bi.capacityinteractive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e2:d3:ee:a3:50:7d:5d:d2:c5:01:3c:e3:01:22:08:aa:d0 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bi.capacityinteractive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e2:d3:ee:a3:50:7d:5d:d2:c5:01:3c:e3:01:22:08:aa:d0
Serial Number (int): 338522378905585598668776030920845352807120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:b0:db:8f:02:a2:37:cd:4d:0d:94:38:6b:a2:49:e6:ad:7d:35:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:2b:50:07:de:c4:f1:de:7d:11:f4:74:ab:b1:35:9e:10:15:62:a5
Fingerprint (sha256): 4d:06:a3:1b:3c:4b:5d:68:00:04:b7:95:34:d1:dc:4a:13:ac:6d:7d:f9:87:9f:30:f4:15:d4:d5:43:48:03:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bi.capacityinteractive.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.capacityinteractive.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.artisnaples.org
bi.ballet.ca
bi.balletwest.org
bi.calperformances.org
bi.capacityinteractive.com
bi.cso.org
bi.indianapolissymphony.org
bi.mayoarts.org
bi.naplesplayers.org
bi.o-pa.org
bi.operaphila.org
bi.peopleslight.org
bi.phoenixsymphony.org
bi.pnb.org
bi.roundabouttheatre.org
bi.scottsdalearts.org
bi.scottsdaleperformingarts.org
bi.seattlerep.org
bi.sfopera.com
bi.steppenwolf.org
bi.tafelmusik.org
bi.ticketomaha.com
bi.wilmatheater.org
capacityinteractive.nd.edu

Other certificates including the domain name capacityinteractive.com

(limited to 100 certificates)
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
www.capacityinteractive.com
bootcamp.capacityinteractive.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
capacityinteractive.com
bootcamp.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
www.capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
www.capacityinteractive.com
white-label.datorama.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
reports.capacityinteractive.com

Certificate

The complete raw certificate details for bi.capacityinteractive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338522378905585598668776030920845352807120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 14:01:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 14:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.capacityinteractive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4160307917484552212052071958497320038551133940976560510833327308718429382396726361667629267640144852690888767828633323826599804983654909374849263473729662840695457839974276836432525316330315554633310367852286563222902464007757446773664965991181708437687627562883061051836471054991972757982895050126920214418070025384061388906265592705378133933262146354958035878702570939596326569731496257479574975045395102259192427173897341459495859675747096400636205609045131943433574273817973297435402973030391342947991699808042849686250199423190815719706431159484445964803179839544101476427996256218052953514290155798990914248269880396955980319135760426539362203909223727980599783890099953726123135857482414927323734821636605933943950412341506053237675703108003834761365091615598671402303106274097819938470815471972375847033011055548569335094821738551399614867729758247016484958608008656168154046438473967699453782150983648703592792430579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15b0db8f02a237cd4d0d94386ba249e6ad7d35f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.artisnaples.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ballet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.capacityinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.indianapolissymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.mayoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.naplesplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.o-pa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.operaphila.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.roundabouttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdaleperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.seattlerep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.steppenwolf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacityinteractive.nd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df56230c000000403004830460221008059c23091dd40a2bb4ebca4cbb6afb4f526262a48c8a6e314fdb16c3ffd630e022100f9ce21e236c6f1fe4398b2fe4874719f2fc07df1a63d697eb65066b84b743340007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df562311c00000403004730450221009361af25fa359ebd1c338e35b8d697ee000ba725d5a4690bd37f15eb2cfd43cb022021c658c417ba92fca8da516bf0dbc6e106bf7b060ad1fbe3b7c63f01114e1662
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090ad1a6622e6685cc1a7b8ef8311ddc714b7e05fd7292c9f0507901681481cd279ed56595dcecbdc91a0bde37468616375994ac853004d7074deceafe6629bbe793c6b027375d0ff12c16f00c0eba88d373f552190f9d0443c9c0a3b8565810fa08411686213deba5092f46df7d4cd2563ca32f5d76ca1c5327da03e8849deed2462ccb7f16657b8cbf615429cd274385581c8be900a135f98c61a70f2a6f5832a8a850ef4a2c970cc8fdaf6d45e06ca9275e93a826255d53b5905ae35fb9248f48bcf6c26dbef2641fa22e6567af78e5660a381d644fcd438cf1d28cb1b8222a42c5b99984ff2a825d281a600e6b8dcba66433b381ee0b1548c0219fbea9cc6