byucougarcapital.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:62:2c:f2:0b:3a:76:39:25:aa:19:45:54:ca:1b:cc:31 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=byucougarcapital.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:62:2c:f2:0b:3a:76:39:25:aa:19:45:54:ca:1b:cc:31
Serial Number (int): 270995261782948441129853594756814269566001
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:c6:45:e2:c7:17:91:82:a4:ed:30:55:ee:38:a7:20:78:8f:e3:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:17:ad:4c:5f:22:63:d4:68:20:5d:c7:5e:fd:c4:d9:a3:8c:79:45
Fingerprint (sha256): c4:aa:3f:77:ed:5f:d4:59:1a:2f:58:6e:8c:56:a4:01:2e:c0:89:76:76:d3:56:31:3e:f5:63:a0:c2:38:ed:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate byucougarcapital.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byucougarcapital.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byucougarcapital-org.ignitebyu.com
byucougarcapital.org
mail.byucougarcapital.org
www.byucougarcapital-org.ignitebyu.com
www.byucougarcapital.org

Other certificates including the domain name byucougarcapital.org

(limited to 100 certificates)
cpcalendars.byucougarcapital.org
byucougarcapital.org
sni30941.cloudflaressl.com
byuia.com
sni30941.cloudflaressl.com
ibmc.us
ignitebyu.com
byuia.com
entrepreneur.byu.edu
sni30941.cloudflaressl.com
ibmc.us
ibmc.us
byucougarcapital.org
sni30941.cloudflaressl.com
sni30941.cloudflaressl.com
byuia.com
sni224229.cloudflaressl.com
www.byuia.ignitebyu.com
ibmc.us
miller.byu.edu
miller.byu.edu
cpanel.byucougarcapital.org
cpcontacts.byucougarcapital.org
dev.byucougarcapital.org
sni30941.cloudflaressl.com
byuia.com
ibmc.us
sni30941.cloudflaressl.com
ibmc.us
sni30941.cloudflaressl.com
byucougarcapital-org.ignitebyu.com
ignitebyu.com
sni30941.cloudflaressl.com
sni30941.cloudflaressl.com
byucougarcapital.org
www.entrepreneur2.ignitebyu.com
sni30941.cloudflaressl.com
ibmc.us

Certificate

The complete raw certificate details for byucougarcapital.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUwAwe3wYRTDgmUopeUZ
mLIrqJm8Pv+0vPYfgEYQrumSkCqEoqQLHFt9RGm2MCvL5GqgIo1np9enybBAn78E
xLgnZZ9aYyz7yhqlSvgV9J14npVOQ6i4Lji4svQMrx/nhmlHHmQfTNXY/jbHa6dP
p4BbbwDtZaEmYmkALkL0yIE65wA8sctS8aQe6pjpKfQA/FCtQawP5M4Let6HdzfZ
urmErK1pxigJNESx2QHp0ZMHkp6LIgkh8SVNBmWEeARxiXM5cnRdgpgfV06v3urx
DvrVdxwcshseUQaGkxLZuuxVc2Q07V5hrxciZWQbeaV5FZfMxrcObO+g14LXewjN
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270995261782948441129853594756814269566001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 08:16:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 08:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byucougarcapital.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23896518094572555131062530531083843764030832150963216584533811091277149627252975256984414574514935514487766469038174512689734430610795535131924482268953503162768295001385257145875430334656133123270633536809884057296581719969484806971842173523393076477937486241039405647903801120263502552164610570477414454382650432375365438621073802104263075241656892999715885556557966068073967839054053240260859866317725089708024909955087394122699613596778196225915092943795340738556528950056632277893044865327529692285845754908399059172514240641081465146367619509390682934651303217738851788546271322795497505996781130019388466449711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57c645e2c7179182a4ed3055ee38a720788fe3ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byucougarcapital-org.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.byucougarcapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byucougarcapital-org.ignitebyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byucougarcapital.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165c7eaaea80000040300473045022100c8d50dcb83999180215b94f4b90a373489f9c492bb82c36b711e8a3f8c3baaa90220186f41ce11bb6184414b6a77c45158d583af2b8ddbe519370157d0c62b7d39ba007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165c7eaaea00000040300473045022026da7386da0cdf4ef0740b1579818caffa0e333d945b11f69de0fe5d4d6d72c2022100a226ea4b57bde4955c141ff6c31b458d2bc15a141b7dffb1ca80fcac951c4052
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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