abmdesignservices.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5f:b5:23:ce:a2:db:06:28:14:39:25:da:90:b3:8c:bf:d7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abmdesignservices.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5f:b5:23:ce:a2:db:06:28:14:39:25:da:90:b3:8c:bf:d7
Serial Number (int): 381016744773236384447007207776553876111319
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:89:82:be:12:59:77:1c:ad:e0:5a:6c:f7:96:c1:e3:79:5a:01:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:3b:ce:14:49:bc:8d:c1:15:3b:6a:7d:a2:83:70:a5:bd:84:80:db
Fingerprint (sha256): 60:1a:bf:c4:fb:cd:82:31:2e:e4:24:26:53:ff:a1:92:76:51:64:38:f1:fd:e2:4c:74:bf:b2:28:8b:b4:f7:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abmdesignservices.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abmdesignservices.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abmdesignservices.com
www.abmdesignservices.com

Other certificates including the domain name abmdesignservices.com

(limited to 100 certificates)
mail.aidjuris.com
abmdesignservices.com
abmdesignservices.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.bizdemo.net
mail.aidjuris.com
mail.aidjuris.com
mail.sawtoothxr.dev
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.amor-jordan.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.sve.tiss.edu
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.akshaygaur.dev
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.kalischacero.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
abmdesignservices.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com
mail.aidjuris.com

Certificate

The complete raw certificate details for abmdesignservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISBF+1I86i2wYoFDkl2pCzjL/XMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDIwMTQ1MjZaFw0yMzEyMzEwMTQ1MjVaMCAxHjAcBgNVBAMT
FWFibWRlc2lnbnNlcnZpY2VzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAO0Jeo5qgc0o7JEqcmUrqBrOP5AuAESevEIQ1QZw9vBAvEz6/Wb8uvqk
SV6cFqr867wjY/6RNw7+9CSVyHajycI9I24eqSPkyMuywMTawH1UxC7GHLAYZbzA
GzdpENfoYdOn5ghcYMmhPziDDugLzaxtYZUK3/cMbxXWdfed1Z/s0Dj/FsoGztyb
PIuV3qEGDWY0CcdfPwqP2PpOfzJTS1GwqdiBLzVfsA819PUkopPo/IyQWmnD4u1H
JtW7Sz/w/tQvQVuHHYNSPZtTP5wJ2yIUTcqujoIvg4JOAFzkRmsDFvNNr6rFdbd1
kxCDRiruEI0B1fCXUET57EMKlgii0PbrAMkCTaVwx85/W6MbGbH3IFqnnHzW+u7G
QOMZttpD0VDMtS+e5gzOfe4SK1Z0QDjbXl84N/qyTztYyMQQmcVJP0c5iPls3T6s
ekkHjD99yvtdo+/qtjsX87pkASIsUsD82gZdJX9zPrfQ3JEI6YKZFUNP+3m+Pmo/
3gG/iVnKooIYo/49Gh2p6zmb90Iu0Qo29JJnDy2KK2esa4f4bQbuO7+3PpQwlFfG
hZWEcB6sqiDFfqoOJyXqSaUh9j+nVZLhPiInlMxesDxuRKjFM6t7uTJjDjtAjDUA
AMgfYHsgXKrUWYyfIsPFEgPQ/zxx/UDnYSCjIgXji26FHoo28VjVAgMBAAGjggIy
MIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKiJgr4SWXccreBabPeWweN5WgEi
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDsGA1UdEQQ0MDKCFWFibWRlc2lnbnNl
cnZpY2VzLmNvbYIZd3d3LmFibWRlc2lnbnNlcnZpY2VzLmNvbTATBgNVHSAEDDAK
MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ALc++yTfnE26dfI5
xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiu5GugAAAAQDAEgwRgIhAJqf84qEUQdL
09d6na2c1pe1YMQjcFKsgdvsWpf5lI9bAiEA5KdvAQ1qL66/nRKOvFqN8qowggN+
NXFXfmnhBpU4hOQAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAA
AYruRroOAAAEAwBGMEQCIAt7cI7Lj5aZjOkKakw/xNbhlo9s5UfOA2yF7hs7eiaO
AiB5GRUAeipD1BML0VqSRxdYJTN6OCsKYOhokUzGTMnb/TANBgkqhkiG9w0BAQsF
AAOCAQEAlpwU89G8PFAux9kNC+797K0kZRbJ8zOqwv7v9icbWe4gOulaH0YdXZoJ
HWHfxJpmzQIPtafB0Eh4AOf6/IgOVjKu6YQHmiWDkTv0NZoiEVjhWYYk+q8+8Ev3
lJn4t2eV6KJiicvmC0aXvisvi6SOhd526gRHQipYW4kT6Kpp9k3upZKjD/VkHrkD
Fk100aeG9Wgxi9n973Niu1oYz9PNqw3pkdi1uNU5UQpXba+Mt1E7rWm1c3zc4Nbc
6eKl5JoAPZzYBKnqJJ+yFuorzzYPbMi32vVf+rheP2NZI+c7SrRyiyCEmv1DFNgq
RK/wh8bTAVgQqFqM4gmf8fOC99J+pg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381016744773236384447007207776553876111319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 01:45:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 01:45:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abmdesignservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 967026698290488942662905720131230893546263642593559812990962479085518127330706496512862436788561794052640234242337717576197555001284527092081244403419154579947198863749229742803196351276545701689546095742495389265037979781739442774973706062237618133390773609011692556734045570706803753043878462303938440609059889926625287902906599897615480581758124243515092325397893585279428552080429097960266376038160421672980533620768588170283672568856121229146873065177502175073482310493412690080547104751600508346368606975028535964661168518519196488666831979347086552746558199982287236403385843182190460985508499474783803573361084472501332376040048920105235425435754059486887754835159528290032622204132290699111555371848513101988136908996061897262771120288723496342520301420489929997990321661308076548490276674351031593494884166018622445545473931076676756355719798097207729887481704315024144808761377749316477194686158628834449244958999285514476975751274362392208199074941477573682622198688253717466908598177211436357608018268176201890801535505785054322252405775643836972188372435825656915671843298782016150747610716837119047846672196066836784564222245078389174309454659633780962168610963113282482502999502512483147080851705529711320302091327701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a88982be1259771cade05a6cf796c1e3795a0122
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abmdesignservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abmdesignservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aee46ba0000000403004830460221009a9ff38a8451074bd3d77a9dad9cd697b560c4237052ac81dbec5a97f9948f5b022100e4a76f010d6a2faebf9d128ebc5a8df2aa3082037e3571577e69e106953884e40075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aee46ba0e000004030046304402200b7b708ecb8f96998ce90a6a4c3fc4d6e1968f6ce547ce036c85ee1b3b7a268e0220791915007a2a43d4130bd15a9247175825337a382b0a60e868914cc64cc9dbfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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