health2.altus.area9innovation.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:f6:5e:22:b2:d8:38:4f:ef:f4:71:e8:73:66:98:ea:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=health2.altus.area9innovation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:f6:5e:22:b2:d8:38:4f:ef:f4:71:e8:73:66:98:ea:50
Serial Number (int): 336866739751447388234965398708956893342288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:2e:ab:c1:73:e2:cd:01:96:f0:4c:7d:e2:df:9d:fe:f4:b7:1a:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:1a:66:94:d5:31:c8:cb:2d:1e:cc:0e:e4:35:cb:1f:1a:29:3f:11
Fingerprint (sha256): a2:b8:25:26:a6:d2:e2:05:ff:d1:9d:7b:78:8e:68:f2:92:5b:27:05:a4:cb:fe:f7:e2:6a:89:6d:25:53:64:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate health2.altus.area9innovation.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for health2.altus.area9innovation.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

health2.altus.area9innovation.com

Other certificates including the domain name area9innovation.com

(limited to 100 certificates)
usdev.area9innovation.com
apr.cog9.staging.area9innovation.com
usdev.area9innovation.com
wspresentation.usdev.area9innovation.com
www.area9innovation.com
jenkins.area9innovation.com
matrix.area9innovation.com
www.area9innovation.com
jenkins.area9innovation.com
*.area9innovation.com
area9innovation.com
usdev.area9innovation.com
matrix.area9innovation.com
jenkins.area9innovation.com
area9innovation.com
area9innovation.com
health3.altus.area9innovation.com
usdev.area9innovation.com
nbd.tech.area9innovation.com
area9innovation.com
tech.area9innovation.com
search.thenordics.staging.area9innovation.com
usdev.area9innovation.com
usdev.area9innovation.com
cog9platform.staging.area9innovation.com
health3.altus.area9innovation.com
usdev.area9innovation.com
cog9platform.staging.area9innovation.com
area9innovation.com
tech.area9innovation.com
tech.area9innovation.com
usdev.area9innovation.com
*.area9innovation.com
search.thenordics.staging.area9innovation.com
*.nnc.area9innovation.com
prod.cortrium.com
area9innovation.com
usdev.area9innovation.com
area9innovation.com
rsuite.tech.area9innovation.com
tech.area9innovation.com
www.area9innovation.com
apr.cog9.staging.area9innovation.com
health2.altus.area9innovation.com
health.altus.area9innovation.com
tech.area9innovation.com
usdev.area9innovation.com
usdev.area9innovation.com
accounts.google.com.proxy.area9innovation.com
area9innovation.com
area9innovation.com
jenkins.area9innovation.com
www.area9innovation.com
cog9platform.dev.area9innovation.com
health2.altus.area9innovation.com
tech.area9innovation.com
usdev.area9innovation.com
tech.area9innovation.com
cms.area9innovation.com
apr.cog9.staging.area9innovation.com
usdev.area9innovation.com
search.thenordics.staging.area9innovation.com
tech.area9innovation.com
tech.area9innovation.com
usdev.area9innovation.com
cog9platform.staging.area9innovation.com
nbd.tech.area9innovation.com
area9innovation.com
area9innovation.com
apr.cog9.staging.area9innovation.com
area9innovation.com
matrixpg.area9innovation.com
www.area9innovation.com
usdev.area9innovation.com
app.soccerzoom.com
area9innovation.com
search.thenordics.staging.area9innovation.com
tech.area9innovation.com
accounts.google.com.proxy.area9innovation.com
www.area9innovation.com
health.altus.area9innovation.com
usdev.area9innovation.com
usdev.area9innovation.com
tech.area9innovation.com
area9innovation.com
wspresentation.usdev.area9innovation.com
nbd.tech.area9innovation.com
tech.area9innovation.com
usdev.area9innovation.com
usdev.area9innovation.com
matrix.area9innovation.com
*.nnc.area9innovation.com
rsuite.tech.area9innovation.com
tech.area9innovation.com
chrono.area9innovation.com
health3.altus.area9innovation.com
area9innovation.com
area9innovation.com
health2.altus.area9innovation.com
usdev.area9innovation.com

Certificate

The complete raw certificate details for health2.altus.area9innovation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw0sv2AnKh5Bszqrsw0xl
Sft+LEvbmmiWuKKY3W8CZgkXXGx2SmfmbnyujgsxnhycNkWKrlhKSqiyeXQgbjv2
BzWtANkzvIIBC7HtiiPeNWO385lhhQ2e9zdwgN2f+0hkcaNjVZaBqLqO+LLM982A
NkGVlUm4O2373QOFM3/QwMkVYjdyllW1/Xvl1NaYNb3OYLqYaxDZaZAFirXYANSI
VpU/kxBgAMpfbL3q4TNjjFTxLBDjDaVD8T69gTTOmbfvRWs/+iUdeHwaSAKZuk8C
PzanjiLCUYiJ6viVDEnj8s20nax+t6v+hbZSTnYTJ0XtTfHl1sRmiGzy+qff/1Qf
awiol69HCWFpH75XUzPPE6LVE6yqABg1YAlfyFtB9nZtXaF51qx8MOz00uRJbC19
7Uf/K8b6a7AZo8kZ6jVbQdWxsBiYHCcBu40A3j6vRSCoGhxHCyhK0xEy/I1B4ZK8
T/lmaLaaH6kQXa8fbTUR08rd4+OOtmxxpfqZpuHyLpsteTzYOU+XLMt7ujh6r1rm
d0hPD+F7GdqUV5ez3ZS8xkMZTd+puZDG8ToM+fnVPT0JdkCNvIYqX7uj3N4BqEkt
2B/dDoNkpe0ZTooo8bM/XSGzYOTxYS/huV4Z10onhPYuHSgvFZxRuV8sEiWPUpAu
pyHOAeEjsnUoUAtXI1BeELUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336866739751447388234965398708956893342288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 09:31:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 09:31:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'health2.altus.area9innovation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796728779790206009077998898172010765920503887548745750010479225751723143454945808834243450857768164971428432631813726268759697693673753986282029812671590430690903046802364509816756081709493943423597324424439083166368874613086017197373033747502735658142043826276104715014288769186515469652534887769959876577958034932134331550444693975059844564702130733296359100045347173923509714406297927239066210321962610549359512477761458108346876109547578607315960496947894121344667224941988637217118386410846363196183054696355831541209731356194620214359447489557106549105218693105256055818297129951069443162232925481623138558193119467774381310496480093523430983757271519745162268522142970017934343643903888253032053083505484762693365177202080906045290745503465518225604997279732098490106801142573931400583098593755751236130810597198726978800509605634328236692557333751285312272813084199135547275508244452841039844010522602645527386931573025738220401722850949477196897527768750248455174649010860604808336265026484353250480091769897034805944290048171202803416845596823163212962732797298260411387406601231065286498726644275789481914214502366772193365012777508085641758169357227257081806365112640855035156979648530895990363751840190205338301105049781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb2eabc173e2cd0196f04c7de2df9dfef4b71ac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health2.altus.area9innovation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3b1e9d710000040300473045022100cc338ba1ccce18649df90ab56c03b4b4f39dc6d481b7db277da28991b11087c40220745dd4c0c240a426976e78311055f996c74acae07e2b3472bd596e1c3eca59a4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3b1e9d6a000004030046304402200aa55d88c3a75b2a76818d5b59ab3bdb2107a2dd1b8673c44760e6863b43147002202b60c05804d9497de93354d682f6f393eca25f13d3aebd16248b6b58f5a581f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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