heiexhibitors.heiexpo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:98:e1:7d:d5:92:72:c7:84:22:b1:bb:52:df:2b:32:db was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heiexhibitors.heiexpo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:98:e1:7d:d5:92:72:c7:84:22:b1:bb:52:df:2b:32:db
Serial Number (int): 326193720984633648189973531597083471721179
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:fa:4c:6e:2e:97:cc:31:94:49:5d:f5:26:4b:61:e8:9b:8d:16:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:24:81:ff:c1:62:5e:ea:4d:7d:37:0c:99:01:14:cf:9f:88:d4:94
Fingerprint (sha256): 93:36:76:bd:3c:a9:da:03:6c:f5:a8:3f:2a:67:5c:12:5c:cc:20:cf:5c:00:dd:83:6b:c6:49:db:f0:97:d7:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate heiexhibitors.heiexpo.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heiexhibitors.heiexpo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alaannual.com
alaannualcom.heiexpo.com
alamidwinter.com
alamidwintercom.heiexpo.com
heiexhibitors.com
heiexhibitors.heiexpo.com

Other certificates including the domain name heiexpo.com

(limited to 100 certificates)
alamidwintercom.heiexpo.com
alamw18.heiexhibitors.com
heiexhibitors.heiexpo.com
iebms.heiexpo.com
alaannual.heiexpo.com
heiexhibitors.heiexpo.com
etools.osimail3.us
alaannual.com
alamidwinter.com
etools.osimail3.us
exhibitors-ala.heiexpo.com
heiexhibitors.com
etools.osimail3.us
heiexpo.com
etools.osimail3.us
www.aha19.heiexhibitors.com
www.heiexpo.com
etools.osimail3.us
cpanel.heiexpo.com
alaannual.com
alaannual.com
etools.osimail3.us
server.heiexpo.com
exhibitors-ala.heiexpo.com
heiexhibitors.heiexpo.com
avma2017.heiexhibitors.com
alamidwinter.com
etools.osimail3.us
heiexhibitors.heiexpo.com
etools.osimail3.us
alaannual.com
alaannual.heiexpo.com
etools.osimail3.us
etools.osimail3.us
iebms.heiexpo.com
alaannual.heiexpo.com
heiexpo.com
alaannual.com
etools.osimail3.us
etools.osimail3.us
webdisk.alaannual.org
heiexpo.com
heiexhibitors.com
heiexhibitors.heiexpo.com
exhibitors.ala.org
exhibitors.ala.org
etools.osimail3.us
www.heiexpo.com
heiexhibitors.com
heiexhibitors.heiexpo.com
etools.osimail3.us
exhibitors.heiexpo.com
heiexhibitors.com
heiexhibitors.heiexpo.com
etools.osimail3.us
exhibitors-ala.heiexpo.com
heiexhibitors.heiexpo.com
etools.osimail3.us
alaannual.org
etools.osimail3.us
exhibitors.ala.org
exhibitors.heiexpo.com
heiexpo.com
heiexhibitors.heiexpo.com
www.exhibitors-ala.heiexpo.com
etools.osimail3.us
etools.osimail3.us
etools.osimail3.us
heiexhibitors.heiexpo.com
alamidwinter.com
heiexhibitors.com
heiexpo.com
etools.osimail3.us
etools.osimail3.us
iebms.heiexpo.com
www.alaannual.heiexpo.com
mla18.heiexhibitors.com
alamidwinter.heiexpo.com
alaannual.heiexpo.com
heiexhibitors.heiexpo.com
etools.osimail3.us
etools.osimail3.us
heiexhibitors.heiexpo.com
etools.osimail3.us
alaannual.heiexpo.com
heiexhibitors.heiexpo.com
etools.osimail3.us
alamidwintercom.heiexpo.com
aall18.heiexhibitors.com
etools.osimail3.us
heiexhibitors.heiexpo.com
heiexhibitors.com
etools.osimail3.us
heiexhibitors.com
heiexhibitors.com
heiexhibitors.heiexpo.com
etools.osimail3.us
etools.osimail3.us
heiexhibitors.heiexpo.com
etools.osimail3.us

Certificate

The complete raw certificate details for heiexhibitors.heiexpo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQQWiuwKstfrtOvjgeRx
CpVBhAdr+C+Kb2opCpMIgGgNw6T0kGd21I+XJdugvo2KnvTyupy7abo0lErngQZd
BY2yyOt19Ro3Sa5fn8P5IWWc4bB93ArydVxjpWfOG3B0iYMSJv6hq+2L88wP6iaw
Ils5ysfajAscvG+G1LMf8xLiy7fliW/iaodqKA+YB/3NERx/rxoJkqxHPXAWxpIs
7MrgMklMFGXAYH8MJJrfbqggPshkYBqDcIO9l2Gnl4DMmc3UBeQWWZciFng1/h/h
LzFIRAnQ3PjPk8DqPH2P4YVZDCakbPxnLYIRboy8EQoY+qsvdbmDN6Nua1Kz1p9E
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326193720984633648189973531597083471721179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 04:57:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 04:57:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heiexhibitors.heiexpo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25375915194357055140199993285808947622266735225549906724220688441697919853991640486777436771526205773792164624450277778077323985502842483991660990439279582750238310061010047611344760207751913408626528524195722901829997305465014269030737238308698403173093948750256303439444169890622773894341530728513937042224148130179499891783307457650284023048885640495573175270697536586604800585471376431124215819632168284112836197292774004354891920602459033340507767417752259848202486661778768967862939166234721000619274917128886476225118845248015464513419380139832481182969056232624184812793665908419656406695409244157137288905911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5fa4c6e2e97cc3194495df5264b61e89b8d1656
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaannual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaannualcom.heiexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamidwinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamidwintercom.heiexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiexhibitors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiexhibitors.heiexpo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016913c7a2960000040300473045022007158c9330fc188bca62eafb581313b8b7c63905e5d1a460bb5bf230f6976206022100f89240d06024fb48b8682d040a888afc43fe32bdda95e2fc72eed9ee60fa8e6e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016913c7a2900000040300463044022042caa07a0d9a12bc3d496749e98cf7182116a5d8acc2a4f9f17d7d1742e6dcda02206ba8fa5c68eca757bc2f34e7db659a38c1da84e26a33e378ed38bc468bfa602c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d57bcf9e84a673b0b24b277222ca358ebcbd65415ba78cd660623cc19dfa290a7f1e18492bb04d195852983ecbaa68aa2dc737e2c56da1d066e1f06384526ac47c8dbc04f0538b8778fddc470eb63dda844d73f2acd1a51a662bc72f1a09a2435a4428a516933eaf004c365ca6add5d4c028e968d3592419afc86e1a801b8534dfaf45059f1f5907333353787bf1297b060597abe34d3bf1693aeda70adbd204e50eb65f6254f23a78d699a460f872928193f01ec5db7476e7ed55b007866a146084cb26acee637ec136e6b4fb9e7ce8424e20161e4716d555b699306f62fb99777fa68c2c3c82fe68b7a857bc71c4dc14ac8fe0042596def09774d6249d8b6