iast.gov.gy

Issued by R3

About this certificate

This digital certificate with serial number 03:b7:aa:86:98:47:6e:e6:50:66:1b:ac:c9:e6:7e:0f:6c:42 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=iast.gov.gy

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:aa:86:98:47:6e:e6:50:66:1b:ac:c9:e6:7e:0f:6c:42
Serial Number (int): 323835198557460739196223534401577871699010
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:cb:8a:f6:a1:88:b8:2a:69:ef:45:f6:1f:4e:ca:f1:e9:6a:2c:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:2d:f2:5c:ae:a8:d9:08:db:e3:8d:79:80:2d:26:f4:b9:d5:6b:86
Fingerprint (sha256): 5d:c5:7b:85:b6:59:26:7d:d7:cc:a2:0f:01:6b:9b:00:aa:18:72:0e:85:65:12:7f:78:50:f6:54:ed:32:b5:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate iast.gov.gy

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iast.gov.gy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cgxguyana.com
*.cyberworksgy.com
*.iast.gov.gy
autodiscover.evergreensupplies.com
cgxguyana.com
cpanel.evergreensupplies.com
cpcalendars.evergreensupplies.com
cpcontacts.evergreensupplies.com
cyberworksgy.com
evergreensupplies.com
iast.gov.gy
mail.evergreensupplies.com
webdisk.evergreensupplies.com
webmail.evergreensupplies.com
www.cyberworksgy.cgxguyana.com
www.evergreensupplies.cgxguyana.com
www.evergreensupplies.com
www.iast.cgxguyana.com

Other certificates including the domain name iast.gov.gy

(limited to 100 certificates)
iast.gov.gy
cgxguyana.com
royalgroupgy.com
iast.gov.gy
cyberworksgy.com
cgxguyana.com
iast.gov.gy
iast.gov.gy
iast.gov.gy
iast.gov.gy
*.iast.gov.gy
cgxguyana.com
www.evergreensupplies.cgxguyana.com
iast.gov.gy
*.cgxguyana.com
cgxguyana.com
cgxguyana.com
royalgroupgy.com

Certificate

The complete raw certificate details for iast.gov.gy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvrzVMMHx4OJhjptS4y+
dFctdzlKWX1vKH4WSviHbyf58OHFvtgwq4ttD5uiLmtB0JwIK7vqo+Hvp4sd0lzL
RcWVDkMlFMMszw/TImS+w8wrXOdaMnMQBbj8TYeY+iyQn45J0A3vvB3SajoZMoXK
VO+o22xcwnkNNcn4U6GbxFJ49+7nzPuZspzClAngAGUgmMWNwp/pNeWZzRK6p/59
3tPjgQILRdsqg5s/B4LG39MXfGvdvMj0JSxmuz2d5SREZL94bKn2p2YQGb/uOLVj
1lOzw6HhbbBV4Ih3dFSrXC98xrrM5PEHoBn0fIzEct6SuaGWVssdJfYpUIvdiZ/9
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323835198557460739196223534401577871699010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 19:36:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 19:36:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iast.gov.gy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19564447274458610882991615222251484377055771743963389177619410031657346645374129221017585865119418747709631490283897331018664982267688872416190583737086925426421604802702215817174693023722145820598961770677733455055556695177765179777857935498148561070510973181344252048841676636668533781215196555562412346327328030506201995355143758342780967743570519241395357171032063299129283166452179511917266575104414208415663129231593370558844523867513650266901869077293099759213513918741420185658710950724865798240119574515306710472783301463300555921685742806863932748304575702477942296738861959291008506325193034605017442549173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65cb8af6a188b82a69ef45f61f4ecaf1e96a2c19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (470 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgxguyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberworksgy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iast.gov.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgxguyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberworksgy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iast.gov.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyberworksgy.cgxguyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergreensupplies.cgxguyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergreensupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iast.cgxguyana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7afc718d000004030047304502210092948e4bc20978a05aaceb096775923e2be79ce90989a8cadb4420dfd89e8513022012faefdcb09204ae6f5511bb7efde2124a03b33f6241729adf435aa55c69b8490077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7afc73850000040300483046022100feea79ba44633cb0ee676d42f649580f12d7d165c8a8a391b769408f35998a27022100c3a2f361cad89a5fe21453d1f47d47fe58d1df1919f4f7a3bdcec75eab6c65f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4d93810dcce65ee9e9eae6c3448e6dd8527d792411d8ccbf53a429a1f6bd3bfbfb4106016f11de7e2a5fd1b48fbb9bb5ebde68a778a2888e9a4b6fea79a9d4b3a12466a40c94c94aad4de7bff84647b20547d57fc7a2170f7e25d2f013dd18d4314aa38beec4ea50d9bcc5eb7ca638a98773901ff78ce3e8d67fdd41a79e742f58172faffda32c8517226a34f8710e799759a9d02fc7057c2586329a29f5ba23f7c927025368cbfa8cb7a7b2906e300ebfe83749385525da3ce01a80b9b83592c59598619a729460a86c71bde0825baa9e87e9781449bc16a6f2a6864c3a0cb186ebb4fc524109b2e62c60f46f1d18bca404509393629cb02cf8c0141156dd4