DV SSL/TLS Certificate for *.baylink.org

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.baylink.org DV SSL/TLS Certificate

This certificate with serial number 06:84:93:25:f7:02:6f:3d:11:0e:2c:32:23:7e:eb:a9:26:c0 for *.baylink.org was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.baylink.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:84:93:25:f7:02:6f:3d:11:0e:2c:32:23:7e:eb:a9:26:c0
Serial Number (int): 567786581664437560566945918920311465125568
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: aa:34:33:65:b4:b9:61:e3:23:3a:4e:a7:f6:e9:29:7c:d0:c7:73:1a
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 64:3f:6f:c9:33:c1:77:b4:f0:bf:f5:34:a6:f8:ac:ee:58:c3:60:08
Fingerprint (SHA-256): e8:03:ef:fd:42:c1:45:32:5b:a1:4f:fe:d6:8c:87:45:87:71:7b:36:91:9a:55:3d:3a:eb:02:43:c3:02:cb:06

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/65.crl

Check the revocation status for certificate *.baylink.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.baylink.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.baylink.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2EhJppvsJA6UyBK6HI
5cFHao4RxqoPzZfBx55e4hyi3CSWcrNTm0y1co3QeT1O4AppGjjLWOgmGFXiAKuH
Gl3SvGqaXDVQ4Q0h1gio/cC0I1j6Tm/jf/0TFo4ztJsBR5XWaqN7Rc4zAbAqFnUr
RQbNMvM/jHtMIXsEO76taibnRVHbREKaFtr8UGMluJ4vi4H8IRkV+kVGuV2fM6Wi
ZApZyv19gylv25vCSa7zdz2ZzgD+KlnXD3zGd4KQb+eaxkmAZ3xLOQGhTzQ/StMS
WxkiINRsrQYaXwAJgIftKF+Q8qPyYSTHUQ5erkFM5sKEplxBHAaEi4WPZQq9Df21
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567786581664437560566945918920311465125568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-11 16:56:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-09 16:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baylink.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22840019211581888358001528957997696597054122468197014737241678554798494172151396784584417610752013406851323712051337948023948888475034031071363185396372707404238680654641437990131293938484036603239295039559958174503839324630584613662192614437067928836714248418252559811702363492537107177230168954168597439404346294428961122264974665372485370078377303226069274290048543958682296816666691219232710662538784147968515924980132435640536549201583767229578000426134119843709887483120042697617890582954092668899017743228640301031975274790853149327857839383721967417576059002921016295687678325509206691206006577541084652352819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa343365b4b961e3233a4ea7f6e9297cd0c7731a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baylink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baylink.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/65.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000196c07bf60b00000403004730450220748ced73804082beb4e10bbe5a47e4d6fc34694251e255480423eae109da8b2c022100a56100cf22afe4a749ae0b63681828ffb8d297ece2cb08f4b1d8cfc024840967007700af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d00000196c07bff9d0000040300483046022100f56f0a34e80c3b2334a2c7001397631fa9a7ddc7e1e4425454f424fab894ac99022100b14f6193d21e33ed2ac365c05ccd7be8a17e83f8473e52135b40d32031d475fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008439d8c57eb63ec4f8f55d31a4f420b3f3a81bf0a37ba25551c9e368e5ab77e2a7662dcf3f24744c9ea96e256268209f3c4d11b96a2bece0f01c18c8c1af9b2f8dcc10311db959c15b04e4b380b7ab4ea3ab8ef1d7fa52369eb2c0f9245964744162a2c75705a7b98764989ae0459e26e23b7c79b29c3f25df9d1a1f95d9cc4b6d645ba7de4dccc2b34e01ca96f8d05580c5036b948e607f972d763615833240a82189d1aa97a94f080e3833fa9e7e78f5dbdcc5c3b42b07cc43a758dfc75b4208fe1500d20996dd02a8d981e4fd161f1351f146705f43e260961548587fc7a8bc32808109e8a7bfb5e6292beff953978060dc6f6814b304fd93eb38ed52eac0