helpdesk.jaffelaw.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e2:37:e2:03:b3:82:90:ef:19:f6:4a:f7:87:9d:ca:3b:0a was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.jaffelaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e2:37:e2:03:b3:82:90:ef:19:f6:4a:f7:87:9d:ca:3b:0a
Serial Number (int): 425427239725100756739999648913948978854666
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b4:65:85:05:6e:59:7e:3b:8b:d8:a7:94:e5:c3:16:89:24:2c:6b:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:eb:86:39:16:4f:4f:77:aa:93:28:3a:36:f7:63:19:ba:c0:67:ce
Fingerprint (sha256): 5b:16:2b:86:97:ac:cb:1b:3e:4e:ee:b3:84:f3:2f:8e:3b:bc:d1:8e:c3:bc:fc:a0:88:a9:d5:77:32:47:6e:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.jaffelaw.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.jaffelaw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

911.finsa.net
help.mccfc.com
helpdesk.baja.com.sa
helpdesk.gcwengineering.com
helpdesk.gffg.com
helpdesk.jaffelaw.com
helpdesk.lantech.com
helpdesk.ukrainianfcu.org
ithelpdesk.jet-insure.com
itservicedesk.airselangor.com
itss.rdthailand.com
service.quantainvest.com.au
servicedesk.odva.oregon.gov
sostic.grupoquimico.com

Other certificates including the domain name jaffelaw.com

(limited to 100 certificates)
connect.jaffelaw.com
bighand.jaffelaw.com
helpdesk.jaffelaw.com
mail.jaffelaw.com
connect.jaffelaw.com
www.jaffelaw.com
extranet.jaffelaw.com
jaffelaw.com
jaffelaw.com
jaffelaw.com
uc-expe01.jaffelaw.com
www.jaffelaw.com
bighand.jaffelaw.com
www.jaffelaw.com
uc-expe01.jaffelaw.com
jaffelaw.com
remote.jaffelaw.com
helpdesk.jaffelaw.com
jaffelaw.com
helpdesk.jaffelaw.com
remote.jaffelaw.com
connect.jaffelaw.com
jaffelaw.com
help.mccfc.com
jaffelaw.com
jaffelaw.com
extranet.jaffelaw.com
remote.jaffelaw.com
owa.jaffelaw.com
jaffelaw.com
mobilevpn.jaffelaw.com
mail.jaffelaw.com
connect.jaffelaw.com
mobile.jaffelaw.com
helpdesk.jaffelaw.com
ip.jaffelaw.com
bighand.jaffelaw.com
remote.jaffelaw.com
help.mccfc.com
owa.jaffelaw.com
jaffelaw.com
mail.jaffelaw.com
bighand.jaffelaw.com
help.mccfc.com
help.mccfc.com

Certificate

The complete raw certificate details for helpdesk.jaffelaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB6u260BvVKMxwjKVsTl
pzJHKE9bJegtmRb8+ibQBAwz7hIdPAlh/7wFPgS5OmQ2ZwzNT9lXctjLI6RlmDhR
BQmlAKSV7IAjF6pdN4S67ZtOj9efuSSM2cbd63aB3KMIJLKuRnc0c3AY18vr4iCf
tbFl+Sew88fVW6eH+5OsZMlKok3IBNrahGdlXV5PmCnvn/q0o0cMk4vvJfQDlCg3
eU7Z6jTOGFnzy3CamNW9Xf71R3WqDWzh9NDSnAbtLycX1oVkRFxH0XJxl3V3yKB2
iTa0HNcKgybOuXOP6d9gSUx0971Jh4vbxQs4/jKx6Il2g1Ua16DajFexTux15lbp
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425427239725100756739999648913948978854666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-11 13:06:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-10 13:06:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.jaffelaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19708305945392730816679972043355525697568393619964112051957381323276271842271794472283296057819537511134286701220796143255055771173223244584600984121074985901356313270319530142004166545236989635811350176533649805509985790929623116437343229441101978105582821494045411241521273111680208353319253545674857980290555324414291140205901009590418107073170070875686701421117213815954269852308512689292377122293944204213556905038734627542041605363372421463072400488186009328650259776504161619269606225320614233628313775666387273483376160261825942915799154738945768376230474501601839052513940688867486165362580693900009712052681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b46585056e597e3b8bd8a794e5c31689242c6bfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911.finsa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mccfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.baja.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gcwengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gffg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.jaffelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.lantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ukrainianfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.jet-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.airselangor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itss.rdthailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.quantainvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.odva.oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sostic.grupoquimico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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