blueskyuc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7c:9e:7f:95:55:20:d8:4a:27:1b:b8:a0:4c:18:e9:2c:cc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blueskyuc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7c:9e:7f:95:55:20:d8:4a:27:1b:b8:a0:4c:18:e9:2c:cc
Serial Number (int): 390854837699095996443260896159832472104140
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:d0:aa:8a:a5:10:63:a1:3b:c2:9c:ae:3d:35:a1:3d:49:cc:ee:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:a6:2c:9d:4a:0c:3c:0b:dc:c4:2e:86:dc:25:77:75:45:a1:90:47
Fingerprint (sha256): 1f:5b:b3:f3:5d:f4:8f:ac:78:0a:14:4a:cc:50:59:5c:e6:b1:17:0a:92:d9:b1:11:a4:25:73:df:9d:2c:9a:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blueskyuc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blueskyuc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blueskyuc.com
www.blueskyuc.com

Other certificates including the domain name blueskyuc.com

(limited to 100 certificates)
sbc101.blueskyuc.com
staging3.blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
blueskyuc.com
sbc101.blueskyuc.com
sbct101.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sip.blueskyuc.com
sip.blueskyuc.com
sbct101.blueskyuc.com
blueskyuc.com
*.blueskyuc.com
sbct101.blueskyuc.com
sbc101.blueskyuc.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sbct101.blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
sip.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
staging3.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
teamventi.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sip.blueskyuc.com
*.blueskyuc.com
sbct101.blueskyuc.com
www.blueskyuc.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sbc.blueskyuc.com
www.blueskyuc.com
blueskyuc.com
sbc101.blueskyuc.com
www.blueskyuc.com
sbc.blueskyuc.com
sip.blueskyuc.com
staging3.blueskyuc.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
staging3.blueskyuc.com
sbc.blueskyuc.com
*.blueskyuc.com
staging3.blueskyuc.com
sbc.blueskyuc.com
blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
staging3.blueskyuc.com
staging3.blueskyuc.com
blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
sip.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
staging3.blueskyuc.com
staging3.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
blueskyuc.com
staging3.blueskyuc.com
sip.blueskyuc.com
sbc.blueskyuc.com
sip.blueskyuc.com
sbc101.blueskyuc.com
www.blueskyuc.com
sbc101.blueskyuc.com
staging3.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sbc101.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com
sip.blueskyuc.com
staging3.blueskyuc.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc.blueskyuc.com
sbc101.blueskyuc.com

Certificate

The complete raw certificate details for blueskyuc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNV+rU8RoMuZNeGUkMIw
EbXuuLJyqrBj+Vn5tbEaz8VPty4RHhNyrnRHKw2CNkZfg/8C6DUpZzooB266IRlB
6mq3uCujUbwOt/NNBuyWJzxFb6N1cmJWUIlagGSpc3aT6EPZPvnX6aeP/r/34Spg
cn4j5APAehcDRs770r9Z9WdZPofAN2DYpQeVgr9w6Y5TZELcrwGjWuov1hlsuCAT
Jaeg8cRK9jIjuEgQbA2MaacpBAH4Vt5yhDyi4kQaqGA9bYoxpifOAw+y2GjDE2s+
FQXoHycduawEx7OCDrBv2cpPnpKiThhLlezg8wYP6scYRdTFxnMBaD0LgIPtWLGd
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390854837699095996443260896159832472104140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 12:17:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-05 12:17:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blueskyuc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18788547360400876324959476493059455052398871395519734532409117330992760489148429179367902008172709664737318795039031683545740807752683783659776998061978667137290733985422288859929036595417196926810762841978285028300120903596194294372948933885535331257119727894317836038794972416739992514448251815979733417128229423168501146089313002117279671163205601490097340696758902756186983329361234821849226263718098225479110050128886309703449258405637192757469538984046652889962529992149030592741222097264004049158884610442160030315875369100742364120904718815818716674158849160634761089212247294319854354616467376305084256329021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ad0aa8aa51063a13bc29cae3d35a13d49cceea3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueskyuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueskyuc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001776d312f1d000004030047304502202576f74da78872259ba1adb67156f6a58c33d74251b28730db1af859ec53d259022100b042a4143bd5ea2b862cd7bec5a4ebca7bd10d0d4757e8235400ebccb2c3831a007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001776d312f04000004030047304502206052e3fa5c2bf83ab8dafa9b8ba2e69babd674e136e1f54957dbc1754754b662022100d826da4dc1f1d9f46dac92ae8204399d40a362ee51792f6b7d3f8dd8379a6943
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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