uptickhr.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:3d:b7:44:f4:88:26:1a:c1:37:40:26:19:05:c5:93:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uptickhr.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:3d:b7:44:f4:88:26:1a:c1:37:40:26:19:05:c5:93:e6
Serial Number (int): 431219793385474685678455447798844920009702
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 88:a0:f5:48:0b:60:5f:fa:b6:37:7f:0c:76:38:7b:e3:a7:f8:90:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:b1:91:37:bd:51:d6:a9:80:25:83:f6:17:bd:28:51:7d:81:5a:b4
Fingerprint (sha256): 50:63:c6:8b:23:8d:28:28:76:27:c3:a4:8b:68:54:71:06:e0:30:1a:47:9e:00:5d:70:c8:75:80:e9:93:5a:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uptickhr.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uptickhr.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uptickhr.com
www.uptickhr.com

Other certificates including the domain name uptickhr.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for uptickhr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431219793385474685678455447798844920009702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 14:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 14:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uptickhr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671061626733532838867881852739002953007333592339803282195246090117665260675730752484193942515458024974885274932636499780119243755081913935536912267969224694091601823819393139353317197355633926653183142719259988113400428455173278645137742369338217551108046582672912322587200766140718655454124852808576479005547658588962917992534259556151128774519951139964996122942019076178533132425308987842651375047578269782474429660772824921876212450969877308493747805403241273189747316147106000689743995082081834583954145379143985480811795140027216305348985015186392607284052466774455430580951209889087268452003348273298808261586834542384082521131019397655403921119800233795002220642567141731543310757496880760283682021644120418047807823042824690226269715411345039298170922695432613420824630007165720438331174375737005558900659235827259461914600545248100983456701809415233849290022987027156622366407102161840033152214423927697426568745032299851822091992609961707215273564740635059623653521135938215661585174836681089903620516395438599576876616201090317635180628147804282261592885730689586933956521075071177831354759940841411602932947876605546329001025495800852937383761592446360989504794780408520390998994608542830193606772801268275687219956404999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88a0f5480b605ffab6377f0c76387be3a7f890e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptickhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptickhr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018af0f8c6c90000040300473045022059cf7b5e97a2d6a67dc08b05af69de86ddf3717454579cef626e0acf9115cb9d022100a5a5e8079e147c38bb8c378cc4eee1716151b8779a79d27601469e44158f83430076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af0f8c71f0000040300473045022075de262b293f7b807be27757ef968452e9903eef1ff42405cbd20cc1570c3946022100d0bf795335d5a9e7a40eac0e3a1fce44fbf1c9cf1854f6d18e0bd9c0b9d16870
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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