byme.app

Issued by R3

About this certificate

This digital certificate with serial number 03:23:fd:d1:80:bb:a9:30:8a:fb:73:b1:1c:eb:f0:90:74:fb was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=byme.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:23:fd:d1:80:bb:a9:30:8a:fb:73:b1:1c:eb:f0:90:74:fb
Serial Number (int): 273584123121507060964914273916446420530427
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:c4:d1:ee:32:bb:81:ea:28:d1:d7:3c:41:d1:8f:be:67:33:aa:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:c6:82:b4:6d:b8:bc:5d:ec:df:b1:96:fd:99:66:db:80:3e:12:9a
Fingerprint (sha256): 8f:dd:0f:e5:78:0f:b1:ed:7e:37:fa:71:26:96:a7:20:34:49:ba:27:53:6d:50:cc:65:b3:39:7a:ce:79:28:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate byme.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byme.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byme.app

Other certificates including the domain name byme.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for byme.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgISAyP90YC7qTCK+3OxHOvwkHT7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTAxMDQzMzlaFw0yNDA3MDkxMDQzMzhaMBMxETAPBgNVBAMT
CGJ5bWUuYXBwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1JtZezwm
wII5QMvQ5gmnWPgYcyEk50izLhJlEDtVpy1VuzYoJprR3WtMwG6gg6iv2mJIyl6q
1t4OVWxm5Y0lINkVoBhxpfjQg1cPs4OCnAwKLur3dv4sCXLycWeMK31PUieIbWbr
9XqX7gbdkJRk+O+Dt1EmBuYCgHZoEnT04fJ4V0R4f7I5R0PZ1mbi03bIMeiR0UUu
V3vVFLqchVcNRvRTK53C/BQv9Me92EiGRw84PJLu/BqKRQk5/cctAZmie/SXGI3U
7xo7u3ENRP6ShyFcK2nJ0DPGdQD6xybP7Y3ZxH0jpBabZuk6rkSxXYr4aKeQzPl7
X5YT9GzduulxcjEapJ6+8NfWJePDgm0DInGKCMS/ovB24S5ZQyX86WNKzNAVGbPa
Zw/EXmy0uKNihJN3BCs0Qk0hawKpJ6HQfDs02FpHjzQobwqSoIbRExQZ4EY8oGzo
UyvhFFIUko00bHVG2rUMyvLtX0qGUUGBRkryIESKOus/Vcno8wsMwt7UGXs6Nunr
gdyuuRXZjMU1fmwvvDaG+qrqpb5pIuaV25juCao81endgq4eo25Le8ezYP3Yz782
FaJY1849beZpoPxz3TRDAaUznqQDalMgJTltNUFPhOhZLtaG18SmPA+nT3vr+l9y
1cmrHpwF3CgVKcCDHovSdR2HLz9jxZY/RlMCAwEAAaOCAggwggIEMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUysTR7jK7geoo0dc8QdGPvmczqnAwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wEwYDVR0RBAwwCoIIYnltZS5hcHAwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdgA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAY7H0hzDAAAEAwBHMEUCIQDSo1LjijLso0eS0TRU
gzBwRvWBAkTyCzXsYdnTv0IDvQIgcmJ053f4juf5bk7Fn0khZpO4AeuJAN2rdlx3
DrfILzsAdADuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY7H0hy8
AAAEAwBFMEMCIBPAr8L4fJeJW1eQHM1Nd/sAb5QtxT2VdKdoshFn04giAh8CRUU8
Jms/MqUnyuQ8kTnuvZ/cNBDo6WWOPjMd9jkeMA0GCSqGSIb3DQEBCwUAA4IBAQAj
wcj8KDV7k/1DJ86xk5j+uEFZi9fB8em7Iy43UF8r/aZcKDs92+KluS+0EnOGGv6V
xSkrXbq8gcnxtOaCyJYhEsAq3wztaHb8HNYm+PlvlSwXpcj8JIHWBeC3bU8SruFQ
jMdmBoth/LwTetC8Ua3r6m3aT0uofy3jucQnzaVV2GJx5da2Doby14e4HLrJX2If
yj5KAD+lhPj01vN2DMEBTrbk8rAabg2oeeqnq9EgVqcZ5IFETuGOKJTMloyYH0td
KpCvldz4yFZzArR67H86rCTnO3gnzumZ7v+WGdADn0B+5/yDqzXWZ7NOuYy9Fpxn
Q32gBVdJV0ijdzy906vT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273584123121507060964914273916446420530427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 10:43:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 10:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byme.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867360209669214476501956426725750653275104555744159876935674016780878614182263022553070228148548173925480731256414049385773061646567790297524125125022591911317414080625165536707378158346147998753252925618444652790036758534098797953223351297256503609754680069084389498579732030792750874325870706982563890296406766821820308214869821813303780823417858863608449724017104755128478932838245708443414502583602566990773128830610029158902113294607181806321298038488810736920326141398386179635960984312353127003468528926887211536730963038095172271718194274003383266381711480373442703041541643485909659751099427621810585105584625878821799316096378481689387017580093907120582705739133037135273987837415777589685674515926879533094137502097132108440737446909790089037783654566919780485234225748052615497785024868287404370157216246531555675537641377334277808335421758694411493634721846790027579425794337739494876406933402894954807633769943302963649192746525732539027011922206542251228785254332111479889151005067025304423228901920233268485011445196414919831171183961215999739192929255226311303531818400110116842473615148913724083475658958612214411279375215743856094121195887962880638195034743946001228424521289839987010348749053007396108087605544531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cac4d1ee32bb81ea28d1d73c41d18fbe6733aa70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byme.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ec7d21cc30000040300473045022100d2a352e38a32eca34792d1345483307046f5810244f20b35ec61d9d3bf4203bd0220726274e777f88ee7f96e4ec59f49216693b801eb8900ddab765c770eb7c82f3b007400eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ec7d21cbc0000040300453043022013c0afc2f87c97895b57901ccd4d77fb006f942dc53d9574a768b21167d38822021f0245453c266b3f32a527cae43c9139eebd9fdc3410e8e9658e3e331df6391e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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