cpcalendars.byucougarcapital.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f0:a6:ce:3c:e7:1a:b3:95:93:8b:ce:84:4a:01:ab:f1:92 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpcalendars.byucougarcapital.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:a6:ce:3c:e7:1a:b3:95:93:8b:ce:84:4a:01:ab:f1:92
Serial Number (int): 430338634483773917501325717920640528019858
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:40:e5:c6:ee:82:df:1a:65:23:4c:89:c9:5c:7f:fe:f7:9e:0e:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:e4:35:0b:08:11:ff:7e:d4:06:13:65:e4:2e:16:da:c8:56:1d:87
Fingerprint (sha256): 00:ec:ed:9d:1e:10:c6:3d:59:3f:02:89:4b:c2:be:d7:4c:c7:94:6a:38:da:9d:47:26:1c:58:a3:bd:03:a9:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcalendars.byucougarcapital.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcalendars.byucougarcapital.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.byucougarcapital.org
autodiscover.miller.byu.edu
byucougarcapital-org.ignitebyu.com
byucougarcapital.org
byuia.ignitebyu.com
cpanel.byucougarcapital.org
cpanel.miller.byu.edu
cpcalendars.byucougarcapital.org
cpcalendars.miller.byu.edu
cpcontacts.byucougarcapital.org
cpcontacts.miller.byu.edu
mail.byucougarcapital.org
mail.miller.byu.edu
miller.byu.edu
miller.ignitebyu.com
webdisk.byucougarcapital.org
webdisk.miller.byu.edu
webmail.byucougarcapital.org
webmail.miller.byu.edu
www.byucougarcapital-org.ignitebyu.com
www.byucougarcapital.org
www.byuia.ignitebyu.com
www.miller.byu.edu
www.miller.ignitebyu.com

Other certificates including the domain name byucougarcapital.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcalendars.byucougarcapital.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9r7kAnbIu3rxpznt+ZK
i9DsMTDvhag9byx/YIaancCqclDwwQkjnZVfmXHzls/OY2TPOlBvw2iAsAOabYeC
f6/VSqN4H4HYygagW9JvUGpIsIW4xv+K44nsXnEWtUYnDDBR5AaLqDE607m2wQee
B7Nrdzgbi60Hqe38chGBbvvtvBRK5noaQR4+DWYuQDV8zZJ4qrORp1RGgylTkvHV
3zPJfZo29AQp9Ja3VMaA7yoqhKJYxMEGy2j6R8YfqLmS0LxPWmOcg4xnqetNjsxT
K9W+zuYm+mzj7uqA+Xd/Jr85C1OqwbNx0odhip8Wt3F5zw131zY6fHC8vfRUdFLh
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430338634483773917501325717920640528019858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 21:55:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 21:55:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcalendars.byucougarcapital.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26239313505508984123358740461927699123171448504584940200009266234180335706612425617151266393158751482908198500902816358230979653726936945870699369553707428831386330761415123216557198148892701309150381571017718513201676804343569403983610418444464507189702267649977445899939670863841192565184056839733474438077737732238255935437179658775716072776458129133339532420588657644643130098649623688616653433465038031629050231263157519633638710116664385529362613036111064494037327828955867173462637775346639665988474292645411081270881872095921969350056277746712285858541835107159750973577760344310946844713639997965350825288147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4140e5c6ee82df1a65234c89c95c7ffef79e0e96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byucougarcapital-org.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byuia.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miller.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byucougarcapital-org.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byuia.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miller.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miller.ignitebyu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018348839ebf0000040300473045022100cb752a43caea4959af89e42f308632a92bbe13120630775b47b1a3f2caa7a58b02206a9b744a8b010daf84e06ee2f4c87e0f6c01d73ef5961c7ff7ecc9b5b1df0c1c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001834883a0440000040300473045022066e1710ab3101feb9d326f61feb0c554a4aedfb372833bd8c46b29a7409a3ebb0221008b867dbc23739ac13e5bef770f3ed3aa7690eb2897d0abb3304e1bc32ca2754f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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