natashabaker.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:1a:09:90:ae:d4:5e:58:8c:a0:81:46:6e:3e:ea:38:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=natashabaker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:1a:09:90:ae:d4:5e:58:8c:a0:81:46:6e:3e:ea:38:73
Serial Number (int): 324663987635655836852797596232939530238067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:ed:26:f2:29:c4:75:d5:4e:bf:48:a4:47:60:ee:06:5e:2c:37:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:70:cf:dd:00:fc:f3:8d:e7:c6:16:8f:a0:fb:44:c8:68:0b:4e:a7
Fingerprint (sha256): 00:82:56:5c:6e:0b:c5:ed:b8:a6:d1:7c:32:e1:6c:d0:82:65:1e:ab:3e:88:4a:99:95:09:9d:e7:f7:d8:0f:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate natashabaker.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for natashabaker.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

natashabaker.com

Other certificates including the domain name natashabaker.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for natashabaker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324663987635655836852797596232939530238067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 09:33:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 09:33:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'natashabaker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745181706793707133091845986920341629389347688806540750276402983227754801825318157139722079752854282644888074741060846765333759436631650252028078836298780757232869084482422746727382232931703197479055163772355924264415751965120842247360996744600385755576232899916540753651719252508059669282368190160860275940605085314186620042008150817808158374275409402918596922883378167823168084410384200740804950944392681786553855428694020296390938775737608646592431792709596987779350853215911538744385593353337305763355468953971857376647318772850255629163136272777949437547892384674177756564988918618848909254021485335888239777476600853704983720644296449828849077685320239147270678452645128370559992474005827869590635751299167410667948205976287245539166303839006385307099394732381794064469290395860127394401396218019899265306370417900081939528537491156911838795606619378156771707082495688550365962540899535890691895717950042547346969268403353383817446187218692407811692420386569746613281058431450835353718867923742887866004173673486163135741197749338153548450024398788498985675125433338296025808033759491324377360998585033127800097057617334902561050713779769954221610140494526229856215795495074648259669325726264686639468086619307402065679572653443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04ed26f229c475d54ebf48a44760ee065e2c37ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natashabaker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2b9516b00000040300483046022100dfa6b4ac8dcb841fdf37dac29a1e0529a5561bd0a1a49a7c357f235770537f820221009d66cc26349c44678f5703e897501ec89d7652c03fe049aa239e271e3a34af69007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d2b9516af0000040300473045022100e188ba306d64ffc8d31a4ca67600fd29c57a047fbf0e2ba4ba4c4247951d74ed02206ebb90629e2e35c24d904c91770cf088cba9cf1210cc759465fd224bb0000613
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019879475eee4b27d142aded88f4910ea320aa5cea58d16e6d4dc2478299cd91cc9c1b36a4820e708f3ce11836d7b9baaf6ef06e4985a0dbeaebae5f0df1493d94a4ec4285aa88cd4db5851cc52c3fa94a86cd35bd86fc5f28b8793e04f17c27a757611a43dfe1bf911be680d995cde3079c3cd13286693081d6e0c34cbcbbbcac6921dbd17a81b1075d6d3c52f72d71683fa9ad4d39f433393cf49eb0f9fa01a536deb5252ded7c47781cd88a22e95976bbe97d2b388cd102f3232848e68391fc33024724ecd66fba1d360cb4330d780e5b6282f18d44d44d663b353319cc2adb1f8c1567c43d468a556597f2bd463782eec084c83d9d9b49ec98b6414569e09