www.bestbuybusiness.com

- Best Buy Co, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ab:63:0b:4c:d2:f2:e8:f3:00:00:00:00:50:e2:7b:98 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Best Buy Co, Inc.

Organization: Best Buy Co, Inc.
Organization unit: Systems Operations
State / Province: Minnesota
Locality: Richfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:63:0b:4c:d2:f2:e8:f3:00:00:00:00:50:e2:7b:98
Serial Number (int): 227812253861347065636651887336586640280
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 23:47:05:a5:34:35:72:44:55:0c:55:fc:6d:2c:de:a1:01:7c:64:ed
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d4:91:42:74:a0:ff:af:68:4c:a1:3b:53:af:d5:82:14:9b:56:a2:88
Fingerprint (sha256): 12:36:dc:83:cd:a4:8a:1b:ed:b5:33:18:c1:a3:fa:fa:0c:1d:05:2b:48:92:80:1e:60:f7:4b:b0:c5:69:11:6f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.bestbuybusiness.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bestbuybusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bestbuybusiness.com
bestbuybusiness.com

Other certificates including the domain name bestbuybusiness.com

(limited to 100 certificates)
epro.bestbuybusiness.com
bestbuybusiness.com
epro-qa.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
www-st.bestbuybusiness.com
www.bestbuybusiness.com
apps-pl.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
www.bestbuybusiness.com
www-qa.bestbuybusiness.com
www-dr.bestbuybusiness.com
www-st.bestbuybusiness.com
www-dr.bestbuybusiness.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro-dr.bestbuybusiness.com
www-st.bestbuybusiness.com
www-qa.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
epro-qa.bestbuybusiness.com
epro-pl.bestbuybusiness.com
epro.bestbuybusiness.com
bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
epro.bestbuybusiness.com
epro-pl.bestbuybusiness.com
san2.bestbuy.com
epro.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
www-new.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro-st.bestbuybusiness.com
www-qa.bestbuybusiness.com
www-dr.bestbuybusiness.com
epro.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
pl2.bestbuy.com
epro-dr.bestbuybusiness.com
www.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro.bestbuybusiness.com
san2.bestbuy.com
epro.bestbuybusiness.com
www-dr.bestbuybusiness.com
pl2.bestbuy.com
epro.bestbuybusiness.com
www-st.bestbuybusiness.com
www.bestbuybusiness.com
epro-new.bestbuybusiness.com
epro-qa.bestbuybusiness.com
www-qa.bestbuybusiness.com
bestbuybusiness.com
bestbuybusiness.com
www-st.bestbuybusiness.com
epro.bestbuybusiness.com
www-dr.bestbuybusiness.com
epro-pl.bestbuybusiness.com
pl2.bestbuy.com

Certificate

The complete raw certificate details for www.bestbuybusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4QPQR77aou00Z/oNVIf
aIrzYgBP5iJCZjW+sJ0dFgwNx2FUOooI1J8thPq6iO2KKS9rtfwEIEC9B3DO9NwH
wJLIqksW0yNxDAiExIhRXMZJiJ+t8Cp4LaVdIoBY8gLT14TYtrBqTjXJPDWXDAZ4
ZkzMxuRlda8QmyMxC00ScoTj1sEOiJURkKxodk5S0ZIlUO2c71wy5vXJuM1t5yDc
1Hck/JTIuf+gnkWX7Fsz9gob1tNGBBtzn4ix5lT2BztzJKav45O/OF4o4q1ZbezU
Is5ZfzBiWb8vOqUA2A3ewQPbhMsHKFmgaXNRWjHQFPUwWzGzxE7W0QeHUxbz3tpE
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227812253861347065636651887336586640280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 03:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 04:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Buy Co, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Systems Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bestbuybusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21146917938980856500123296079524051091623217643949263044792497522573997226446381914998024180902950182160539739527842396752017461514430462935094520609724382677984248485556279247769939787927692678921783866031342313909116529190099927123915140970167128327741412213024173318400964101159207575904999438482651245334858142676284693655168880478334914280080765145901576421118252068738378557194368569631882578839508334855157431581423966326439409078696563228778512043673775608149793784120557567096644286425832923324591274986728222171492969370442845574269393630466385955645723545741852384177591205833086693242749758258263954703583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestbuybusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuybusiness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							234705a534357244550c55fc6d2cdea1017c64ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af7d049360ccc470d7354ae2efeedb38813a6f312d62b52bc3018ec54baf369490d5cf9731298aa46a9ea633ab76c6ef5fe6fc06d4ada7a0fa89d3aff11b93b04d616485e358bb4b11d8a1b665bf7392191c7037f07b3e2cfdf313358794d0666d51d11035dbb607c1f885abfd23e6486f7b61a0f126be8a4b4cc111f0fa2266571681ed9365b59042722a348127610befb0b9d7975b5450c94b5f4e967405596aabfecc731e74c5df43c01d36ca283517cd1b45c1aa0ae0878a48cf10bd656e2b4c2999d00b30f1eacf209c2d59a0cfbdfd5c5ca140f3748e15230a9fae6326f60eca33fb95fe84a1865ae8f6594a96640f0959fb52e430bdba7005d995e74d