help.ptc-atc.org

Issued by R3

About this certificate

This digital certificate with serial number 03:de:f0:5c:c9:fc:63:39:98:f8:fb:a9:9b:65:d2:67:73:6d was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=help.ptc-atc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:f0:5c:c9:fc:63:39:98:f8:fb:a9:9b:65:d2:67:73:6d
Serial Number (int): 337199039758788979777096631462919645131629
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:9f:a3:d6:9c:ac:b2:ac:4b:19:52:59:2c:6b:e2:2c:cb:36:39:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:de:a6:c5:c8:fc:57:e7:93:f5:1c:ca:80:8c:36:a3:3b:2f:75:30
Fingerprint (sha256): 6b:3f:6d:91:6e:d8:fd:1e:82:ec:59:c8:e6:14:07:bd:57:3b:b9:8c:df:f8:d4:8f:36:1d:85:14:7b:d8:d7:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.ptc-atc.org

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.ptc-atc.org

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

askit.ircagroup.com
ccahelpdesk.childcrisisaz.org
help.phillipsih.com
help.ptc-atc.org
help.rganda.com
helpdesk.denova.com
helpdesk.esc20.net
helpdesk.grupokaybee.com
helpdesk.ignitemedicalresorts.com
helpdesk.itsmeval.in
helpdesk.synergylynk.com
helpdesk.usmr.com
hrdesk.itsmeval.in
it.allinc.org
it.cmpusa.org
newhelpdesk.hycite.com
olmserviceportal.olmfoods.com
requests.quantinuum.com
sdp.firstwestern.com
servicedesk.akil.solutions
servicedesk.auspaynet.com.au
servicedesk.coweta.ga.us
servicedesk.ipmcinc.com
servicedesk.mi-case.com
servicedesk.numotion.com
servicedesk.penta-ocean.co.jp
servicedesk.twopoint.com
servicedeskph.datamatics.com
soutien.ccmm.ca
support.gochrysalis.com
support.liveoakpl.org
trevit.nths.net

Other certificates including the domain name ptc-atc.org

(limited to 100 certificates)
help.ptc-atc.org

Certificate

The complete raw certificate details for help.ptc-atc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEE6vyEoDdxZSUHjf/P2e2sLU5mdST
Ruhut0D3RW+dqpX5eWf7D5Grz4NPT5cKg0wIVC6QY4OJxx1ZDsLDP0A4BA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337199039758788979777096631462919645131629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 07:46:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 07:46:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.ptc-atc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000413abf21280ddc594941e37ff3f67b6b0b53999d49346e86eb740f7456f9daa95f97967fb0f91abcf834f4f970a834c08542e90638389c71d590ec2c33f403804
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab9fa3d69cacb2ac4b1952592c6be22ccb363913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (762 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askit.ircagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccahelpdesk.childcrisisaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.phillipsih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ptc-atc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rganda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.denova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.esc20.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.grupokaybee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ignitemedicalresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.itsmeval.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.synergylynk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.usmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrdesk.itsmeval.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.allinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.cmpusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhelpdesk.hycite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmserviceportal.olmfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requests.quantinuum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdp.firstwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.akil.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.auspaynet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.coweta.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ipmcinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.mi-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.numotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.penta-ocean.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.twopoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedeskph.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soutien.ccmm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gochrysalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.liveoakpl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trevit.nths.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc7dc46d60000040300473045022037d6fa3be33e0f0d4675e18b8b61d3a208d2d2824a7643e3d0b47c6d9b3f6462022100b672fd5fbddaf97ed81d2b6d860b39ff121e7ba2fce7dbd08da103da06f8e359007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc7dc46dc0000040300463044022023ffa2f6a0cfdfc7ac000de54a5ed85b176b3b688598a8d2925890679ca058740220576450253543d1fd57b0e635963c63d61a2936587516307726af6a5291208f4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001baa61cedb292520a66f9a1059c7a8b4c472297af37f4715941ded338edd7d47c8eac9b44a0e72314a35d8621cd70de93304e27b7835afc639e1df07e56507934aeb048c46045ed5337053c0a25365be0254e1b9438a1c6d2f6b22e6c3860d42c1639f046d3416433899bfdb2fad18afa95f55cb4e49cc97d609dc2436d379803d870e6fac63f8ab9a7f53bdf63e440695c3bb6a18df8d8116281415c938ad8e0cfd1ddcfa9e7c427c3b3386e4139c0486f53ec5c54cb907afe5e146412053c4cb8001b88ff515e95b6d724306c7bdcafcd64357a0a56c3ab64772c6ab43f8f789b4ce2e746ad9218558ece7a81d02fd22c2068ee2859e1e3e719e8e7c12f291