test.dynamictier.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.dynamictier.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autotest.dynamictier.com
autotestresult.dynamictier.com
confluence.dynamictier.com
demo.dynamictier.com
dev-download.dynamictier.com
devdoc.dynamictier.com
dtbms.com
dynamictier.com
elev8.mazars.cn
ibmgm.com
jenkins.dynamictier.com
jira.dynamictier.com
manual.dtbms.com
preview.dynamictier.com
sipkf.com
stats.dtbms.com
stdcfg.dynamictier.com
test.dynamictier.com
www.dtbms.com
www.dynamictier.com
www.ibmgm.com

Other certificates including the domain name dynamictier.com

(limited to 100 certificates)
test.dynamictier.com
test.dynamictier.com
testh5.dynamictier.com
test.dynamictier.com
confluence.dynamictier.com
test.dynamictier.com
test.dynamictier.com
test.dynamictier.com
test.dynamictier.com
test.dynamictier.com
jira.dynamictier.com
testh5.dynamictier.com

Certificate

The complete raw certificate details for test.dynamictier.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1b/m6Kue4Uh2AhwXwVU
n98nP8bwBh9lM4nNoS8klR3P5AvP38D8FZ851QtWxerpSkH/8xlmGsCkb7WgBLWD
mXe6aW3AzmR5BDCr+g40qBkFpoPR68Xrd72FDHtvAZXYXxWeYmENI4r2O5rNDKKv
sYmf4mhi6lXczaNuZGpxpuBBizG12M4+rZLgfwsz/ZYy7BtvV/HSNLlT+5++iJVU
rJTyXI3IvSLvVrSp0zJ5MMJcJ13pF+4dXLFrtzgmlDGfIOKTUt5WuiUfb1/GU+m2
LCSeQb4lUNVhmzsUxabED1j2AtWr4g82JbzJKQaGwNNbz1Lsbvz5QCAVPAiYDWkM
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311618387313328198855217512261537667773893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 14:59:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 14:59:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.dynamictier.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23144510352560275571413718489118263250499583596447006462635021188768774098026703874916063721465698583655734878474323049237143969140434922531441826217440896928906659847114623225121890197534612306671866381008059522685297893008487534738249720903368644077909983829770509622462671411962288322064255351686154801041246963263436269732013417657193898905018915203213393555694114577801218286888006473736104679345147038284363630196727863395361315543174873006243418254274403950968767649888160233633698027124253392532265848117860840420377761319656470645544077093010206022447168425612825009799358972049902678803246792227453001075767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4e812cbed2e6826ba5781800bac8425eb3ede49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (437 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotest.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotestresult.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-download.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdoc.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtbms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elev8.mazars.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibmgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.dtbms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipkf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.dtbms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdcfg.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtbms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynamictier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibmgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bc803508300000403004630440220603767ca04c4ab83770f4ada758b55739ebaa01020d9417e4050c113a9efb51b0220022772d1c1ca25f8ea0e49a308fe1a85f5e7a4273101a7c670df8c0f491bcfa4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bc8034f5f0000040300473045022100ee6a9aed9903ea4e47b7cc24cf5c7148915dd8d1fdefb48413c9ed03c6bb6b7d022063d642af18096b67d45bddf56659f21b18b9a8a4ab3ca32edc22a5648a92479e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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