bsanimal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:55:aa:77:86:78:3d:2d:04:e5:e6:77:e9:71:d9:36:04 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bsanimal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:55:aa:77:86:78:3d:2d:04:e5:e6:77:e9:71:d9:36:04
Serial Number (int): 307388846823975630047031548648823637751300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:d2:9c:64:99:58:ad:a7:ab:cf:7e:88:36:1e:90:bc:49:a5:1b:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:8b:af:19:f2:8e:07:47:61:67:66:6d:65:e0:ac:4b:85:59:70:42
Fingerprint (sha256): 03:1b:cc:d3:9c:d6:ca:98:8c:82:68:92:04:0e:a3:b0:7e:2c:0d:46:31:c6:70:91:34:4e:82:f8:8e:a8:37:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bsanimal.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsanimal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsanimal.com
bsanimal.em.co.pt
cpanel.bsanimal.com
mail.bsanimal.com
mail.bsanimal.em.co.pt
webdisk.bsanimal.com
webmail.bsanimal.com
www.bsanimal.com
www.bsanimal.em.co.pt

Other certificates including the domain name bsanimal.com

(limited to 100 certificates)
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
*.bsanimal.com
bsanimal.com
bsanimal.em.co.pt
bsanimal.em.co.pt
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com
bsanimal.com

Certificate

The complete raw certificate details for bsanimal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgISA4dVqneGeD0tBOXmd+lx2TYEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjIwMDI4NDFaFw0x
OTExMjAwMDI4NDFaMBcxFTATBgNVBAMTDGJzYW5pbWFsLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOQsXpwk85lzXbKKy+rlsGYM+Rx1u6Ed4lz7
1CAdWthCWD9wKHaB3bAEEdgZaSUVc5CP1sqcqQgwG/HtL7Bw6eOzu8Fh2Em1cv7G
itr8jxA9F7IQXfLgu8dDTMlVvuaMsQ6qHazvfwvmddJ/D+ga6MriM3zYYRoZ0NvK
PIkGe4wdJZJ5bXZsPz/va33qVoPP3i8S/OnjfhgtWkvau7tszA36Z3QTCzGgA02n
LuN6sXcQu9Uv0qw739N11CDvCSdZgwuS/VCqMOSEjcPQAivkPZX7DXt7pXMiPOOI
7zH0TPmgGPbJohndlNm4BYzUFsTIujJtmDZlVxpEGhqUKOl3tDECAwEAAaOCAwww
ggMIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSNKcZJlYraerz36INh6QvEmlG9sw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCBwQYDVR0RBIG5MIG2ggxic2FuaW1hbC5jb22CEWJzYW5pbWFsLmVtLmNvLnB0
ghNjcGFuZWwuYnNhbmltYWwuY29tghFtYWlsLmJzYW5pbWFsLmNvbYIWbWFpbC5i
c2FuaW1hbC5lbS5jby5wdIIUd2ViZGlzay5ic2FuaW1hbC5jb22CFHdlYm1haWwu
YnNhbmltYWwuY29tghB3d3cuYnNhbmltYWwuY29tghV3d3cuYnNhbmltYWwuZW0u
Y28ucHQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA
AWy28KyFAAAEAwBGMEQCIFi7Xs9cWmFNJLuxWsvVqYpB0XjaHNhtOOJq/mSCTL54
AiBKDp4svkbMiQaA8u4kkSJdiIarXQ1Uc5To35lB38ZUaQB3AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABbLbwrKAAAAQDAEgwRgIhAMTXSufQcXkK
EwrLTeaS3l6p2lPVoBQawphKykMl3RLDAiEA5mCNjyVuLcXBeWfWvD3wOyq+GRwL
nnyugFOwNVLiA8EwDQYJKoZIhvcNAQELBQADggEBAGaXlA9hZJf7K9IHQ2sGYW1V
j7OUm//zhfc6yYC67DvzDQb9+BpxTqGd3E4S37wvueUMZZXRde8hpo2Zpj1BYSu/
U0M2AtjjEtAagU0gJZE/fPtMv3jf0P3FS2c58kkwC6W8d7Lf8Qt8fQQ4CBsyZlYf
JgfKaPIYnsUkiDJV8Dag7m+EehZ+22/lqi55PfSI63RhtYZdqf0AvnH1qco/X813
5hRH1hZJovjMwemG33Q53oUfi5UqCN8k0bsZyCuOC++TT/FQJmG/YrDruReT8PIK
ivZVSXy0VWh3Lut6INXb+zud6QQzIW4AkMqHnNtLpkQvm/sYPIo3QrerAD54130=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CxenCTzmXNdsorL6uWw
Zgz5HHW7oR3iXPvUIB1a2EJYP3AodoHdsAQR2BlpJRVzkI/WypypCDAb8e0vsHDp
47O7wWHYSbVy/saK2vyPED0XshBd8uC7x0NMyVW+5oyxDqodrO9/C+Z10n8P6Bro
yuIzfNhhGhnQ28o8iQZ7jB0lknltdmw/P+9rfepWg8/eLxL86eN+GC1aS9q7u2zM
DfpndBMLMaADTacu43qxdxC71S/SrDvf03XUIO8JJ1mDC5L9UKow5ISNw9ACK+Q9
lfsNe3ulcyI844jvMfRM+aAY9smiGd2U2bgFjNQWxMi6Mm2YNmVXGkQaGpQo6Xe0
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307388846823975630047031548648823637751300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:28:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 00:28:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsanimal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28804212982722933433785528072302286139039795402051276372356423795628964463002445932870023217666917705798300337427287086092807056435724938225819978379819100957541570876627165094738487723048752828039164896656792613163807913061026565507907267393093790307908250777144844067858754318933127821606937369202409408553456248071474018715456965240410732426024825216919357033047078412366877278413291136702040192771371909704271079118642148844435984636121489909862880502387988052244664231746974553674169433378847673889234308332216566922193109322132330374582384315703097602150134444403670391411454628215263496292966741989407407453233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48d29c649958ada7abcf7e88361e90bc49a51bdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsanimal.em.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bsanimal.em.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsanimal.em.co.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cb6f0ac850000040300463044022058bb5ecf5c5a614d24bbb15acbd5a98a41d178da1cd86d38e26afe64824cbe7802204a0e9e2cbe46cc890680f2ee2491225d8886ab5d0d547394e8df9941dfc6546900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cb6f0aca00000040300483046022100c4d74ae7d071790a130acb4de692de5ea9da53d5a0141ac2984aca4325dd12c3022100e6608d8f256e2dc5c17967d6bc3df03b2abe191c0b9e7cae8053b03552e203c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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