www2.abacusemedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:5b:cf:fd:af:12:e3:83:e0:2c:50:2d:c9:b0:11:1b:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.abacusemedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:5b:cf:fd:af:12:e3:83:e0:2c:50:2d:c9:b0:11:1b:8f
Serial Number (int): 320668029337910580579224218556450319965071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:5a:39:0f:4b:aa:5b:98:ae:8f:fe:8e:5d:75:95:08:e6:63:71:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:76:cb:6f:21:56:10:8a:ab:b3:ba:5c:65:fa:04:a8:11:66:52:c1
Fingerprint (sha256): b0:c8:f4:b5:53:91:55:14:ae:65:0e:87:6b:c7:2f:91:5e:19:32:6d:86:c5:b8:41:ae:99:fd:7d:8a:bb:df:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.abacusemedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.abacusemedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.abacusemedia.com

Other certificates including the domain name abacusemedia.com

(limited to 100 certificates)
adtest.abasoft.co.uk
adfe1.abacusemedia.com
adfe1.abacusemedia.com
sts.abasoft.co.uk
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
adnoncentaur.abasoft.co.uk
centaurmyaccount.abasoft.co.uk
helpdesk.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
adtest.abasoft.co.uk
*.abacusemedia.com
adfe1.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
adfe1.abacusemedia.com
addeployapiweb1-uat.abacusemedia.com
az-adapi.abacusemedia.com
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
www.abacusemedia.com
adtest.abasoft.co.uk
remacc2.abasoft.co.uk
adnoncentaur.abasoft.co.uk
remacc2.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
*.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
adfrontend2.abasoft.co.uk
www2.abacusemedia.com
*.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adfrontend2.abasoft.co.uk
adgate-internal.abasoft.co.uk
addeployapiweb1.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
www2.abacusemedia.com
adnoncentaur.abasoft.co.uk
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for www2.abacusemedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320668029337910580579224218556450319965071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 08:23:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 08:23:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.abacusemedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707284528229390632877701064050306182236979013669321318013505968734215036175520123951688742756008482384428899298241354428939215238782019734666110396386632158662699447394513396075007658491197866882159731334475166244288690973758327075041085404285827899638102049759206298195506520157071504940020824139130458194647244118043793568924531646292016528152643009455145789866123577632113842936018557115508870452693179194012686708537914110560786340651515718299071548033149649481587140156581177923409604864276911615999674984570626371427050346528921502356684345841209420774224354520512694135250860047006146485720979837031645297838170011130077939635362232190111188252919218490213780090615059685467272749479121653236870203378559141865127450674296600265736646683579971845328736426888816020288133324512212734070510777973457255923956854550073526285407675351407258768562814801427895726085949000845343550618013226822602904525385169627670606341825149941031333335775119042849243677195608862073942396344237765476409390853336035025529577038358465130566977798954840676407440775479802397600126220202010572474151889812631584766266940743438605433854617542863025637048715779975600321529495361363114857043775041898903615006744408625054825099058582802628978324318249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd5a390f4baa5b98ae8ffe8e5d759508e66371d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.abacusemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afdc098d40000040300463044022075e611ddc6138c80b2cccb1384d1e62b402ffcffdd595b00a9248bbb22928e060220195cf822ff58ddfa8e13ea7b30d1db4e0bfd666b8722c1893f65c1a8eee19ad0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afdc0985c00000403004730450221009ccae8d1eb31738256a3f4aff605b3cada4d4170ad4ad24f17e0f271e749d1de022050e7886b9da50a291efa579ddd072113d1f65bfdb920cb5c23215c5ea72e2fbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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