bi.capacityinteractive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:28:f1:2e:74:33:3d:7a:7f:98:33:65:1f:63:ab:94:dd:8e was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bi.capacityinteractive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:f1:2e:74:33:3d:7a:7f:98:33:65:1f:63:ab:94:dd:8e
Serial Number (int): 275268737621577112794765909962761155435918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:2e:a1:e8:a7:6a:10:37:6f:8c:76:78:cb:5d:56:dd:62:47:22:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:77:e7:2a:42:fa:1e:84:d5:f6:a2:a9:8f:4b:07:d2:74:00:0c:a3
Fingerprint (sha256): 3b:52:28:c5:2a:c7:5e:57:b1:f7:f6:ef:38:53:76:da:38:00:41:f8:1b:b0:fc:33:da:77:01:73:ae:49:ad:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bi.capacityinteractive.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.capacityinteractive.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.artisnaples.org
bi.ballet.ca
bi.balletwest.org
bi.calperformances.org
bi.capacityinteractive.com
bi.cso.org
bi.indianapolissymphony.org
bi.mayoarts.org
bi.naplesplayers.org
bi.o-pa.org
bi.operaphila.org
bi.peopleslight.org
bi.phoenixsymphony.org
bi.pnb.org
bi.roundabouttheatre.org
bi.scottsdalearts.org
bi.scottsdaleperformingarts.org
bi.seattlerep.org
bi.sfopera.com
bi.steppenwolf.org
bi.tafelmusik.org
bi.ticketomaha.com
bi.wilmatheater.org
capacityinteractive.nd.edu

Other certificates including the domain name capacityinteractive.com

(limited to 100 certificates)
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
www.capacityinteractive.com
bootcamp.capacityinteractive.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
capacityinteractive.com
bootcamp.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
www.capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
www.capacityinteractive.com
white-label.datorama.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
reports.capacityinteractive.com

Certificate

The complete raw certificate details for bi.capacityinteractive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275268737621577112794765909962761155435918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 13:01:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 13:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.capacityinteractive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3125172354468765996326802708727045732898275933367252249318318510131984084332123444649201634839243807729667508249877876671991472206507816841534973809409410977381275607135667884898014286349358343828184560158197981713936958008158431515366831511451691834468215257916921266392235583272706806221590842973534710799164724731973868296879594611562316640277980332623366180121970002676941085324194843783125046802287933328605232059005397740885294685562768546360385456911515211910830775643300513902238949006140531516171647012907815627024606006247759665154947139006292417967628261005020058529118357351172403354382144049698350704767431870687153421626010284370985223846298598986881294343129674214678817288406420587367734494721544424184347082436863357929811149524903341458301075851659547712475130680446161725165701830304781894453999973128297678318128067828863377975994514554824020788158290946344332490443167258839528725396979992726931187263639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							482ea1e8a76a10376f8c7678cb5d56dd62472262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.artisnaples.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ballet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.capacityinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.indianapolissymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.mayoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.naplesplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.o-pa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.operaphila.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.roundabouttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdaleperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.seattlerep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.steppenwolf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacityinteractive.nd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018adc17d8a60000040300463044022075b10c9d00db8050f04d94684d76249602c0e4b7ceccb54739b75f4abca810a202203e117e973cebfcf82dbdaab265177db127879cc648623f1b7a24f5824b8a8b35007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018adc17d8730000040300483046022100d88c338e5bf49a0a1a435c562152eca8a56781eeb06d6ed96e428a5f6571e1a902210099697f225d4a0d78ea7d8edb8246a58ea2f3977a41b9333be7e9e1a32fd63191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001394547bccde15e8bf29986bfeb975f0c85044be2bae2c1ce4bd8a51d4234d42a51915cb4e45ef9ce356dbda7c5637b403884cda3509b0b150d3870e0f3616a9c019bdd8537894f6bafd0255f8ecd7ecf738fb0036d77eb699beedb736ebee772183d043eb5dace62c8bf877e90e80c8eab414ed1eecde6863a2261386b03e7487648b9074591ef3a62b4004e72fe811c5f924a811ad82472192234a37f4fad516158e10e841137bd7030c8e24cc42db4dd98a9a5813ace7b91c68957fc7c0a964ee1719484c2fe6b3c79ee368471a8064bde99d1c4303c2f71ed5404765fcd212dfb8f9323c2205eb199f6a96231bf3e8ae9dff23800f073d8f7c379e82200d