careercompass.bcas.lk

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:04:90:65:7d:2e:ae:51:3e:3c:29:15:61:39:ee:08:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=careercompass.bcas.lk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:04:90:65:7d:2e:ae:51:3e:3c:29:15:61:39:ee:08:b9
Serial Number (int): 406643495131693569847708647601813557479609
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:d3:5a:41:59:43:da:b8:78:9c:56:a3:df:42:21:37:b6:51:38:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:cc:ac:6b:b6:12:67:b2:c4:de:aa:b6:a0:ec:95:57:67:88:53:d5
Fingerprint (sha256): 6a:59:e6:99:b5:ab:cc:fe:c6:50:93:52:99:de:3a:a0:15:6f:5e:13:12:a8:17:07:11:c3:d8:59:9f:53:30:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate careercompass.bcas.lk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careercompass.bcas.lk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careercompass.bcas.lk

Other certificates including the domain name bcas.lk

(limited to 100 certificates)
books.quidditasfarms.com
social.bcas.lk
billing.xyntekinc.com
careercompass.bcas.lk
billing.bluetideconsulting.com
events.bcas.lk
bcas.lk
books.quidditasfarms.com
events.bcas.lk
billing.bluetideconsulting.com
payments.labspot.com.au
books.quidditasfarms.com
events.bcas.lk
bcas.lk
bcas.lk
bcas.lk
bcas.lk
billing.bluetideconsulting.com
events.bcas.lk
bcas.lk
careercompass.bcas.lk
events.bcas.lk
events.bcas.lk
social.bcas.lk
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
social.bcas.lk
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
bcas.lk
bcas.lk
careercompass.bcas.lk
events.bcas.lk
billing.bluetideconsulting.com
billing.bluetideconsulting.com
v2.bcas.lk
billing.bluetideconsulting.com
client.pisigmainc.com
billing.bluetideconsulting.com
bcas.lk
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
social.bcas.lk
bcas.lk
books.quidditasfarms.com
bcas.lk
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
bcas.lk
bcas.lk
books.quidditasfarms.com
bcas.lk
social.bcas.lk
social.bcas.lk
books.quidditasfarms.com
billing.bluetideconsulting.com
bcas.lk
billing.bluetideconsulting.com
bcas.lk
bcas.lk
clients.pragatitechnologies.in
billing.bluetideconsulting.com
billing.bluetideconsulting.com
events.bcas.lk
books.quidditasfarms.com
books.quidditasfarms.com
accounts.mkbuckley.co.nz
books.quidditasfarms.com
billing.bluetideconsulting.com
events.bcas.lk
events.bcas.lk
billing.bluetideconsulting.com
bcas.lk
books.quidditasfarms.com
books.quidditasfarms.com
social.bcas.lk
myaccount.silverfox.net
billing.bluetideconsulting.com
bcas.lk
careercompass.bcas.lk
bcas.lk
books.quidditasfarms.com
billing.bluetideconsulting.com
social.bcas.lk
social.bcas.lk
bcas.lk
books.quidditasfarms.com
social.bcas.lk
books.quidditasfarms.com
books.quidditasfarms.com
careercompass.bcas.lk
billing.bluetideconsulting.com

Certificate

The complete raw certificate details for careercompass.bcas.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAr4cDegJsVfHRo9obAz
0lmHr8adKY6LGe7OUWlr8HY5tXCoLHka1Om1eEq6DjuAUZyWyQF51hOQ2pOYvQ9/
3ZAAyZRYaGx2XKP1pe79zLoe5FfpQDzFNygO13hhkIZBjLy2HSFMPWloTkIYimaj
RmS4pBCgJYAFDb0Jx6E/eIJ/lsWr4VUCjgc2met6kui5D+GokOAW9CU+v02RqcqT
oqZN1goPy5an2+nxA9st9VISFry4FRPFT4RGd8VO2xknVOlU/wpVnSAnI5NxcbHY
kdIlkffo+HX8uOXOimhlmL7lhxQqsAR8RMndJxIXM9WLJ1Ed6sF2pnIxZAouZbUw
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406643495131693569847708647601813557479609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 11:21:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 11:21:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careercompass.bcas.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22728304630474285510602931839837410358552850669625387377757656480474679428759810486051049149219264490393784283764550133361379919855048713135777333016734813228261136303413163338998194007274617758305789181235336774593427731220655764511819323495076130708864913660963524494050323909921802287580010796760694131546040153396642013557427569532587205654529476393818069283108986565580126106281185442443526673301773805405172491582177483420047448406926863890049133919552613012153649708886014824219155081722478399680210464855115688612170256087887767177880185068140350888185687344620165601617791477650520675773209384012588938244129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16d35a415943dab8789c56a3df422137b65138f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careercompass.bcas.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188e8337913000004030046304402202ffcfeb9d61215a72ed176d2f97855a8b624f3e396f5597b747ca2fbadd6954802205eea14ea681e3df01a7d904443910e4c17cced3fd4d3f0defe47a51eb8f08895007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188e833790e000004030047304502210087ddffafa0f2dc24ed6515cb775632b3afa115626dca085fa0f589981952473b0220349bc20801ebda93e6819ccbdce744fb73f847ea0253ae6ba1a4a091c0120aff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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