besafeprod.com

Issued by R3

About this certificate

This digital certificate with serial number 04:94:cf:ec:99:4c:d4:a6:83:ad:14:ab:9b:de:f3:87:31:29 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=besafeprod.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:cf:ec:99:4c:d4:a6:83:ad:14:ab:9b:de:f3:87:31:29
Serial Number (int): 399087312717821792819467092308854435164457
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:0c:d4:f3:5f:3a:82:c3:8a:6e:89:07:8b:60:b9:50:c5:9f:b3:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:49:9a:a9:38:e5:3f:68:b4:d8:a4:82:95:51:75:a9:c4:da:6d:35
Fingerprint (sha256): 39:07:c8:12:79:2a:ca:c1:0c:fb:92:1f:34:64:b4:d9:56:53:33:5e:35:d8:f6:3e:84:a8:82:f1:d0:a0:20:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate besafeprod.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for besafeprod.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

besafeprod.com
bsp-dev.juxt.digital
cpanel.bsp-dev.juxt.digital
cpcalendars.bsp-dev.juxt.digital
cpcontacts.bsp-dev.juxt.digital
mail.bsp-dev.juxt.digital
webdisk.bsp-dev.juxt.digital
webmail.bsp-dev.juxt.digital
www.besafeprod.com
www.bsp-dev.juxt.digital

Other certificates including the domain name besafeprod.com

(limited to 100 certificates)
bsp.juxt.digital
mail.bsp-dev.juxt.digital
mail.bsp-dev.juxt.digital
bsp-dev.juxt.digital
bsp-dev.juxt.digital
besafeprod.com
bsp-dev.juxt.digital
bsp-dev.juxt.digital
bsp-live.juxt.digital
bsp-dev.juxt.digital
bsp-live.juxt.digital
bsp-dev.juxt.digital
bsp.juxt.digital
bsp.juxt.digital
cpcalendars.bsp-dev.juxt.digital
bsp-dev.juxt.digital
cpanel.bsp-dev.juxt.digital
bsp.juxt.digital
bsp-dev.juxt.digital
bsp.juxt.digital

Certificate

The complete raw certificate details for besafeprod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudeAQk7AweCEm7qCyg9E
1byvSY0oAR8tEhoo76VJXgbv57w9x9pd++sGmtKFMaanzJHMRbjlDmg+CLJPXBTi
j+0koR2cUjbogGc9IqeMgkF46EOH3h30dczT98OU9N8wQxcOg06FyaNdf4UkkEJX
edgoYYTMFOzlahldIocx4m4roXuxuGO92ZjvQkKkM64TsXYzhJOJw+Tuy5N4yHPF
hBmVpw+pFOiM7kW+EICTCGBiIAYpvTUgTOEdm73t5iNnoMGQK/clgd/uOl364qUB
AIjTNY/EM8S+0mG4ykwarBqeiXyKGgwq7oLficpJellcCfiZcS4XoGCM15A+0ZLd
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399087312717821792819467092308854435164457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 20:31:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 20:31:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'besafeprod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23460353928270984102505558037052514753089988459028895169101163557573903981386976251279776619962923321897791539283373190731885089640134805248365714376349526809323608758057569873699804516585000221458179340234429252948653742515152544904404473725255545202362523796084721976276577935141658051994824536250230491602344375307712907293843746998635507201115365110957891748884571153274550455763457707763403546426601354270600310925965772695466305119486839436097696820399355228119307713957624998581964180735602266567580975504781981686902893171018727137839049610409660316601541484742953630447313367858687520556066389987480168488363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad0cd4f35f3a82c38a6e89078b60b950c59fb3f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besafeprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besafeprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsp-dev.juxt.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df1a15ce30000040300483046022100854c4abca2e08239a12bc342979eff4cef8196b8f2d30650db1dc7681b58d68d0221009313e5236418853cebc228e6fa1ec42f5b27e5c908ae39bc5863b0d54fd984fd007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df1a15cc60000040300473045022009219ce2602d7c106297bb666e964a1d21a71e7a06f5f16bd186dcdce62ddf8b022100ff8ad0406860b2eef0e954326288bc102745ec4f95ee133fa4ef3f853e3f6dc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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