www.ybuco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:e5:67:65:a1:61:d0:14:65:44:11:c5:20:33:ac:51:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ybuco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:e5:67:65:a1:61:d0:14:65:44:11:c5:20:33:ac:51:06
Serial Number (int): 280017035687931967521488414979656025657606
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:b7:66:df:d3:c2:82:44:5c:18:00:81:dd:77:6c:1b:f1:6f:61:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:02:31:9a:c7:95:2e:f5:2f:da:e1:5a:f8:48:35:fa:1f:6f:85:6b
Fingerprint (sha256): 92:ee:24:84:a9:6f:3c:0b:da:f9:bf:1e:b6:56:a7:96:c9:14:18:eb:28:4f:b1:4c:67:11:47:81:be:08:07:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ybuco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ybuco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ybuco.com

Other certificates including the domain name ybuco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ybuco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280017035687931967521488414979656025657606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:39:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:39:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ybuco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677660754676138736139556946413652064977084600445842784128788941398383129019575491490129091634986814519932044747422452361855305827441614976803969175560897323931148936229102835983918893853104206457798354309880049459342417331858642418009427869331222878967327190658163101601377042537766141438808854100313210283233678539831750728638893315249404855902362039084518670846905315225760831871979635971756503441466779494022628499024940953710599214782766370281288313124001992909427319680878222642448342048482264507144830901185510315967129623532978144939988243079343076307511141860003092122636541132522153383323731114946204151138090367730994591279903332396017593802306691911939872058168882174187820666780033666971196386769808559567542427109995935493463609040618743528312843886559134105814551695876914334832499898386925819365473825654215565503177942132645586318494088246639790531513397079620278690122973781399580143610707442567617445601541339124892368714330935579776244160955252984376450493300564238545006396266581178573788855985731286908234299961793139829459614684034649021245029347105370436914707065269743069038031354608406897407184144941293948109455107453102212391229761102107386874432502605149444602000470550300301886200016200056749507875016983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acb766dfd3c282445c180081dd776c1bf16f6144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ybuco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe7b0013000004030046304402205eb7c950ae4a724e53e58c6bfaf6cecdd2f3fa6f25d734a590efaadb5a4dcf44022031bb4f727d63faaaa38c2105328ae0b457e5ca19f22051bccb9a63ef6b5d17ff0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe7b041300000403004730450220210074b5ac0f1ea227c7a6736686397bbc6d587ba025b5ca1676a808d68b889a0221008ef7b5fc6f981461d21323e72415b23fd9da843623bf43d22fe670a55c16b134
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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