healthbasedbuilding.103.250.232.52.nip.io

Issued by R3

About this certificate

This digital certificate with serial number 03:be:79:70:16:76:c4:cc:ed:56:8a:23:c2:d7:3a:c2:04:e4 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=healthbasedbuilding.103.250.232.52.nip.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:79:70:16:76:c4:cc:ed:56:8a:23:c2:d7:3a:c2:04:e4
Serial Number (int): 326151926090620019979837986614492168062180
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:58:0d:91:03:41:b3:e6:0d:86:ed:53:5f:5f:66:a5:b8:4c:21:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:90:db:d8:aa:98:68:07:3e:92:97:40:4c:97:e8:7c:a6:4b:0e:63
Fingerprint (sha256): e9:e8:f8:37:b2:95:2a:b0:a0:aa:a1:be:4d:b2:1f:83:d4:1d:ad:d5:f8:00:d4:46:f6:6d:50:cc:d0:b3:c3:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthbasedbuilding.103.250.232.52.nip.io

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthbasedbuilding.103.250.232.52.nip.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.healthbasedbuilding.co.nz
*.healthbasedbuilding.com
healthbasedbuilding.103.250.232.52.nip.io
healthbasedbuilding.co.nz
healthbasedbuilding.com
mail.healthbasedbuilding.103.250.232.52.nip.io
www.healthbasedbuilding.103.250.232.52.nip.io

Other certificates including the domain name nip.io

(limited to 100 certificates)
47.240.52.6.nip.io
35.186.253.68.nip.io
35.186.238.84.nip.io
34-160-94-57.nip.io
85.181.120.134.nip.io
34.49.67.234.nip.io
test.135.181.116.235.nip.io
klipp.163.172.179.0.nip.io
le-26875723.34.77.165.130.nip.io
paymentservice.apps.aks.20.79.80.32.nip.io
birthcert-reprint-client.58-71-188-165.nip.io
35.241.33.80.nip.io
34.149.29.169.nip.io
34.144.220.193.nip.io
34.98.81.54.nip.io
34.36.14.78.nip.io
*.healthbasedbuilding.co.nz
34.111.154.81.nip.io
34.49.107.205.nip.io
stg-unid.go.com
34.36.210.75.nip.io
34.111.131.207.nip.io
54-255-147-183.nip.io
34.36.62.174.nip.io
34-128-177-145.nip.io
homelab.46.101.10.37.nip.io
34.238.154.196.nip.io
34-96-86-202.nip.io
le-166.k8s.funcionpublica.gob.mx
db-prod.203.151.21.120.nip.io
herdez.67.227.236.192.nip.io
35-244-241-94.nip.io
other.54.171.149.46.nip.io
34.102.183.200.nip.io
34.36.139.100.nip.io
34.36.56.83.nip.io
mock-target-api.35-227-204-236.nip.io
34-49-129-154.nip.io
gestion-transport-penez.51.15.131.213.nip.io
le-12727029.165.227.253.84.nip.io
le-166.apps.funcionpublica.gob.mx
34.120.221.172.nip.io
34.36.244.207.nip.io
1c-integration-ms.review-mr-663.158.160.2.165.nip.io
35.186.247.158.nip.io
34.49.215.194.nip.io
34.149.7.194.nip.io
processwire.67.227.237.109.nip.io
34.160.158.234.nip.io
34.149.255.86.nip.io
heraldo.67.227.236.238.nip.io
34.111.2.63.nip.io
iotagentjson-command.217.172.12.243.nip.io
34.49.109.147.nip.io
34.160.33.237.nip.io
34.160.131.195.nip.io
34.160.192.78.nip.io
linc-demo-area-serenity-valley-prod-blue.35.185.0.97.nip.io
35.186.247.222.nip.io
34.107.180.2.nip.io
actions-history-ms.review-mr-772.158.160.2.165.nip.io
le-19965365.35.205.48.8.nip.io
34.128.150.193.nip.io
domain-101-200.5.253.213.nip.io
wit.fabric8.35.187.110.5.nip.io
a.git.git.spojasvxahtdiazijduy.51.210.123.220.nip.io
34.149.7.147.nip.io
34.96.127.41.nip.io
34.36.152.7.nip.io
34.111.171.14.nip.io
34.95.121.223.nip.io
34.98.114.17.nip.io
35.241.37.242.nip.io
45.32.84.183.nip.io
35.241.6.191.nip.io
areadotaxista.34.111.12.18.nip.io
34.98.100.251.nip.io
34.107.230.204.nip.io
allsmilesdds.net
34.49.209.217.nip.io
148.251.175.78.xip.io
34.107.169.214.nip.io
34.111.164.64.nip.io
34.98.124.254.nip.io
mail.marine.103.250.232.10.nip.io
35.227.249.192.nip.io
httpbin-domain.34.149.120.22.nip.io
199-180-114-209.nip.io
34.49.128.245.nip.io
35.190.32.115.nip.io
128.199.227.25.nip.io
144.24.197.219.nip.io
52.19.13.58.nip.io
34.36.214.103.nip.io
34.107.226.54.nip.io
argocd.34.149.209.34.nip.io
allsmilesdds.net
bikelibraries.yorkshire.com
registry.43.134.233.105.nip.io
benmart.108.167.157.206.nip.io

Certificate

The complete raw certificate details for healthbasedbuilding.103.250.232.52.nip.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ5rrE/Mq0lA6ZA8PDR6
Z8qlh8i718rPipzfR2DnJaLXFO2jRj0F3QAS44dQo52jjRGx++8RkE2nF0GtbKEQ
/H3/guFSFeUYQJkI1BD8Dmjwhxk/oaB9IpNXF97/fiMtK/DP9VYhMkDyNW+M4bl7
Rd39o9Wkv7t7HrIGg+xh3H2w+KagVfiED1KnK3ia9OPRcuahM4goUmvGzPO2Mfu1
XMTFPQR7YVsasMFaqdfDD06f40IdFHGVjjuuipMKDClsXFcGMIsPqfxdfU/BBeu1
r5/ng8rh2EttrQqaNWwihQbrwKJqsSSHe80GnWr0DKfdqywS18GrLRTvFt0H4Yv7
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326151926090620019979837986614492168062180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 08:42:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 08:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23810921442078080374982154280650520701585603485551011463391239629404004628745673913153550510799288719754336172440907769137248350049124175752243757980309672107378999721824921478811250344735491928112937502196946013734442366189113547148074977952581492791440175240121015298745282379101213560126366504676465365157398643064208941152739440833799836030719008760534824889673581325828778620160228278908728668941917134890782745410033712059531267829160801382492384140922835887488113236421907001604561750353923064611656383634590116207653546041994213219411926605036482273846742342256200986480060957204315577701153391702666153556871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8580d910341b3e60d86ed535f5f66a5b84c212f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c00b5c1530000040300473045022072d80794f2dd14728a7143352fc7585c828cc6c2efc31b863dfd61b10f5ea5f1022100c6b36b8efa796997a5ce94c3bc0008e11c118993b89ea62b159d8a7f3d967ceb0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c00b5c15b000004030046304402207d81c570312ca921ebd16f3825ad29657900efa4107ae6f76dd50617879cad2c0220525387f83a66e9fb9b3f2accfad0836e9012e4a3a13579b5d5936f9d56d1ff07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001748f44cb6bc93517b79a5fc282548eb299f2992e0342fe645974a7dfec3a0389a9ea249e763a3f65997309ba3415be681a22e9b606bf7a43a26a6afc4630ebbaab6475bc9c5d616c1bce709a140cb7c78ae997969fa452367091b350e61deb85a05ed4b239607fc314b6c437bc7eb51efa7c79f08a5e647e2ec4ee50ca7db662cefa9bbf7574206ae9c37e8081992d154d44060595ab2e9ed140a72d34f5aec7f50dc91546e22bf3ccea519e4725bf93b2db188e1d70adb211f40509a32a2e33f5d3b01092070a304ed59524153b54cc4964af0c89e3f25d13717b47d613fbc8fa032b0b0e4e432f36a8519b6db4057b026eebfd90a3a100bc6a277c17d926c