medicarehero.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6d:63:a3:f2:a8:f0:32:69:6d:b1:71:37:35:5a:8f:60:d3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=medicarehero.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:63:a3:f2:a8:f0:32:69:6d:b1:71:37:35:5a:8f:60:d3
Serial Number (int): 385672366559121719684945074315832140456147
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:58:25:09:c2:b8:22:14:88:05:a7:1e:45:03:0b:08:e8:aa:bc:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:65:91:d1:16:9c:56:27:bb:41:71:1b:4a:f3:7f:40:8b:65:8f:58
Fingerprint (sha256): a5:58:94:10:88:dc:e7:3c:ee:b3:93:09:30:b2:2e:14:be:0b:89:64:0b:c3:54:e4:b3:60:01:97:dc:bc:93:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate medicarehero.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medicarehero.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

medicarehero.com
www.medicarehero.com

Other certificates including the domain name medicarehero.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for medicarehero.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385672366559121719684945074315832140456147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 13:27:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 13:27:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medicarehero.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835862079981637909843214796271332381082746575847693194814047631920485520900179040460782087442615567400568297922425577392325432583760532790638004140846377704879697337411608724035921615963785799666461082099164424353406320782961396641073400893543642390185808784713849319248996897043434868021490255812947831761842154950885807474427028775353157894405464540360549417779440526555208978319047405233415054163173241775946560594798463251419412352829915945545570500215775275539436461671791949027114100972637381612791058731563444636725420664865434423519710835332609204386156441953221121238425561058342035105516119233473723343390309359638669549772895409093481781083876657370672849214666097717735407507279047939250207224406470977446000961218635584488771545467076339458132121156620379262647622738867880169573544962376070078745324322474788567284997087626924233015424815281958740415829044839256221124156844986479292846013184734320628759052748659594984150039969799427426338988846086079836245638166465252175752191512366886003885032038775628451949908181069587594448373427879366614739838482449516619485711225875289563535426974217064028830523159831528314124200629699299520230486155410424422397459137031803151351307239388870078569169805622170442901702569699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac582509c2b822148805a71e45030b08e8aabc57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicarehero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicarehero.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a5cd12150000040300473045022100db974304ad91d5853035a7a975b6c0c082369f7a71ea5e0bda9b29d8c46f01e0022050f6fe987601172dcedcd21e55c7330c155e1392fe17a8c0b0464f7608389c3f007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a5cd13ef0000040300483046022100d7da7888394ddecaef4780dc0db340f368bdfc4134ea497c7cda87f9a7d97271022100ad5b48c394f24eec88ae6c73e6650cf390246cc031f1fec80c88ad6a7bb99b20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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