www2.abacusemedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:0d:13:ca:72:9a:e6:89:af:50:5e:9f:ca:aa:c3:ed:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.abacusemedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:0d:13:ca:72:9a:e6:89:af:50:5e:9f:ca:aa:c3:ed:e3
Serial Number (int): 293000500642640222968950966806173106564579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:08:98:10:3e:33:88:8a:c5:cc:f2:79:3e:92:13:e6:a3:36:44:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:8e:c1:91:1d:fc:1f:5a:a2:55:46:47:7a:f4:54:d5:12:7c:19:95
Fingerprint (sha256): cc:d2:f6:76:4b:e9:7e:03:67:72:61:d8:89:94:a0:44:fe:a4:33:ed:51:2d:82:ac:dd:9c:88:00:22:01:be:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.abacusemedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.abacusemedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.abacusemedia.com

Other certificates including the domain name abacusemedia.com

(limited to 100 certificates)
adtest.abasoft.co.uk
adfe1.abacusemedia.com
adfe1.abacusemedia.com
sts.abasoft.co.uk
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
adnoncentaur.abasoft.co.uk
centaurmyaccount.abasoft.co.uk
helpdesk.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
adtest.abasoft.co.uk
*.abacusemedia.com
adfe1.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
adfe1.abacusemedia.com
addeployapiweb1-uat.abacusemedia.com
az-adapi.abacusemedia.com
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
www.abacusemedia.com
adtest.abasoft.co.uk
remacc2.abasoft.co.uk
adnoncentaur.abasoft.co.uk
remacc2.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
*.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
adfrontend2.abasoft.co.uk
www2.abacusemedia.com
*.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adfrontend2.abasoft.co.uk
adgate-internal.abasoft.co.uk
addeployapiweb1.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
www2.abacusemedia.com
adnoncentaur.abasoft.co.uk
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for www2.abacusemedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLfbFeHGoVdk72lAn/Rz
QUAg1DNxjTiJxrEj1g+KFziH3dR4lf8wDAHnoeNYRd7stlVMNFisvyqCfyNV428c
AW25vGfVciAVy8qzFNG7ONZZm4kd6ftc0ejensz4zq+GDodHVDqP0kWbCOiYG6iC
g2UM5p3ncs6iyHa0xrhRFc7Vgxa0md5wrs4qN/xgNEd30cC2TkPwhE0QsVkXmN10
3dsu5onBGgfJ43LFTtwT/a5IC5yU07QCfslXB7ig7SVEd8RGJseP2X01d5xF9MEB
sI6erO5bZhsWJJx38dyaBPtHgY+p8uvUQ8BqyB27WZutfUmNMuQZe5X4EjoWCRfP
2hVlE33w0SSwzB8SmznHuSIbPC+HIgS8h2+ktTt1X+9OWexIXfCI8vvDrXrr2hnS
9DZFmeYx/2w6OO7gV00w/G2QFukjsEUNEPTOgVLidoEFlSgfpXk1S6mnapwJeBbh
rWdEvB07XqKefWmH4ewUvdypNyYySGrixQg+3lXTIL9FFTADjrlqxIXXtfc3Ql7F
n5LMAIHKDLwoP83MbDb6RkOmlEEh2toc9pF3IkXbg3RfeV179vVVat012fFdmEg5
Mwl5NjFsj7j8Tasfqgov0QennidqvfbwEHPV569afwHt3JHEzqxhNsBcnv+XU7l4
kunr4oiyri8Yz8oNb1NFDAUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293000500642640222968950966806173106564579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 04:58:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 04:58:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.abacusemedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786221607288844668769341054932222235338997173118800588548933935660708597173962043810496346644617593314283139866612396408790228395345682589283852370531365736507910249318886544870314475431836692821546098529809268682972453920931566163659148090905097436583315029517767676250774858832071589933679490262438551432387901406841407173119664954411947526659649108538111609521772040719606541811938981494920983353794195080553760070284274199770274663027210456402232235493438754126523459967247128815979091119458241578664295357664953171868082316299038381071287406498439395913894639899001348719033401969311249540673128595397957261996931262576821601343224256539139683400244763389075404237064036046066009885523296087449911633616531339825839561464177233464077136443495068320014281564119420727292733416612804050069499960529462716025666330721344925745161767078599831169323360581883269616830492681175758417681322885272449071621434421533118551057966966013977292678570484639255845714352459866438097580598145266083086799497936840216576016957067903852383295971499163128421356960582463410761521499226722977128029063462366370831492148191489450475342163429737213288309082648569757208317161938844880788977574244000830733500515757895165184318658504719041509913332741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60898103e33888ac5ccf2793e9213e6a336443c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.abacusemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd0faf48600000403004730450220098632f1720d00881640c09d9deccfa397627a4912a9807ae41dd5bfdd60a2ce022100c49723c93570e9331e7dab546d0c532385654cfe8bf0acc6028f114ddd76fb1b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fd0faf4bd000004030046304402207ef7dceca654a1bf63f80f7a6ae6675b27f7f5e807bcb7d3a9090045c0e6ae6d02202607a8a12b046a8bbfc31cce5e2bdc4d3954b7a9ad374d22b6380fa0eb4873fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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