business-techs.bfitec.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:be:db:f8:7d:69:79:00:f7:83:2b:5d:46:92:5b:e8:20 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=business-techs.bfitec.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:be:db:f8:7d:69:79:00:f7:83:2b:5d:46:92:5b:e8:20
Serial Number (int): 328285897183969576152314012561838385653792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:e0:5e:f8:55:04:81:10:6f:90:08:61:70:59:c8:19:d0:78:d4:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:55:57:f3:29:4a:2e:23:5e:77:63:28:01:ca:bb:db:38:e7:45:38
Fingerprint (sha256): 00:f6:31:fa:cf:eb:98:20:6b:87:f7:8f:72:ba:5f:e4:a8:e5:1a:d5:21:62:c7:b3:ec:c8:52:fb:9d:3e:e8:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate business-techs.bfitec.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for business-techs.bfitec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

business-techs.bfitec.com
business-techs.com
twinfallsoptimistclub.bfitec.com
twinfallsoptimistclub.com
www.business-techs.com
www.twinfallsoptimistclub.com

Other certificates including the domain name bfitec.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for business-techs.bfitec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYd3cXLEYsuCSU+bP2NK
UQa1yLap0Ng7HnzhxM4tU06ikCxwx3dpdSovlvupK0aTU1b8nJkze8DeiYcUel9D
9s0aJaZVdatOtDOYhLklSdBj3FcqG+G5YRCkumN7vbPoWeBima+98tZRFO0tjNAh
G2w58wke/fTEC4zxwb9R1pBtFlInk7hYbT98rm6/oJdeY1SuZCVXsthrNKy9G/a4
S/Kyt884ZGt6vHPYL1P+wtKECdXLkoxFx1sjiV7PvYz1viAohF41i9a7XJpHcjxo
cmWjg0LskGj04Ivx2uWxxYwmcJDwubRe12hFaseNMMddFSvYDCRxlssElT4B8N1e
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328285897183969576152314012561838385653792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 15:27:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 15:27:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'business-techs.bfitec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20896121377159746687609710309628933189988000340178589657401316687432851049453822521840448523238429334707992682050049057551859354205661451918352268139203824115048634710797260031293116852071321011725104857005360425434799751401917930311081633387262420700048347414076411194844342112120158512677755117746586193878076789609288253115178884012855113341205727823455699682867718963195591390164330283986416656452856728738620560622193742162166004414550116200189211407813346492218588300531184644436799270029486117029401304140637497068583970260544357464594153711253177775022378486626755161237799847422418804750819471035330769804929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30e05ef8550481106f9008617059c819d078d435
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-techs.bfitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-techs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinfallsoptimistclub.bfitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinfallsoptimistclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business-techs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twinfallsoptimistclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709c12891c0000040300463044022061862688b943bc9fe3178ca8edbce33b8886f1e265a022a7070e3d0f07139c4002204bdcb70fc5b29d3799c5bfb3a93b840b6ce361247b2e71996fc5727e789a797a00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001709c12894800000403004630440220272f07f4e11f251412c04f9c25d1918f4dd164094cbe999b48cd6665818a1a54022018fc2046b135d93b9410018fa35215da2aa862f4a20082179ef66d58bbc0d622
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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