hay.cciprogram.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:e2:0e:d3:f1:1a:8f:57:21:e3:76:4b:14:7d:0b:a9:33 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hay.cciprogram.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:e2:0e:d3:f1:1a:8f:57:21:e3:76:4b:14:7d:0b:a9:33
Serial Number (int): 287839082566087045535973344713625825945907
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:f1:4f:95:b2:4e:8c:1d:50:45:9a:f8:1f:15:13:8a:b7:a5:f4:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:59:b6:ef:06:35:b7:6b:c8:17:0c:1a:9a:aa:16:fa:80:57:ee:88
Fingerprint (sha256): 60:75:bc:49:2b:7c:81:44:d0:67:07:4e:1d:f6:75:f8:c6:46:32:2d:e6:6c:a1:7a:fb:d9:0d:6f:80:94:50:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hay.cciprogram.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hay.cciprogram.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hae.cciprogram.com
hap.cciprogram.com
hay.cciprogram.com
www.hae.cciprogram.com
www.hap.cciprogram.com
www.hay.cciprogram.com

Other certificates including the domain name cciprogram.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hay.cciprogram.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mjiaOl1Pn8A0/TqPS6r
cZK1YJIjZB2CjwBhtxUqrGkv9dQZnABFdlJZuBuQIIZKihqZivKRTYPEIocqQLqj
66OeLWLlGNP0Ep4/Cfo7ZBYMW8ZtO0uAnCUqLbYixC7rCFF4N99XnRHIge1tJJIK
ksdYweSRnxyMC25H63AUlfkAAj9K8v0savkSbeTp4MN1K2FFQx25oW9ClR3eEwaq
j5wilWFxUUAhQA7D+o4CyIFHFIMQI+OkGs+MGNdFrV+g4ueJ5TkyFX/PPTLgs5ah
PFhfKJyrtEnKUyKBCRJ7CSSnAQQd5OkUilNaSa5nd+4Hn82UT4ZVa2CgCh6Va4XN
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287839082566087045535973344713625825945907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:02:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 05:02:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hay.cciprogram.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28076624134324557468564041820547234244702189651026078227248993369917282810320432554245130494063743749247031094142979251837429064394783948693979853831306299247785468563549764481525151347189768259967461221170543603139032321089934546570351699735410158111289816147412192900348598758820282328109251223986839576379452232884450174026230180092241815061321741201083962485922678395744885982818311065128874792427153400006978527855031775318700733421706827572716766674460443607347718470235677612760686981147264673080689356379807990162088701421066102381195853180193483997145462021199725111170104540884767733485186693708072157040063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42f14f95b24e8c1d50459af81f15138ab7a5f4bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hae.cciprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hap.cciprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hay.cciprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hae.cciprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hap.cciprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hay.cciprogram.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f797286da000004030047304502204da36b7961c22751cbc503eb067645bf7f461b9ccc6c416df38432038a75a2e9022100fa31de470f6b8530a1e4ad9dd59a4539a9fd971567a035e9a0a3d6d546a77fc10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f797288ae0000040300473045022100f41ad6b0c267a6b468555bbd7cee69e2002b03001cda85631977caeb7fd832f0022013abee39e7df18228084c80a833cabcaf817ba354fcb4cce96d3b2e037f57e32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00216aaa229411b75c6f6f917d63eff49ad939e8da66c5e4a857e9874c4f76fac595a0492b07878d66269575532bcf96eb0627b56c891ccade95cee04fcd957623658d5019c80395b93c15de70da7f3bb9f67b8685a3db09b4f6a68b1dc457ad96df43a02c4f84d0aba76c74e54d6fa60e8d75d25d2e68077412e6a5cfe1df4ddf271866a1040a841efb5fd5ee613e244de19b82cb33845f0151b13b4ed0feaae4b297a6de054b5431487655cf97b71497ca04ef729640d28a133ebe97beb5b2053a646b92b4cfa1364ec3e527b7977f95421891423739a75b9f0b6e875f480f00ba04f156497a00253f81966c2bc51339bbe738ee7a9078bf5d28d502dde2498b