helpdesk.abacusemedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:d3:03:f5:2b:3b:ea:db:e0:a4:c6:2f:08:6f:80:09:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.abacusemedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:d3:03:f5:2b:3b:ea:db:e0:a4:c6:2f:08:6f:80:09:b0
Serial Number (int): 306534617885461517396038808785824256100784
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:6e:a7:c3:95:4a:b4:45:f4:a1:2a:f9:fd:9d:c4:67:53:69:af:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:8d:b2:11:8d:b1:f9:d0:74:74:47:89:ab:e3:e3:72:45:58:99:08
Fingerprint (sha256): fc:83:cc:03:e1:17:3f:86:96:3c:64:86:95:76:f9:7d:00:2b:23:e9:63:4c:3c:41:79:b4:98:1f:69:5a:ff:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate helpdesk.abacusemedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.abacusemedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.abacusemedia.com

Other certificates including the domain name abacusemedia.com

(limited to 100 certificates)
adtest.abasoft.co.uk
adfe1.abacusemedia.com
adfe1.abacusemedia.com
sts.abasoft.co.uk
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
adnoncentaur.abasoft.co.uk
centaurmyaccount.abasoft.co.uk
helpdesk.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
adtest.abasoft.co.uk
*.abacusemedia.com
adfe1.abacusemedia.com
adtest.abasoft.co.uk
adtest.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
adfe1.abacusemedia.com
addeployapiweb1-uat.abacusemedia.com
az-adapi.abacusemedia.com
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
www.abacusemedia.com
adtest.abasoft.co.uk
remacc2.abasoft.co.uk
adnoncentaur.abasoft.co.uk
remacc2.abasoft.co.uk
*.abacusemedia.com
adfrontend2.abasoft.co.uk
*.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
adnoncentaur.abasoft.co.uk
adfrontend2.abasoft.co.uk
www2.abacusemedia.com
*.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adfrontend2.abasoft.co.uk
adgate-internal.abasoft.co.uk
addeployapiweb1.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
www2.abacusemedia.com
helpdesk.abacusemedia.com
*.abacusemedia.com
www2.abacusemedia.com
adnoncentaur.abasoft.co.uk
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
helpdesk.abacusemedia.com
www2.abacusemedia.com
adtest.abasoft.co.uk
helpdesk.abacusemedia.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for helpdesk.abacusemedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306534617885461517396038808785824256100784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:52:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 23:52:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.abacusemedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907650691755077272103242725363140180547221990412490655120960311026439435489649092280384544859670821114575747745702359423858182626712949132374059436333343588278227347201695622875611091421834439386377025905971050297316571730926517516146806935556432599066236168621272723896171141135894571935701842325077522789057362541916836462740305702856793179044121450384102877578681201184131449470195254311540718558395131555728357785008177663382105348216865208290539458985641029373594692490368715702251522116642620801736561467141652904920419574963977304599778501517863121273744407116835203852560096059173277890649460620417381179927197526602728439601435864960011085408951838563956616163090800888399862073926334938474003436714099860766564374446110552123773326462048423014549009143672273795317138725613513520815836231363832312608358420950762318469140819586189012560651675434159849767144558656326211980232914825990459636277050452534169957138971894462078010851401995890713088682555161934394114497431637867617562340788177045991562414346875638279580004968968167184155197554307057437751315454263622518799318422714390727088676594978574249384815788139623473407265412125258050285709619920810010986660182958495548255356892868470258015462367482539460695278837521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							146ea7c3954ab445f4a12af9fd9dc4675369af90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.abacusemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4f24390800000403004630440220438c030c33985b501c2577271b5b3cf469a3dddd064e34b7660c4e3fd190937502200513d0b2d2dc7afdcfc0b4b0f6216bce06c7abc3a99f7d8e711399a28ed86d9b007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4f24394e000004030047304502203a78cad51b67385c9ecf2e6cf4b5f09cd520263f1269cc6b02429adb24b0be580221009770c9e8873517390ee0c9d0b308850fe1cb35fc00f0d59df19cee19e72db77e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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