www.byme.app

Issued by R3

About this certificate

This digital certificate with serial number 04:61:31:d5:44:92:ca:e0:30:ab:f0:31:b2:49:c9:7f:14:af was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.byme.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:61:31:d5:44:92:ca:e0:30:ab:f0:31:b2:49:c9:7f:14:af
Serial Number (int): 381522772840230298115109078195792317977775
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:dc:ea:56:c5:66:52:e9:e8:06:21:4b:ed:cb:8b:57:f7:9a:53:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:8f:50:5c:6c:bf:3c:fe:6c:04:2b:a5:5a:9e:b1:b0:5b:3e:37:ec
Fingerprint (sha256): 0d:af:1f:8e:92:82:5c:6f:ac:66:b3:56:32:71:3d:12:f3:19:af:cf:df:61:59:7f:35:64:fe:78:05:3d:3c:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.byme.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.byme.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.byme.app

Other certificates including the domain name byme.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.byme.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381522772840230298115109078195792317977775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 16:02:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 16:02:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.byme.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750161721885678732637232338438871815891535511076698168732185689695409144044642326390017899168520920026038097606142609084503216517012994851672962430054183689798125112469963358526915721707838830672224857337510059608358533248824764654088394004478226598457315864052279932638334109695449802431156550891688074281225362814237535707216493629676859123686398847600704506746704114722906090180049095735320396121454000907067729953397692074865581404790039149663649026977855409062380732595712334452096067297238881519249690479593747813243254197319270318357298283818001713967072283412748407442889903233531268633242522264488517139583809159800352483046019676502229472264170575488895707198383378491945876081044413731807478863758271767419515255178206805075699063300496224551670151474095668203560850841713502445512780885891920772837536908044402008272300182031909984896803871288447107424974295166472303158038231152834619726757407281521708670417507731805565590930456723127169142587330633752795576794168338936638166696377784869479450326575895693688988576511813612708718353244398425124009689316937772799619552858552591838623436473642394938251669044220973791370320932460584318645892381595337222568088748311825494329582280516079211050131415262448008526357916221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ddcea56c56652e9e806214bedcb8b57f79a5342
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byme.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eaf36803f0000040300483046022100ff005cbc8f05844250ad957f7d27cf141485d9cbeb696807937120fe3e491e92022100d9802df111257360bbc9df2e0cd6517e2a7dd136432fd0d7b267cfc07ecabd5d0077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eaf36804a0000040300483046022100c11598b453cca6884e6e21697eaf266367b47943bbc9bc32281ffc4cfd8a2ceb022100ba0c387782c9d83ce754607e907d6f02f941c5c9429fdef5115eaf97a4ad4dc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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