byuia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:64:44:4e:37:5a:ad:79:ab:9a:69:9a:2c:c9:c6:7a:7e was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=byuia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:64:44:4e:37:5a:ad:79:ab:9a:69:9a:2c:c9:c6:7a:7e
Serial Number (int): 340415644383116896811681138491812559092350
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:d9:05:1e:6c:66:32:f1:e4:e2:16:61:9b:a0:06:0d:9e:49:cd:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:79:79:e0:b1:df:84:2b:e4:f9:3a:57:3f:bb:a9:7c:94:18:7a:88
Fingerprint (sha256): 50:99:ea:49:4b:b6:ac:89:07:de:92:89:51:ce:78:69:91:14:de:22:bb:54:28:da:cb:b4:d3:dc:8f:b7:74:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate byuia.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byuia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byucougarcapital.ignitebyu.com
byuia.com
byuia.ignitebyu.com
dev.byucougarcapital.org
getmentoring.com
getmentoring.ignitebyu.com
ignitebyu.com
mail.byuia.com
mail.dev.byucougarcapital.org
mail.getmentoring.com
mail.ignitebyu.com
mail.millernvc.com
millernvc.com
millernvc.ignitebyu.com
www.byucougarcapital.ignitebyu.com
www.byuia.com
www.byuia.ignitebyu.com
www.dev.byucougarcapital.org
www.getmentoring.com
www.getmentoring.ignitebyu.com
www.ignitebyu.com
www.millernvc.com
www.millernvc.ignitebyu.com

Other certificates including the domain name byuia.com

(limited to 100 certificates)
byucougarcapital.org
byuia.com
byuia.com
byuia.com
entrepreneur.byu.edu
byuia.com
byuia.com
dev.byucougarcapital.org
byuia.com
byuia.com
byuia.com

Certificate

The complete raw certificate details for byuia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbYVt1fpTS3mt5imlXF7
/NnTmu9Jz/MkMf3QTvt7Vums7lEJ5lrv3MuYKa2h938z5IAzHqsK4vX0xFILbVEL
CM6kZsoWWb4lyV+uqxCqEfSro+CKDuQhfrytLwPp0wGsowThYTIuCoZY9oq6RC6W
TzIpWtACtBb2AhRq/2BCegac4WFMxibGX3jyrAgRbflvtIz77UcVmRamwidw7DRL
va+3jCIIwXjU5JKEKkqFhBj5ekk14WE3/aqWh/EYWcFvAoukkKqRYjddv4ulN/+q
DzZtqJMa9UDst7Q/cP7hH4z/yD4FZcTwZENyzunBrJ9o8Gq10gvTKBGwGE/MWIP6
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340415644383116896811681138491812559092350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 11:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 11:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byuia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24958735453914513802256630767212671421707701731480848250457501839690262501713091513617186485489781873751418840602370193858134076372181324786195100751905652416181257104094351448877340228902894457045881119239873301168890128722465730914990975503796473368416837267319743403121950613099510585369247597345152385190783313124185030515077963743748780535341203418086566389461019765883520646782379803005105049987335992343281413462018174180604367875963191873389142341887623073654965409376841162710968603564834591555345983378635806374652272988019484826274819462664610881112260585729585530338882772626956404881916660922458015267441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7d9051e6c6632f1e4e216619ba0060d9e49cd65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byucougarcapital.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byuia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byuia.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmentoring.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.byuia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dev.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getmentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.millernvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millernvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millernvc.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byucougarcapital.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byuia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byuia.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmentoring.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millernvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millernvc.ignitebyu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c36bd87c0000040300483046022100ed7823f9915a7d59f36297a83ca95a8bdf38092b9039465d55289ecf8d4422fc022100976d29ce302673841bc7364c597619241970564a0019cef065a8fda32556e4a80076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165c36bd9b100000403004730450220771e5c63d3215e00ee2e8026865fd844563cf9862b3130a52a20c259b1923cfd022100e831d68470c53cd371d26926831b584dd4fe1d7640259f7b9e8d954a0e1fc022
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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