help.averda.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:27:be:38:01:e0:61:94:41:54:57:9c:eb:5f:48:43:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=help.averda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:27:be:38:01:e0:61:94:41:54:57:9c:eb:5f:48:43:6c
Serial Number (int): 286910862878553466611045110655953503011692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:8d:d7:26:f9:37:a1:b6:ed:63:92:e1:09:57:02:f2:e2:c6:d0:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:9e:e9:a6:9a:2a:45:ff:43:91:bc:8a:5d:86:da:f3:a8:9c:13:61
Fingerprint (sha256): 83:1b:5f:3d:d2:ab:59:8a:35:07:86:e8:8a:a9:12:7a:04:1f:cd:7b:13:9b:8a:30:ce:c2:5a:c4:99:fc:2c:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate help.averda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.averda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.averda.com

Other certificates including the domain name averda.com

(limited to 100 certificates)



fsus-2.freshservice.com

*.averda.com

iapps.averda.com
help.cei.com
servicedesk.averda.com

proshred.averda.com
fsus-2.freshservice.com
averda.com

fsus-2.freshservice.com
fsus-2.freshservice.com
servicedesk.averda.com

averdaapp.averda.com
testapp.averda.com

fsus-2.freshservice.com
fsus-2.freshservice.com




selfservice.averda.com
help.cei.com


fsus-2.freshservice.com
servicedesk.averda.com
help.cei.com
fsus-2.freshservice.com

help.averda.com


help.averda.com
help.averda.com
help.averda.com

fsus-2.freshservice.com
fsus-2.freshservice.com


sbweb-ext-dubai.averda.com

help.cei.com

averda.com

fsus-2.freshservice.com

help.cei.com
*.averda.com

fsus-2.freshservice.com
servicedesk.averda.com
iapps.averda.com
fsus-2.freshservice.com
averda.com

servicedesk.averda.com


fsus-2.freshservice.com

fsus-2.freshservice.com
fsus-2.freshservice.com


proshred.averda.com
fsus-2.freshservice.com

servicedesk.averda.com

fsus-2.freshservice.com
fsus-2.freshservice.com
servicedesk.averda.com

selfservice.averda.com
help.cei.com
averda.com

fsus-2.freshservice.com
www.averda.com

fsus-2.freshservice.com

help.averda.com

servicedesk.averda.com
iapps.averda.com
fsus-2.freshservice.com
fsus-2.freshservice.com
servicedesk.averda.com
help.cei.com

Certificate

The complete raw certificate details for help.averda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286910862878553466611045110655953503011692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 11:17:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 11:17:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.averda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734022071219647379493327784535347968460067879747908850633534429493798879330761271762869548110549446516536754105183281072464534395413469601458411225972776148946810288952260002232739951813014979387118514047315142782275967200124772004454461626997082730504788274176800111372618200853563236729476733072792947633400997350425796749016942396630229264258510642290623047722364955753192533336737194240746621072078746004680204176753952566703164072114569556136437622130758865665900876536945124182713056795783489743133317345180943467833669436011775446594205489056868417355798428025303392475390524781097681334708447695316076340848210439514305942411632285245110526310616691421109368363175980265600786042707031980613475601434379640506479408980876202967715202266803041303280793971099851483071321246657995869066470408766859685139916531067667973945246368541755343666331654758111543579946325664267043570047846545799578900462598240300701857690930619696032563318899701142005607640384287123784593461217452956720552385130694509108349124139173041133785454470343052768342511250061624978241806689187908982255622289475613190585590797110017405473093629091171825953835767953473336379129971845618043958715493596412032054185275198697462584379523706969215723421872829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							718dd726f937a1b6ed6392e1095702f2e2c6d002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.averda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f707d447a0000040300483046022100b901374da82e4d59730ebbb4613e559a47e18d374721def2e1cb2f4d6195319f0221008efc1783491137ffdb5b11fbfba039722a9c44c52460e264600cf7f618092d71007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f707d446c0000040300473045022072fdd7dc7a766d4c2177a87f6f8b747932d23a24f8aa1bae4defadd005414a1b022100a08a02dfd9056eee8d0e26f091cd3d6543d6b0bf58bae2aec9e0bb302b848e18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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