adapthealth.org

Issued by R3

About this certificate

This digital certificate with serial number 03:21:38:1e:fe:9c:73:ef:f3:72:4c:9f:f7:a8:62:92:57:f2 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=adapthealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:38:1e:fe:9c:73:ef:f3:72:4c:9f:f7:a8:62:92:57:f2
Serial Number (int): 272640773604468934106667902155280136427506
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:b3:9b:60:32:e0:ea:b3:f3:5c:ec:9e:3b:14:e7:8e:dc:bb:17:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:b4:d1:82:b9:47:df:a3:99:6a:ae:af:c1:6f:c0:d6:fb:23:8b:e9
Fingerprint (sha256): be:65:2a:d8:42:a7:29:50:ed:8c:3c:1a:12:b3:d7:7c:03:b0:34:7b:2d:1f:e1:63:87:fe:9e:ce:94:ac:42:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate adapthealth.org

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adapthealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

401krescuecenter.com
adapthealth.org
aleutianseastborough.com
bestpoisonoakcure.com
bestsanantoniolawyers.com
bonusjet.com
easternpa.com
enerpactoolsgroup.com
fortyukon.com
gfanz.org
keithcounty.com
keywordranktracker.com
lacasadelahabana.com
marketclubeurope.com
mmadynamics.com
mondiaal.com
prododgeball.com
ssybridalboutique.com
symigreekisland.com
tkd.co.in
www.onlinepharmacyaustralia.com

Other certificates including the domain name adapthealth.org

(limited to 100 certificates)
kiesza.ca
allanblock.ca
kiesza.ca
kiesza.ca
proassislife.ec
kiesza.ca
allanblock.ca
adapthealth.org
allanblock.ca
34755625397.ca
elizabethkeogh.ca
allanblock.ca
adapthealth.org
jenksamericatoastmasters.club
adapthealth.org
mobi.bike
34755625397.ca
allanblock.ca
kiesza.ca
saintgregoryordinariate.org
adapthealth.org
adapthealth.org
caribooranch.ca
adapthealth.org
tes.vc
tes.vc
adapthealth.org
www.chartiq.org
kiesza.ca
cheapcanna.cc
adapthealth.org

Certificate

The complete raw certificate details for adapthealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMhPw/YrrQ+ZDeCf8hDW
wrLc7tRIXjqI/a+yWZjKpImu+QkPOHHsTESK7pS+Bl07kOqEnvo/uQm3ioRdFOpk
+uSmNCo7BLqr3b7YuTQ0VySY5iSRvC4RqJT9n8z6NsUfpj6lGrDQNxsFjQ26dz/c
P8DBUzi3ECaYp19vNQQLTHWhPNQ0Nq2bOMCrf8WD1dPM3Q5zMqKuz6Ex29BDNjTE
NsGdPf0V0vPhkQ+hfc4poRpi8KyVMkvLDOIzzMzSTwRjbwXJ+UrWz0q9I1J4Ibw1
lRTUZd+OXaMkmeWDTYFlmwuPvPw/ESdZ2N2lOWM5b+MLdUkb05PBuW0aby3kIZXO
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272640773604468934106667902155280136427506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 02:17:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 02:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adapthealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23326625437250620213699035874758844681036049038425743613332570174852394319039909486354453675529797738897726748048416512788036027061378883731418468678020055662966712994393399602559482431113044213216137391547438423327803505834522684873771271778101686864093517043264425611393516941743957400894993970245498369418670129045254234315011809992763132678945271627895136975845714073972311424838526122736141446362263915251361506734732573038845353770581241938631761511476028503416079508172075499589255355503258910634465211486034846869952485708230760401246689713983361252294645141287089984129347785219152628839058827686360827416319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0b39b6032e0eab3f35cec9e3b14e78edcbb1751
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '401krescuecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adapthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleutianseastborough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpoisonoakcure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsanantoniolawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonusjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortyukon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfanz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keithcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywordranktracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadelahabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketclubeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmadynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondiaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prododgeball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssybridalboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symigreekisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkd.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepharmacyaustralia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7c6bfeae000004030047304502205da5aaacbbd9fba523d8dae1e2c4a86e2dff582115f650ddbab4e718b4a2c792022100e4f5de76d9c1d282162ebc96ffb20585cea77f2012b08143cb93c816a354ae670076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7c6bfebe00000403004730450221008dd6922929b6f7da0bea963435103bbb30d7f8b3dd73f26744f2bc219de2ca2602200d9242cf8e5dd1c43294406147be897728267f301703793d2abf762049554c3a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094cc9a9bdd2b840192e1511568ed49577d0e2e65d897be67730be3fa1531176426a51ec739bb4f3239cd0be2b40d77a832e876e6d98769cbfdb7d6d1e0a6e85d2f12652d9609102f47ec1166f592375e262eeb63df795ea0864d3e168506bf004f2d4c596c0474a65c860bfe20bfe4cacec2469038ce2118f1a36be4449a5c044c170af1a359bf78897c434a0a19de45c81dd5d12ec31b68cd43203b60a9323c494c0cda803e33d0ae0aa9861511d9191948e03e1430b6be53aa7513bdf555bc472eb66d8d605357cc5c127e3ba9202df92c34ff2011e57c510acfebf1851e45de3282679702c6d88a563fa913ad98bd6183cc221eb6bd0483303b0a89a8e1de