www.ybuco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:36:e5:67:65:a1:61:d0:14:65:44:11:c5:20:33:ac:51:06 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ybuco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:36:e5:67:65:a1:61:d0:14:65:44:11:c5:20:33:ac:51:06Serial Number (int): 280017035687931967521488414979656025657606
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:b7:66:df:d3:c2:82:44:5c:18:00:81:dd:77:6c:1b:f1:6f:61:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 62:02:31:9a:c7:95:2e:f5:2f:da:e1:5a:f8:48:35:fa:1f:6f:85:6b
Fingerprint (sha256): 92:ee:24:84:a9:6f:3c:0b:da:f9:bf:1e:b6:56:a7:96:c9:14:18:eb:28:4f:b1:4c:67:11:47:81:be:08:07:01
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ybuco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ybuco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ybuco.com
Other certificates including the domain name ybuco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ybuco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAzblZ2WhYdAUZUQRxSAzrFEGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwNDM5NTRaFw0y MDAxMTAwNDM5NTRaMBgxFjAUBgNVBAMTDXd3dy55YnVjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCmG5mk8es99OQ6BsX3cR6vv/sbnsA/XYQL yIR0s075YgM/THXBgHBOwzR9MkhJOY3woA1991i8qGF3Li81XOG65qdS7H8lUfvB yC9NbOZ3xWJ3Cm1KSuSSxgOmpEF5RB2qcvM0JM4FuCBOgBx30XLWXPkOo1TJjM/T JQW8b7GGiGILdZubiKIHoEEvV6ljGFcVTVSsYtDqoZw0ZF5G5UUMJlWMwcrNovGz R6i82k39A5+AKQYtvq/UTAYZWSSNERsnzYk/8bfh7pTE93WLM9NxPwQMsGR6BrBe CWFJ021bYMstDzmfCHksMrpOtT/aUbZoB/6xaBgVw7lvWaq21e4smd48x/OSopTM Xt43ktbFXw364TIiyBUJxiV6V56CMwA8EqqbImSSuun3MxdJhvd2LGPMf67WLVWC tBXdaVMzttWR3C73SZywFOnwB+rkaPP57qpMyNKao9sFCc4SDOvcbrHjGlD0qPUe JTI6EjgTFMmB6SB85PcSm64C+eUC48NU57m5ciFgj2apaDIBoYr60bwbiV5vRQGo kLa8urFw/PnBB3HRZsTBIMmdkegIsNLhzr3KYY4r8MtA0YQ/pCYp5ubq9x8p06IH /NGVwvbbtzwm1lmyDvj6bs9WWd4Mtpcvp+xFt6le2gjaX3lhjbA7Eyzxd8rv5QMe JloPGjGRFwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSst2bf 08KCRFwYAIHdd2wb8W9hRDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy55YnVjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW2+ewATAAAE AwBGMEQCIF63yVCuSnJOU+WMa/r2zs3S8/pvJdc0pZDvqttaTc9EAiAxu09yfWP6 qqOMIQUyiuC0V+XKGfIgUbzLmmPva10X/wB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoM hKESEoQYdZaBcUVYAAABbb57BBMAAAQDAEcwRQIgIQB0tawPHqInx6ZzZoY5e7xt WHugJbXKFnaoCNaLiJoCIQCO97X8b5gUYdITI+ckFbI/2dqENiO/Q9Iv5nClXBax NDANBgkqhkiG9w0BAQsFAAOCAQEAAayB38QN3Gyr59oHXBbBP1u7odS+CnB2YZg+ HBYcUBl3S8QIEThneizg5gl4lB0Pi0IMahyAYG4vAtk1QyIWunQOBlFmVXjare7H Lo1IJM4093seetprtiM/Dx0DLimjiQfsc2d/71hKEIxFCiXsYSP3+ppHOPv/zv5b /44zvFdoI+24csUBOoaOg79wfRUTKi9GlSLXvV3eUMq2CVgGWSApO6QuOrFE+wpH z6ZZb5mxa9DP3SERFwRsbCqWJCcpOIfLeSNigWRLIdZM/nohECrNkhg5as49u3lq 1yuic99xALRmvRFIuhWvX9iBh8tdG4mPD9pa13DFiyBJk11mZQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAphuZpPHrPfTkOgbF93Ee r7/7G57AP12EC8iEdLNO+WIDP0x1wYBwTsM0fTJISTmN8KANffdYvKhhdy4vNVzh uuanUux/JVH7wcgvTWzmd8VidwptSkrkksYDpqRBeUQdqnLzNCTOBbggToAcd9Fy 1lz5DqNUyYzP0yUFvG+xhohiC3Wbm4iiB6BBL1epYxhXFU1UrGLQ6qGcNGReRuVF DCZVjMHKzaLxs0eovNpN/QOfgCkGLb6v1EwGGVkkjREbJ82JP/G34e6UxPd1izPT cT8EDLBkegawXglhSdNtW2DLLQ85nwh5LDK6TrU/2lG2aAf+sWgYFcO5b1mqttXu LJnePMfzkqKUzF7eN5LWxV8N+uEyIsgVCcYleleegjMAPBKqmyJkkrrp9zMXSYb3 dixjzH+u1i1VgrQV3WlTM7bVkdwu90mcsBTp8Afq5Gjz+e6qTMjSmqPbBQnOEgzr 3G6x4xpQ9Kj1HiUyOhI4ExTJgekgfOT3EpuuAvnlAuPDVOe5uXIhYI9mqWgyAaGK +tG8G4leb0UBqJC2vLqxcPz5wQdx0WbEwSDJnZHoCLDS4c69ymGOK/DLQNGEP6Qm Kebm6vcfKdOiB/zRlcL227c8JtZZsg74+m7PVlneDLaXL6fsRbepXtoI2l95YY2w OxMs8XfK7+UDHiZaDxoxkRcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280017035687931967521488414979656025657606 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:39:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:39:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ybuco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677660754676138736139556946413652064977084600445842784128788941398383129019575491490129091634986814519932044747422452361855305827441614976803969175560897323931148936229102835983918893853104206457798354309880049459342417331858642418009427869331222878967327190658163101601377042537766141438808854100313210283233678539831750728638893315249404855902362039084518670846905315225760831871979635971756503441466779494022628499024940953710599214782766370281288313124001992909427319680878222642448342048482264507144830901185510315967129623532978144939988243079343076307511141860003092122636541132522153383323731114946204151138090367730994591279903332396017593802306691911939872058168882174187820666780033666971196386769808559567542427109995935493463609040618743528312843886559134105814551695876914334832499898386925819365473825654215565503177942132645586318494088246639790531513397079620278690122973781399580143610707442567617445601541339124892368714330935579776244160955252984376450493300564238545006396266581178573788855985731286908234299961793139829459614684034649021245029347105370436914707065269743069038031354608406897407184144941293948109455107453102212391229761102107386874432502605149444602000470550300301886200016200056749507875016983 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acb766dfd3c282445c180081dd776c1bf16f6144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ybuco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe7b0013000004030046304402205eb7c950ae4a724e53e58c6bfaf6cecdd2f3fa6f25d734a590efaadb5a4dcf44022031bb4f727d63faaaa38c2105328ae0b457e5ca19f22051bccb9a63ef6b5d17ff0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe7b041300000403004730450220210074b5ac0f1ea227c7a6736686397bbc6d587ba025b5ca1676a808d68b889a0221008ef7b5fc6f981461d21323e72415b23fd9da843623bf43d22fe670a55c16b134 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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