*.veracitiz.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:23:22:08:56:49:fb:b7:9d:e6:1c:be:7a:61:09:d9:f3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.veracitiz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:dc:23:22:08:56:49:fb:b7:9d:e6:1c:be:7a:61:09:d9:f3
Serial Number (int): 423357964136688906306772579337745579235827
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:f5:cf:e9:1f:2a:15:05:08:25:d9:76:50:b6:85:0e:c4:f9:6f:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:6d:23:c2:4d:09:ce:23:a0:62:7d:43:4b:b5:77:74:23:aa:7f:a9
Fingerprint (sha256): cf:31:9b:ec:36:ec:d2:f9:6f:ad:d5:09:83:6b:f4:ff:89:7f:46:69:98:b8:93:a9:14:04:4a:e3:ad:fd:40:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.veracitiz.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.veracitiz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.veracitiz.com
veracitiz.com

Other certificates including the domain name veracitiz.com

(limited to 100 certificates)
ibmpromotions.veracitiz.com
veracitiz.com
veracitiz.com
ibmpromotions.veracitiz.com
www.assessments.veracitiz.com
veracitiz.com
ibmpromotions.veracitiz.com
ibmpromotions.veracitiz.com
ibmpromotions.veracitiz.com
ibmpromotions.veracitiz.com
*.veracitiz.com
veracitiz.com
*.veracitiz.com
veracitiz.com
veracitiz.com
veracitiz.com
*.veracitiz.com
veracitiz.com.cp-in-16.hostgatorwebservers.com
veracitiz.com
veracitiz.com
*.veracitiz.com
veracitiz.com
veracitiz.com

Certificate

The complete raw certificate details for *.veracitiz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdhqi4km/U7iG3r61nXq
YO3fnHXOYarq62vsK2mKvxKvseiAIOUmIzMXZ4WKdibtSLiKT5e5x1g63DsvVLWm
ggEDyLeauX29qVRkgz5JHBr1oGERc4/6EwT8kLmTMZR14c2Bjd/+3c3xJRzNQ2jF
x/H7YGVZpXONwIDBgDqPhyyTGD2cJpvBkK1XH8MHw/t3oc8PobQoA1UjhXcl5nFO
TVBVipkED79j6qYI6R8wrlAKkmGtf/zdu+5wwJNCMn3S/ANeGo656MunH6DNmVQk
gv5LixmVCP5F4UBzuTsxoKo7Gkyam6umTvXwm+CMNskAfqkWSzpkN2RPg9sk/Hc8
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423357964136688906306772579337745579235827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 17:07:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 17:07:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.veracitiz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21945945560693281175525800330357470996585329138502023165807158294846569074865184054694641267823696530952152349331032276287401982002583938605117361956790137693935872659929066088351825775157668657759512705146012200849730008842019677699036069252178478749414089543251997001147134838038562171983639578973339587016136109325622937416400857611106982168192981397042554436561780398386370510729937748375585619958554774666007544204386710160681515479172674919945475134747495535579462365025157925077549971798429489127292813398778313817510573404975305756040602370638714033211119405818602451379393213821000492932686858742810344373329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01f5cfe91f2a15050825d97650b6850ec4f96f53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracitiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracitiz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fa17ccc430000040300483046022100bd0e0d4e0d224e757a00f02698a6ff4d93bb8bd0d73145260d0588b56d1956e7022100f621bd80f757f36c07dde92863f061f4be1a814938cc8ad5544e723611c8223600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fa17ccc5b000004030047304502201e4e9b622995b1dd5923b871803c7e5d4d440ba90d8e61d645f288d848bedc3f022100f12e476d17fbf6d5d861c0324e68e0a93ed9ff7adae5b0576db80cccb74cb421
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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