www2.abacusemedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:1c:53:aa:4e:c7:cf:89:1c:49:5d:cd:9b:82:8a:21:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.abacusemedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:1c:53:aa:4e:c7:cf:89:1c:49:5d:cd:9b:82:8a:21:52
Serial Number (int): 320583642438296536326615056724664030732626
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:fc:b9:56:9a:49:1d:d0:83:c3:b0:d5:23:1a:bf:3a:b3:4c:96:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:23:2d:82:b0:f0:ae:ed:c7:4b:5c:e3:d1:cf:f4:77:27:d4:7b:2f
Fingerprint (sha256): cf:b9:6a:79:6e:cf:b9:a8:51:ab:ff:c5:18:6d:c3:ca:b3:db:1d:05:fc:2c:0a:ee:af:41:5c:c1:9d:82:d3:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.abacusemedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.abacusemedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.abacusemedia.com

Other certificates including the domain name abacusemedia.com

(limited to 100 certificates)
adtest.abasoft.co.uk
adfe1.abacusemedia.com
adfe1.abacusemedia.com
sts.abasoft.co.uk
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
adnoncentaur.abasoft.co.uk
centaurmyaccount.abasoft.co.uk
helpdesk.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
adtest.abasoft.co.uk
*.abacusemedia.com
adfe1.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
adfe1.abacusemedia.com
addeployapiweb1-uat.abacusemedia.com
az-adapi.abacusemedia.com
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
www.abacusemedia.com
adtest.abasoft.co.uk
remacc2.abasoft.co.uk
adnoncentaur.abasoft.co.uk
remacc2.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
*.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
adfrontend2.abasoft.co.uk
www2.abacusemedia.com
*.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adfrontend2.abasoft.co.uk
adgate-internal.abasoft.co.uk
addeployapiweb1.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
www2.abacusemedia.com
adnoncentaur.abasoft.co.uk
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for www2.abacusemedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320583642438296536326615056724664030732626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 04:08:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 04:08:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.abacusemedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876568643289308279282504205679839705139518322678850948041980589756119924727583358611286925198897958504147734798215561129278161951484638889491409393470660357729278224369074085044403889087890264216009898960241618478670212874971400165984503975095463521498721771452177090621314539608430411915944290713655654870776343491573278736456317784659649648838603063108561909113074717496362885283374596198881240638390088551050142349448973817207876597579608437672031975345560848382552427982529999144970463211619032556902786148485867899524040683185683294913770938516525711472463962557453812772611879337513976767653047332494281623073877234112717575066384907260790931477055912688595848484541351352671682475421219209449840675897347717438792747161592202688802485340326683960481654049128648964416064686465459568387746166057201010891497296446982252148791080717784731161081411819343551467243423204080521100356666671801625480089581466151452855775218202589599619743587381563413486540781294418066884766214655076155028981822817941089487266192518792439458050787735276825905715820140403600846459821543540789446228916144534895629312337305996386998587681826051349126585160136012991931243255977649606342698117970786893136477912026455960524878805934184141742728158591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78fcb9569a491dd083c3b0d5231abf3ab34c9602
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.abacusemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017105cb13990000040300463044022010452723ade66fb1dfa9a07e05793853aab0f10290301918ac770ce9c895cb8e02207c51e6ea67c297c8cc310ca4346f78de3199b2e3d557691b7b5105f2087f2d70007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017105cb138f00000403004730450221008a5d4ac6d93ceacfbb48afb809f06753308f8e64d9c3c6edf26ec05a0aeb341b02200244a5e85cce0105f65b4dc8b52dc4235ac935fb4003f854fb9a8575ce7ffee4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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