www.healthbasedbuilding.103.250.232.52.nip.io

Issued by R3

About this certificate

This digital certificate with serial number 04:d1:57:78:9e:48:e1:cc:27:10:28:b5:9c:8b:bf:2d:4d:bf was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.healthbasedbuilding.103.250.232.52.nip.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:57:78:9e:48:e1:cc:27:10:28:b5:9c:8b:bf:2d:4d:bf
Serial Number (int): 419684427535168463321137283312341524237759
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:cd:01:6b:54:5e:1f:e1:82:2a:a3:2a:53:72:99:de:79:99:5b:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:63:aa:80:21:3c:65:20:d8:21:4d:0f:f6:27:87:ba:06:85:ef:5d
Fingerprint (sha256): bb:2a:02:02:a7:aa:99:73:51:fc:d2:09:28:97:4c:77:0f:a2:c6:49:cb:c7:a3:e8:19:16:a6:71:b0:64:8a:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.healthbasedbuilding.103.250.232.52.nip.io

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.healthbasedbuilding.103.250.232.52.nip.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.healthbasedbuilding.co.nz
*.healthbasedbuilding.com
healthbasedbuilding.103.250.232.52.nip.io
healthbasedbuilding.co.nz
healthbasedbuilding.com
mail.healthbasedbuilding.103.250.232.52.nip.io
www.healthbasedbuilding.103.250.232.52.nip.io

Other certificates including the domain name nip.io

(limited to 100 certificates)
47.240.52.6.nip.io
35.186.253.68.nip.io
35.186.238.84.nip.io
34-160-94-57.nip.io
85.181.120.134.nip.io
34.49.67.234.nip.io
test.135.181.116.235.nip.io
klipp.163.172.179.0.nip.io
le-26875723.34.77.165.130.nip.io
paymentservice.apps.aks.20.79.80.32.nip.io
birthcert-reprint-client.58-71-188-165.nip.io
35.241.33.80.nip.io
34.149.29.169.nip.io
34.144.220.193.nip.io
34.98.81.54.nip.io
34.36.14.78.nip.io
*.healthbasedbuilding.co.nz
34.111.154.81.nip.io
34.49.107.205.nip.io
stg-unid.go.com
34.36.210.75.nip.io
34.111.131.207.nip.io
54-255-147-183.nip.io
34.36.62.174.nip.io
34-128-177-145.nip.io
homelab.46.101.10.37.nip.io
34.238.154.196.nip.io
34-96-86-202.nip.io
le-166.k8s.funcionpublica.gob.mx
db-prod.203.151.21.120.nip.io
herdez.67.227.236.192.nip.io
35-244-241-94.nip.io
other.54.171.149.46.nip.io
34.102.183.200.nip.io
34.36.139.100.nip.io
34.36.56.83.nip.io
mock-target-api.35-227-204-236.nip.io
34-49-129-154.nip.io
gestion-transport-penez.51.15.131.213.nip.io
le-12727029.165.227.253.84.nip.io
le-166.apps.funcionpublica.gob.mx
34.120.221.172.nip.io
34.36.244.207.nip.io
1c-integration-ms.review-mr-663.158.160.2.165.nip.io
35.186.247.158.nip.io
34.49.215.194.nip.io
34.149.7.194.nip.io
processwire.67.227.237.109.nip.io
34.160.158.234.nip.io
34.149.255.86.nip.io
heraldo.67.227.236.238.nip.io
34.111.2.63.nip.io
iotagentjson-command.217.172.12.243.nip.io
34.49.109.147.nip.io
34.160.33.237.nip.io
34.160.131.195.nip.io
34.160.192.78.nip.io
linc-demo-area-serenity-valley-prod-blue.35.185.0.97.nip.io
35.186.247.222.nip.io
34.107.180.2.nip.io
actions-history-ms.review-mr-772.158.160.2.165.nip.io
le-19965365.35.205.48.8.nip.io
34.128.150.193.nip.io
domain-101-200.5.253.213.nip.io
wit.fabric8.35.187.110.5.nip.io
a.git.git.spojasvxahtdiazijduy.51.210.123.220.nip.io
34.149.7.147.nip.io
34.96.127.41.nip.io
34.36.152.7.nip.io
34.111.171.14.nip.io
34.95.121.223.nip.io
34.98.114.17.nip.io
35.241.37.242.nip.io
45.32.84.183.nip.io
35.241.6.191.nip.io
areadotaxista.34.111.12.18.nip.io
34.98.100.251.nip.io
34.107.230.204.nip.io
allsmilesdds.net
34.49.209.217.nip.io
148.251.175.78.xip.io
34.107.169.214.nip.io
34.111.164.64.nip.io
34.98.124.254.nip.io
mail.marine.103.250.232.10.nip.io
35.227.249.192.nip.io
httpbin-domain.34.149.120.22.nip.io
199-180-114-209.nip.io
34.49.128.245.nip.io
35.190.32.115.nip.io
128.199.227.25.nip.io
144.24.197.219.nip.io
52.19.13.58.nip.io
34.36.214.103.nip.io
34.107.226.54.nip.io
argocd.34.149.209.34.nip.io
allsmilesdds.net
bikelibraries.yorkshire.com
registry.43.134.233.105.nip.io
benmart.108.167.157.206.nip.io

Certificate

The complete raw certificate details for www.healthbasedbuilding.103.250.232.52.nip.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviTfPbHcyHr82pf/KUGE
NG/0AHBk8Bl7c4BnbnlwMoLXy/0A9BqPy89o+KnBmVhsaHCFi0wsUODAXS37uBPX
/0+Bo+vpq1nJjPluGqOuLPZEjiKy4eqvQkFly96GJOhgaxdTZ2wN4PS5TVd2XOPj
k1p8uzGgqwFJOjRq2cl2HwUbqIbgV5uGFKJgSH9x8rz7HMaDtAoRNZeJzc4OKAMZ
vsK62IpARg+onZz8vmvIBhSgWAnLDhK8x0bc47NpTpDh6vAj4yMzZN7g8mSqeE64
prQMxDRy0MQGegZAQ9k2xAKiw2nXFUwBiuLGkX9dV22rjaO9Ikg/2PnbpKUKjD3D
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419684427535168463321137283312341524237759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 03:42:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 03:42:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24003460221740257490709790757190403194424666966360466240275094324372800277971911519673264030163864489520479222383679252966411905535328991915362200223855609712337338392400957087908053691929841213491042780749645693027470934967516240512817607889371475385934355250579049078381717526770149946117656758843635228043110838239200401955119334930721914164548116596728558700102391157570212859587180027471087665836512864756229513152681571169570597091736822711151764769226003526895224145537387893460686059602531316008619174902208885153416151020873256081375695759187845607562319707685827520615870382542661202436671018878219824513957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1cd016b545e1fe1822aa32a537299de79995b0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001898b5b732b000004030046304402202ddb40b42541bfdb2c6845846af4b66ed11115353f264fc2275f72fe0956380502200f95be859a1b0f79a7e4cfc17acf9dfde0c1e70ab377c3becb8cb7e8ff75acb0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001898b5b73930000040300473045022100b030027089e209bedd69321bd20271d49199aebc7d2c9c1ac295fa4334a4b84a022064ff907c5573f58c7528d2a4bc1d5200f64c552f0515bb120de1a2a3161d7bbd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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