jrcb-lar01.byu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:f0:d8:31:01:98:7b:a3:4c:40:e1:b9:fc:e3:46:1a:7b was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jrcb-lar01.byu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:f0:d8:31:01:98:7b:a3:4c:40:e1:b9:fc:e3:46:1a:7b
Serial Number (int): 270164054217378514790687876615648177429115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:60:1e:57:03:ce:76:b8:57:5f:68:3b:9d:63:2e:26:28:02:ce:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:2c:5e:63:4a:42:5d:3e:f7:8d:b8:50:8b:55:2d:fa:b4:f8:31:a6
Fingerprint (sha256): 02:82:bd:43:8e:95:ce:a1:6f:dd:e9:01:45:0e:10:17:e9:8b:5a:4d:93:4a:29:da:36:8c:89:70:8d:05:ea:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jrcb-lar01.byu.edu

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jrcb-lar01.byu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aclars.org
forbinsituationsofcrisis.org
g20interfaith.org
iclrs-ox.org
iclrs.org
jrcb-lar01.byu.edu
nepalconstitution.org
original.religlaw.org
oxford.iclrs.org
religlaw.org
strasbourgconsortium.org
supplement.iclrs.org
talkabout.iclrs.org
www.aclars.org
www.forbinsituationsofcrisis.org
www.g20interfaith.org
www.iclrs.org
www.nepalconstitution.org
www.religlaw.org
www.strasbourgconsortium.org

Other certificates including the domain name byu.edu

(limited to 100 certificates)
mentoring.byu.edu
cdt.byu.edu
ifip.byu.edu
is.byu.edu
*.byu.edu
emsweb-dev.byu.edu
byu-oit-swat-trn.amazon.byu.edu
elcwriter.byu.edu
civatthemoa.byu.edu
print-drivers.byu.edu
byu7.domains.byu.edu
homecoming.byu.edu
arts-sandbox.cfacarts.byu.edu
jdtobe.byu.edu
helium13-idrac.byu.edu
crashplan.byu.edu
sup.osc.byu.edu
magiccvs.byu.edu
*.sim-dev.byu.edu
ysa49th.byu.edu
fhtl.byu.edu
titanium12-idrac.byu.edu
byu-oit-paymentsystems-dev.amazon.byu.edu
spacecraft.byu.edu
dev.byu.edu
phdprep.byu.edu
humanities.byu.edu
www.idealabs.byu.edu
humanities.byu.edu
cpcalendars.byucougarcapital.org
jpf.byu.edu
humwp-farm.byu.edu
employee.osc.byu.edu
corpusconference.byu.edu
oare.byu.edu
scholarsarchive.byu.edu
ifip.byu.edu
training.titleix.byu.edu
uconnectlabs.com
jrcb-event-scheduler.byu.edu
test.byu-org-trn.amazon.byu.edu
byu-dept-hawaii-dev.amazon.byu.edu
marvin.byu.edu
bluto.cs.byu.edu
loginerror.byu.edu
avi.fhtl.byu.edu
enclave.byu.edu
panda.byu.edu
*.dev-oit-byu.amazon.byu.edu
byu.edu
byushowcase2017.com
jrcb-cdn.byu.edu
vita.byu.edu
hbc.byu.edu
sebulba.cs.byu.edu
magiccvs.byu.edu
zappala.byu.edu
newsnet.byu.edu
uconnectlabs.com
rocket.byu.edu
vetfinder.fhtl.byu.edu
ifootball.byu.edu
gestudy.byu.edu
drupalebc.embc.byu.edu
byu8.domains.byu.edu
byu8.domains.byu.edu
aphasia.byu.edu
elc.byu.edu
osc.byu.edu
aluminum03-esxi.byu.edu
gestudy.byu.edu
acm.byu.edu
helium02-idrac.byu.edu
api.muschoir.byu.edu
compclinic.byu.edu
api.dental.byu.edu
saascon.byu.edu
api.cfacprweb.byu.edu
organplayingwiki.byu.edu
resourceplanning-dev.byu.edu
we.byu.edu
sitepublisher3.domainssupport.byu.edu
vita.byu.edu
*.byu.edu
ypay.byu.edu
byu-dept-shc-dev.amazon.byu.edu
ucs.byu.edu
msedev1.byu.edu
lsopencloud.byu.edu
sl2web.byu.edu
humwp-nonfarm.byu.edu
compliantmechanisms.byu.edu
hummedia.byu.edu
itb-lab-asa.byu.edu
jrcb-lar01.byu.edu
womeninbusiness.byu.edu
brand.byu.edu
imaal.byu.edu
*.cs.byu.edu
planningandassessment.byu.edu

Certificate

The complete raw certificate details for jrcb-lar01.byu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270164054217378514790687876615648177429115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 18:28:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-20 18:28:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jrcb-lar01.byu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799435655146516303903710229779644424969523095480392586729753105949830642086368233422684469977573570462529541743937192072791268595511261387067982574645583453055705032484781214399646531053328768521071538114129684510492744826077086502372600630101583337369095908157902555432364557200339322402430958974572503151007920832201501796792706663698664525102333729011421008332470146666046569997126113047568316282245383056834447972510333510500238989321851309103126154605098473699950633493184980130215748015088699462410554822070525030798892948642151665014271213694873656575457176772973956602497309958206331066469644424949504474018968124318535233036763899364313586581863915168258983559932218189369666251799047429853372059851945242856844314865165180667847661003452414733355686751167627434836407301259704199058696236539618325523967939265466068183132976504055082133859226495866075681010392499429336123760846424957470555989436874213676362545634792793278866179936833274925420705679622159723080535507380237076840732670519758104154380113822997062646451814482858445471212906448033449824728394085835037281835666339200423174926951302490649912172519338006364651952697406074947793713465186013340400859435485416228109737964424924247621669908428606471012297706753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a601e5703ce76b8575f683b9d632e262802ce3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (420 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbinsituationsofcrisis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g20interfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iclrs-ox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iclrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrcb-lar01.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nepalconstitution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'original.religlaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxford.iclrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religlaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strasbourgconsortium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplement.iclrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkabout.iclrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aclars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forbinsituationsofcrisis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.g20interfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iclrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nepalconstitution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.religlaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strasbourgconsortium.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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