ycrai.com

Issued by R3

About this certificate

This digital certificate with serial number 03:38:0f:b6:d6:39:27:1b:f7:5f:c3:6d:c6:66:c9:fb:81:ff was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ycrai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:0f:b6:d6:39:27:1b:f7:5f:c3:6d:c6:66:c9:fb:81:ff
Serial Number (int): 280413558105782085139884370285784303632895
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:4d:19:ed:ed:b4:cc:48:10:ea:9c:77:14:4e:9e:bc:50:f6:a1:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:58:9f:56:d4:c9:2a:58:1f:0a:96:4a:50:74:77:c6:e7:ff:fe:48
Fingerprint (sha256): 8a:f9:e3:07:1d:33:2e:e6:ed:b1:a4:bf:9e:f5:b2:32:4a:45:ae:da:a7:ad:b6:bc:8f:93:62:b1:31:b8:91:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ycrai.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ycrai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ycrai.com
ycrai.com

Other certificates including the domain name ycrai.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ycrai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyb8EixQUTpp2Ii5CaPeH
6ytQkLZTSwfi4J7p2jYroCutwmQ6XAxJ6Fp5obId17DnzrqrhOdEfX1B0IYUkmyd
2oBp9+in8zlxaKd25fRG2W0A9bS9fQgdnNQFOp/OuCJLKQwMXCeF4fbttQZpSvLP
3BFS4k0ETA/bmJxW9+Ai7sW/E8e0iVc+rwfYrXjYmyL44LFa4lkifcrb0HVKMVQk
WfXa8IFXPlUyKSL7W3p/8+uFmtzTmN1CacYfXWXwq5jeAREPGxbruagBDay3R7rg
7HfZ3n7mmTScCGek4tKYyZmJefIJt8+u1INNXToDn1Tyux08qa1IU32/JcaeAA/V
J6/JBX3j/skI3XV1Dso1R+BoDL8Jf6g/iG4lP1E7loUriq9cW1zBpRhqbmVbdrut
73pDeClVFq/pyLO/xO3S7OBMzrs3/mvjcyykEQzTR53R9EIA4PGaQ8H5vX6oMYGN
oAMPhYZClFSXRWg8zffOE940C3RNPbmNpbNzlwM834VFVFHK2RNJWFYhEx75GyYd
yiM4AV+lgdPujJXVGaDQTLUEzmk3LYPjnX4Frecq7WBjKHGOkfXLlm6QP6/1m5Ma
1loSxRV14DU6tq4jLzQdVLzDdgu1Vk4YhAw/I9F99NIy/cWOgwPP1cfD5IoZrGRX
jDtGFJAY5ke8n6IiPd33UscCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280413558105782085139884370285784303632895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 02:57:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 02:57:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ycrai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823052537434242953407073075986888599100916454324738158940612551684002412554692636504810420359814232705263239626928588883281439012085262561149939198062167503435128886970374456930936695150950062268645874880040741868082284886323909881472006258656300958636487014429057806647190309088182487278029071766859630713696104827229691576042911132674126253360185498124490629582509727929867927628683461143121984231175683270647506196406916001779496418212479178420419858589312448270284068440620718373040188315215595990419991561226965307987829026921601083081547256277300623721350110913649363973878305698074468244330941249339827187690004141453282347467779572559165687576991548335157961520649006962636951072539734701311844759395811648393296750119655389026116766715916818299295764000752228476502240470692733277971418047788057548245324783558949543691299833519359854096547403995110705521407614752377782431667415162843175675510165754293714906095445731828027564600347923198230308101640557308447826922829085396551020920782423769931451719625589388185850052618498879718630200973100546617900667533054957520859585467911097673605954017994780906146118971670179195691363453246097012648908202557440706261160364839578349610172667058011182302114785691354287722643018439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a74d19ededb4cc4810ea9c77144e9ebc50f6a127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ycrai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycrai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d34b13cd0000040300473045022100e5c1e215e0631861cc38ab5c38ddea8073f3719e7bec5b582f13ae5d71c5075f02200c3310e22f09cfe118776af4e326fbaa5c7a98016be7a06675bd6ccbdb863058007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189d34b13df00000403004630440220694ff5e873fed3c7d19dae5fc1f041bcaf6b15ffbaaebf97d50ea38bbf53a9b902207dcacc772378d3c724195e63316e322ff04649feea396692ef23aa9ad9fb5744
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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