www.bayridgegenesis.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:d4:89:72:56:ad:44:1f:b4:08:fa:e3:35:24:d8:46:a4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bayridgegenesis.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:d4:89:72:56:ad:44:1f:b4:08:fa:e3:35:24:d8:46:a4
Serial Number (int): 293605910284686916997756037217206020884132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:81:32:bf:e6:ba:96:f7:46:e6:be:8d:50:53:2b:0e:05:1f:11:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:c2:25:d4:be:7a:c8:79:40:a9:81:ec:82:9f:c9:83:27:74:fc:89
Fingerprint (sha256): 02:ce:c3:54:a6:37:7e:22:e5:81:82:0a:7a:02:d9:5b:97:aa:b6:d0:de:f6:b4:bf:99:df:fc:8a:12:ad:6f:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bayridgegenesis.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bayridgegenesis.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bayridgegenesis.net

Other certificates including the domain name bayridgegenesis.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bayridgegenesis.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293605910284686916997756037217206020884132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 06:37:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 06:37:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bayridgegenesis.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853393437427161744393066693201643556627392387725005105121512635803616567849032294960624118315886260846989474734660594509850181152948099252509059121869894705660751502074673027827020801475051252602897984294278076827316590183494814462801541728005597879846538529470815830034970590618676656238588464455388479782665750976059143472513521962941641055972916009937621198908636866309854741701662770152672158424798054719093807240685095168352308540609312867459774248777319976470157466902851137965200000987167104314604278219318636487871666460197129635326895041319601212037021130857465852843964255481348096265974083158419110371056575011892917376801865511416408538029149348079591262473945236060529819745953328039251770465529758376354854644756167493945324039978523830992837228887808369163028006749281537131507291155381838596568304773431777906865180669612123606386473641762484721474317479230391275004436478697545797397665562182257670287263995593637576299181961744247329157498858494111883240179006394283294481317112571182490427911396818876439989559400939105871343029244161326582075275838848734356394961187719363534154330063848929152914917913068464483624378550490905337391615695639535478706990842351835890704444020984238130387204381584087632324566603271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a8132bfe6ba96f746e6be8d50532b0e051f1138
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayridgegenesis.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2d3670ca000004030047304502210084472b212d5b6454a83a444086fe2350bc3a0871355d64490e7fd46c140b1d4b022062679856a538ac8d7ba47764e329dd80cac10c5a0802db64e4dad8703b6de5da00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2d3670eb0000040300463044022008426808b22952e10c1a83ef1a4f57d00987097f108ae5ebacb7f768f5431c87022004859e141906108f6ff04f4fa407fa9d0521594096571a40ad4d0c2a42e29457
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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