help.lafayetteco.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:42:8b:49:c4:8a:d4:43:d8:05:8a:62:26:99:20:51:08 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=help.lafayetteco.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:42:8b:49:c4:8a:d4:43:d8:05:8a:62:26:99:20:51:08
Serial Number (int): 341731948661794944569260428215438949765384
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:0f:a3:4d:f8:8c:ea:ad:33:66:ad:bf:01:2c:20:a5:3a:ad:ca:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:6a:a4:ec:d8:0b:35:a1:71:5c:4d:7d:54:88:14:9a:0a:9d:7f:25
Fingerprint (sha256): 62:a7:5d:b5:7c:05:a7:e7:51:ff:32:ac:af:da:d3:8f:cf:c4:92:1c:64:85:8a:a5:7b:ce:fa:20:cc:a6:2e:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.lafayetteco.gov

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.lafayetteco.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.lafayetteco.gov
help.mcesc.org
helpdesk.asb.bh
helpdesk.datafied.com
helpdesk.gapsi.com
helpdesk.isda.org
helpdesk.proven-group.com
helpdesk.wafrainv.com
ishelpdesk.allenandgledhill.com
it-help.acquia.com
it.customindprod.com
ithelpdesk.starlightinvest.com
itservices.cpf.jo
itsupport.telradsol.com
otakhelpdesk.otak.com
sd.bmhc.bh
servicedesk.brandfinance.com
servicedesk.brockandscott.com
servicedesk.dh.health
servicedesk.nationalcorporatehousing.com
soporte.avansis.cl
suporte.agrocompetence.com
support.cityofwhittier.org
support.francescas.com
support.intellifi.ca
support.nakidan.com

Other certificates including the domain name lafayetteco.gov

(limited to 100 certificates)
www.lafayetteco.gov
helpdesk.deistermachine.com
www.lafayetteco.gov
helpdesk.gapsi.com
help.lafayetteco.gov
techsupport.maxsold.com
support.sifco.com
support.sifco.com
techsupport.maxsold.com
www.lafayetteco.gov
helpdesk.deistermachine.com
help.lafayetteco.gov
www.lafayetteco.gov
www.lafayetteco.gov
help.lafayetteco.gov
www.lafayetteco.gov
www.lafayetteco.gov
help.lafayetteco.gov
www.lafayetteco.gov
helpdesk.gapsi.com
techsupport.maxsold.com
www.lafayetteco.gov
techsupport.maxsold.com
www.lafayetteco.gov
www.lafayetteco.gov

Certificate

The complete raw certificate details for help.lafayetteco.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/RfdslXN5zqnjwomfok
t12IF6ezCFVswTjXU7PUmfFEaZd6/6OEdJA9/eXgHlPJspitFVdqAp3dbS5GR8hW
yv+YBJmpbAVEk+l2RPJURcdv2IoJX3/pL03hUfL/e71FkLU5HwtTKFSUIQsuyy9c
Pc5RYgNpSeAFnqid3dak6SX6kJpV5/gIodwwdLK8tuxZQibzJTrYbtNwEnx/qx5i
YkALzl1+XVPn8Khwuo5fqJn66FpjejgKXLRqiqoLQuWLWopgSZNuQ7Z310eNYv/W
RhGVYPRVWAL65vJy7tBs2Mx5v1XRWN5e0S2/6LI85tnItqJtykTBgNY95cSkV6UK
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341731948661794944569260428215438949765384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-04 19:36:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-02 19:36:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.lafayetteco.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25746880679474823266388176675522276467174732417957627211689723107448685840945312132124807417314900212186068874152494231249882745802758174136870289293008833977018380710500069178555607677255093893747974970237749323351722571957337775731381797247297496237601986724968060890847475885929384860920874866625957442919936966688082645851813584231111212924032221633254358479003808811715653752098853422234669350451727760922792462594359842118925885680117816343026836754425238619467131446488062475533462395745207929247974430200315438647600123928807053097841072362355554290264624409341092854110133501113321548367403540567014320179841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b0fa34df88ceaad3366adbf012c20a53aadca1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.lafayetteco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mcesc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.asb.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.datafied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gapsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.isda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.proven-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wafrainv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishelpdesk.allenandgledhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-help.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.customindprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.starlightinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.cpf.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.telradsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakhelpdesk.otak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.bmhc.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.brandfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.brockandscott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dh.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.nationalcorporatehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.avansis.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.agrocompetence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cityofwhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.francescas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.intellifi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nakidan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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