bayareastructural.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:0d:9f:fe:f2:e0:86:9b:06:88:86:8b:67:d5:f8:bc:ae:4b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bayareastructural.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0d:9f:fe:f2:e0:86:9b:06:88:86:8b:67:d5:f8:bc:ae:4bSerial Number (int): 353085485517876946974099025746349602418251
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 92:da:ed:1f:35:24:5b:43:4b:18:ee:8f:bc:bc:d0:ad:cc:ca:14:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 65:67:9c:03:c4:16:ce:0e:0e:bf:e8:d4:52:c1:65:a3:98:45:13:bb
Fingerprint (sha256): ea:d1:84:ec:af:20:73:33:b5:9a:6c:88:2d:6c:4d:f4:d9:e2:db:27:c9:53:cb:b7:be:80:4d:e1:e9:5f:7d:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bayareastructural.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bayareastructural.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bayareastructural.com
www.bayareastructural.com
www.bayareastructural.com
Other certificates including the domain name bayareastructural.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bayareastructural.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgISBA2f/vLghpsGiIaLZ9X4vK5LMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTMwMDA3MzdaFw0x OTEyMTIwMDA3MzdaMCAxHjAcBgNVBAMTFWJheWFyZWFzdHJ1Y3R1cmFsLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3NHkCr83On0puS+qO/TpfT 1+f8YlbeynL8PoyQYPnffoqPqvoA1VVKy0fkBwu6L+c/jj5tpteGkrcEtTq+06x7 pCdgueiO4Fz+fm8OowmB5kPTrHRM9Y20fBxvm+J1lNuE30y/1cpMPfJj9e4FxJN2 b1XEbM40hRiOo6Zs8nnj+J+v763N86/U5e4TNrACtMLaZaM4C3sZ7YiTtawSgLGH gc2btpHPQDsbCTk4aaMtERM/aUd1vLDM8VM0+bWi1OtFmUrQ9uvSXyShsBccCAYh pVkAnRNG5M0AltY8DAYHxUNQkDG3uH5gA/doYUfRV/K75f/FDwZMc0nZzVY64ei5 fbQX6IkKmMjnItNUH63ItSEoGOl240UYhCRirZ8tfPMiMvBSZdYtibSOltfdeQmR w4FgGVNYjoUN88FLL4kcI7wnVViackkG1rHcaPa59nku6x1bxf9BELuICYotQeAV nMuPAT5Sisr5HpsKFHzgPRE6jE3M/iPDV+NcxrqRbifTTni02S+NzRRReRoEaUp9 WBHApU6zUqO8RXCIOuf7CtyLbkHRhDfRG1r0k0HSZy7gg2ebFgng5dp+TMi7nYVP zH6/qSW9mslpzzjuaO/O9UmxuXC9H8E2zroAmGL6+NrkOQMl5jVFOMDealF96MiU cW4obQIJynq7DfgMZ0wpAgMBAAGjggKDMIICfzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFJLa7R81JFtDSxjuj7y80K3MyhQQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVYmF5YXJlYXN0 cnVjdHVyYWwuY29tghl3d3cuYmF5YXJlYXN0cnVjdHVyYWwuY29tMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtKClK+QAABAMARjBE AiBjodfKPbqLThYSzRGzHYJ9AhEdP4cMfCM7K3mQ34YjbwIgT2zFkoMr6sSNIVSU uVo+Scqpr2qsDvhOhBXugeGRThEAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAW0oKUr9AAAEAwBGMEQCIFRgMCZm2DCaJhHhSM91HcWoJv1gxBwk WEZSvei5FyUEAiBL+iUDAMecd7aFr0H/9LgvnueNBt7cUBfuiirAH6NBNTANBgkq hkiG9w0BAQsFAAOCAQEAML/hGdX+DNPS9wqpnb0dNna+139ATdJvqxOv9jYbyr8D 45F83QGddd6QcY5vec5PsM/uyOT+sQcPRwj//GR3S1JWs6BaaXLFfBIsS5CI/7Fp MA/vDkJYvC1WP3gFnIwidZWIcs/pi6pNoEuHRVPwesVoNAd2Hwj4O2SSSULhxXTp vEI3YZXOWPG1taGYfZPXchGtdjHN0sSS7EAqSttfqzVob4Ky4Nz8URB/7Ok0QxNF DgdpFknV5zK+cZYaI7FhXD9RcDqyAW3OnnrZoqx6EQ0jwq33/ZW4YJSzCvinEK15 nY/NDlpojWx5zd6gzarAdKasVBJNeExZGmxiunf11A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArc0eQKvzc6fSm5L6o79O l9PX5/xiVt7Kcvw+jJBg+d9+io+q+gDVVUrLR+QHC7ov5z+OPm2m14aStwS1Or7T rHukJ2C56I7gXP5+bw6jCYHmQ9OsdEz1jbR8HG+b4nWU24TfTL/Vykw98mP17gXE k3ZvVcRszjSFGI6jpmzyeeP4n6/vrc3zr9Tl7hM2sAK0wtplozgLexntiJO1rBKA sYeBzZu2kc9AOxsJOThpoy0REz9pR3W8sMzxUzT5taLU60WZStD269JfJKGwFxwI BiGlWQCdE0bkzQCW1jwMBgfFQ1CQMbe4fmAD92hhR9FX8rvl/8UPBkxzSdnNVjrh 6Ll9tBfoiQqYyOci01Qfrci1ISgY6XbjRRiEJGKtny188yIy8FJl1i2JtI6W1915 CZHDgWAZU1iOhQ3zwUsviRwjvCdVWJpySQbWsdxo9rn2eS7rHVvF/0EQu4gJii1B 4BWcy48BPlKKyvkemwoUfOA9ETqMTcz+I8NX41zGupFuJ9NOeLTZL43NFFF5GgRp Sn1YEcClTrNSo7xFcIg65/sK3ItuQdGEN9EbWvSTQdJnLuCDZ5sWCeDl2n5MyLud hU/Mfr+pJb2ayWnPOO5o7871SbG5cL0fwTbOugCYYvr42uQ5AyXmNUU4wN5qUX3o yJRxbihtAgnKersN+AxnTCkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353085485517876946974099025746349602418251 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 00:07:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:07:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayareastructural.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709047209482612220102893347718250268153405728679066984944799597705928037335751177985219284802714882358031845915259557583385995479794244848675152999214057860465101841212969982525209369082746402676804921974234025910023720667069835708577361512586560368502718941102985065050041355451107041998632827711594290911942898757545387706830034761935340873565227535468590511109587573971774981982408349072403513204229869143710871575713955802338215102026191588951332315236070457285986737835737986494258222861629252284359948155902039978040243442593095810433680994019234327846077867029739358412954551390402761032697410244651045081201445525119254960870088697819914969593989907780068255245613776264965100085737621485546111332774490846923251614529221710209564741488310188417320641626020579038128513207405457214630315146382806259114377071441822998190376737116113498338253323483261546345082719128998876169902057407461363675624411208204263963183942410264785339745436515112864592367324470161563263839357667454488923441579866589150272239843894970190974591387886642873298907887426011649984500096208549046548061619593625191413404611747110794948811953714432335521477609202882515895418026471325729477851318828150399309521435950570824684075594206726844036046867497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92daed1f35245b434b18ee8fbcbcd0adccca1410 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayareastructural.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayareastructural.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d28294af90000040300463044022063a1d7ca3dba8b4e1612cd11b31d827d02111d3f870c7c233b2b7990df86236f02204f6cc592832beac48d215494b95a3e49caa9af6aac0ef84e8415ee81e1914e11007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d28294afd000004030046304402205460302666d8309a2611e148cf751dc5a826fd60c41c24584652bde8b917250402204bfa250300c79c77b685af41fff4b82f9ee78d06dedc5017ee8a2ac01fa34135 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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