betham.nmsdev3.com

Issued by R3

About this certificate

This digital certificate with serial number 03:53:e3:b2:8c:30:e9:4c:f9:37:c9:a7:0c:97:72:97:4b:03 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=betham.nmsdev3.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:53:e3:b2:8c:30:e9:4c:f9:37:c9:a7:0c:97:72:97:4b:03
Serial Number (int): 289882956077015126884266400980563448515331
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:75:3a:ad:68:49:b9:cf:d8:4c:8f:25:53:72:e6:cf:4a:0a:26:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:6c:41:99:7f:91:2b:4b:bc:42:87:d8:2d:3a:00:d0:7c:ed:e2:bd
Fingerprint (sha256): bd:69:42:69:b6:2d:4a:58:52:13:42:3a:a4:0b:f1:82:b3:d1:ae:c9:6b:dc:f2:26:03:0a:1a:01:5e:dc:c4:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate betham.nmsdev3.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betham.nmsdev3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.betham.nmsdev3.com
*.bethamsatx.org
betham.nmsdev3.com
bethamsatx.org

Other certificates including the domain name nmsdev3.com

(limited to 100 certificates)
penndonateyourdata.com
hfpd9.nmsdev3.com
mail.deb.nmsdev3.com
westendsynagogue.org
hfpd9.nmsdev3.com
nmsdev3.com
www.hfwaa.org
*.hfpd9.nmsdev3.com
nmsdev3.com
ganyc.net
www.healthfederation.org
*.westendsynagogue.nmsdev3.com
*.ganyc.nmsdev3.com
dbei.nmsdev3.com
nmsdev3.com
*.orhadash.nmsdev3.com
hfwaa.org
www.westendsynagogue.org
cpanel.samplings.com
*.dbei.nmsdev3.com
*.payment.nmsdev3.com
orhadash.nmsdev3.com
www.debra.org
*.adap.directory
nmsdev3.com
blueskymeditation.com
www.healthfederation.org
mail.hemingwaysociety.org
bluesky.nmsdev3.com
donate.nmsdev3.com
mail.healthequitypayment.org
www.ccebd9.nmsdev3.com
acel.nmsdev3.com
licensedtourguide.nyc
hfpd9.nmsdev3.com
*.adap.nmsdev3.com
glomerularlearningnetwork.org
*.nmsdev3.com
betham.nmsdev3.com
*.glean.nmsdev3.com
nmsdev3.com
*.aces8.nmsdev3.com
healthfederation.org
*.newyorkcitytourguides.org
westendsynagogue.org
*.paymentinsightsteam.org
www.glomerularlearningnetwork.org
www.healthfederation.org
*.ganyc.nmsdev3.com
www.dbeicoe.med.upenn.edu
temp.healthfederation.org
*.intranet.nmsdev3.com
adap.directory
blueskymeditation.com
nmsdev3.com
adap.nmsdev3.com
*.betham.nmsdev3.com
mail.healthequitypayment.org

Certificate

The complete raw certificate details for betham.nmsdev3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LKrU4+pJAzhZ7j08/Zz
TEL3N14NhRECk/vqtAp8Z/THNSqqHjt7932Fr8KZZTlXNK4hHy6/u1WEle9CzEdr
mQlf/AZ75E6aZ2TS4T4oHQ5isrVJV7NnQPW8eBk2WgsgeVioTCaPCfegOWfUSUdD
7VcTvWOHJ4Uy+sfAgABwnsz0JTuR4Qrh3nh58ixLsxZ4f1Eti2a7CTbgYzQfgfZC
rAZkWw0RJkdDjB66jvL7XnufFlM0SgdvqGsKRdBK3ElPPn07ewh8R1ETq44JALd8
2VkOwKVsWxyGEk/5g/xPNYF5PXdw5gWlOI2KumK8fzg+Y+sCX6TmflL0xBnBEJx7
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289882956077015126884266400980563448515331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 03:39:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 03:39:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'betham.nmsdev3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27860532180368491371148144310198914921048845777160738769555872462663204236877590960109434358276394279295929199118725552178810463703112241531021826461666039218408809507201354266659512079954804797989240406065218549601980084643540256216967057445669433068644329417849780064526347971847147262213901797543354724335235864032101749405975001361383721263143198087587225438430861554578060769899721843047031617107832417210075637030691239781034301201438494992260620191955311307484735069736707331266323844987693782730871354606701141568459986455586462186817063886751438008692247569862774599154065617955324724024472189567692514818933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf753aad6849b9cfd84c8f255372e6cf4a0a2679
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betham.nmsdev3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bethamsatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betham.nmsdev3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethamsatx.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fa8e5397d000004030047304502200ba7961cff30983545bed2218d9c02a204b812021a57afe05accabc0a6c144b8022100d9f6c1705cc8ddf6c2e8d99f3425a9dd47bd655b5586c7754f822d3ec344c3ec00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fa8e539cb000004030046304402207b47a40bd8b26c25b3a2b10e1fb7763dc870c6f9a12f51f86e4471d57a09e729022069691254da5f3de9f0345bb9cf123d43be13e2a3c07bbea5362990a44fcbb5a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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