dayunet.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:88:12:e0:23:e3:6e:cb:7d:89:0d:b2:3a:1b:68:8f:ec was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dayunet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:88:12:e0:23:e3:6e:cb:7d:89:0d:b2:3a:1b:68:8f:ec
Serial Number (int): 434381173205990805510877374889108563333100
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:cc:52:87:67:2d:a0:1a:dc:51:dd:ba:03:06:cd:0c:4a:b2:42:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:e9:4a:48:ab:3b:2a:d8:4d:6d:e1:55:e1:14:77:33:aa:bb:9d:ff
Fingerprint (sha256): 6f:cf:71:be:34:b2:5f:6f:a4:04:b8:14:5b:a3:2c:e5:82:19:f8:25:4d:3d:80:99:46:39:2c:a9:5a:39:b2:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dayunet.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dayunet.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dayunet.com
git.dayunet.com
ss.dayunet.com
www.dayunet.com

Other certificates including the domain name dayunet.com

(limited to 100 certificates)
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
*.dayunet.com
www.dayunet.com
dayunet.com
dayunet.com
git.dayunet.com
git.dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
hongkong-01.dayunet.com
dayunet.com
git.dayunet.com
dayunet.com

Certificate

The complete raw certificate details for dayunet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434381173205990805510877374889108563333100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 16:10:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 16:10:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dayunet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742270937907701669394121561549474538561161871944930878558855460125134507467605473070917003923446471790389806479305206284202196524790969271701379232299178528272703562636480311895359030301399090921290303470914386718613618377082497022322591393212897320157043167472274217671624918711621674141120421943833093776711460338646987993878780604466218449867379313582245603684519962557126957795108126990025110460336100476019756743938719362245421283224338260544147603343794669496000321998486511914785709526503891604677782415944670563618182866792695053724968276549132976776437262239769742266805516211959710824502214041808164805622747657696060394739834181551907013681183631787303398073361764689500713921320158936513998669605160574638187427329326340166200918290479746836852987287698276583361416051880790704600426260228159178796207781211354803473451830606113770009808263160996833735812442667757870200890475778184825014077510624993574810126742598567564566715468455885088470653017758910600483659586966171438453050798210176710832632411613309276433784614720380714300557480587644972128638469884538867494851260327221311122124256673971840451959800884946541623735915891888953670407756959227257946363298203733576831014139871325353129473003041242187966147205133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3cc5287672da01adc51ddba0306cd0c4ab24290
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.dayunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.dayunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dayunet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016428798d3b000004030047304502206012ea0061ce0be21037f38b807627b0870346bfb17fd4f12cfbdcf4c6f459d90221008f17cc3d33a73bc2316f018844315a1e251711e1661130adf016520286d2ffec007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016428798d0c0000040300483046022100c32b3328595d5632e473a6a6b9f199c5f9fad372b99bde712302b7ff422a651a022100d208eae04d2aa60155917e808bfa7c3f37a04619bd866a070ad0a653992a98b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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