link.buzzfeed.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d5:78:46:de:e5:19:79:99:9e:4c:c4:be:0e:d1:8a:02:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=link.buzzfeed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:78:46:de:e5:19:79:99:9e:4c:c4:be:0e:d1:8a:02:c5
Serial Number (int): 333976877290560985357402207492515910255301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:6e:a0:21:dc:0e:fb:7d:08:1e:d1:f6:08:6b:9b:96:dc:00:00:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:89:74:86:dc:64:48:e4:bd:ab:e2:c3:16:07:26:f2:c0:0b:11:c4
Fingerprint (sha256): 02:cf:76:cb:29:14:d4:43:c4:7c:d0:2c:f8:01:de:95:63:c6:9d:5b:13:3b:0a:7b:1e:9f:24:bf:56:8c:2b:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate link.buzzfeed.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for link.buzzfeed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

link.buzzfeed.com

Other certificates including the domain name buzzfeed.com

(limited to 100 certificates)
statuspage.io
www.advertise.buzzfeed.com
n2.shared.global.fastly.net
statuspage.io
japan-status.dialpad.com
buzzfeed-brand.buzzfeed.com
statuspage.io
statuspage.io
n2.shared.global.fastly.net
r.ssl.fastly.net
*.app-west.buzzfeed.io
*.buzzfeed.com
p.ssl.fastly.net
se.emails.buzzfeed.com
statuspage.io
f2.shared.global.fastly.net
beta-dashboard.buzzfeed.com
p.ssl.fastly.net
sslvs03.igloosoftware.com
f2.shared.global.fastly.net
shopwith.buzzfeed.com
p.ssl.fastly.net
p.ssl.fastly.net
*.app-west.buzzfeed.io
link.buzzfeed.com
returns.buzzfeed.com
f2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
advertise.buzzfeed.com
r.ssl.fastly.net
japan-status.dialpad.com
r.ssl.fastly.net
buzzfeed.com
statuspage.io
statuspage.io
dns-vetting1l.map.fastly.net
statuspage.io
buzzfeed.map.fastly.net
dns-vetting1j.map.fastly.net
h5.buzzfeed.com
statuspage.io
f2.shared.global.fastly.net
japan-status.dialpad.com
statuspage.io
p.ssl.fastly.net
buzzfeed.com
n2.shared.global.fastly.net
p.ssl.fastly.net
m.ssl.fastly.net
dns-vetting1l.map.fastly.net
sslvs03.igloosoftware.com
p.ssl.fastly.net
statuspage.io
dns-vetting1j.map.fastly.net
advertise.buzzfeed.com
n2.shared.global.fastly.net
sslvs03.igloosoftware.com
m.ssl.fastly.net
dns-vetting1j.map.fastly.net
statuspage.io
li.lisecurelink.com
statuspage.io
buzzfeed-community.buzzfeed.com
statuspage.io
statuspage.io
n2.shared.global.fastly.net
link.buzzfeed.com
tech.buzzfeed.com
p.ssl.fastly.net
m.ssl.fastly.net
statuspage.io
f2.shared.global.fastly.net
n2.shared.global.fastly.net
r.ssl.fastly.net
statuspage.io
p.ssl.fastly.net
shop.buzzfeed.com
f2.shared.global.fastly.net
statuspage.io
m.ssl.fastly.net
n2.shared.global.fastly.net
statuspage.io
dns-vetting1l.map.fastly.net
b2-alt.shared.global.fastly.net
japan-status.dialpad.com
li.lisecurelink.com
www.buzzfeed.com
lab.buzzfeed.com
sslvs03.igloosoftware.com
h5.buzzfeed.com
h5.buzzfeed.com
link.buzzfeed.com
r.ssl.fastly.net
dns-vetting1j.map.fastly.net
buymethat.buzzfeed.com
auth-demo.buzzfeed.com
n2.shared.global.fastly.net
statuspage.io
r.ssl.fastly.net
f2.shared.global.fastly.net

Certificate

The complete raw certificate details for link.buzzfeed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgISA9V4Rt7lGXmZnkzEvg7RigLFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTcyMTQ2MDJaFw0yNDAxMTUyMTQ2MDFaMBwxGjAYBgNVBAMT
EWxpbmsuYnV6emZlZWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlOZug1HdIOHQgi7oWWPRScd5wdOy0dBVhtBk/y6R55E1FzRxkSb6W3gVxVyB
a8Q3/+T26s45yKmVJ5ZBdUroWi+kFGdjofstzwpSuIMV6XOerOn9vhEB1OUN0e3Q
jf4Tw9To9fEiyci19TQ/HkHCFxWi8Gn+wBypSWPxOl8vuQGECZDuUuI1rzgvixyr
Zx5yb4aVfQrEhErTQNdbu+j9rqIVU5hXoVQXbyBhSFGFuQ8g4iO4XlgY7aDfuWut
dqCE8aUcZfz27K88Zkq19qvo/6aj+6BZ9/FdO6kLrEdOxVm09ytJ+pI31uoZHITQ
LSsp1156pgcyF2G7rjJ1G+Cy0wIDAQABo4ICEzCCAg8wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTgbqAh3A77fQge0fYIa5uW3AAAoTAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzAcBgNVHREEFTATghFsaW5rLmJ1enpmZWVkLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABiz/RSNEAAAQDAEYwRAIgH4sxVu76KFWowu6q
c77i3lKzAL2aZXfeVSLT2XHitMMCIA07OIZvVHNPuqWT+7cAVQuE628a4hW1HUkd
2kyLXX4TAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLP9FJ
CwAABAMASDBGAiEAw35Zs1lqCFOVo05aEX141f/YWjUAw5DW0KfQE2RqU2MCIQCW
0VYi8QtJ2Oi4ntSYp8gRhNmHALHzU/ylRTB+U00LkjANBgkqhkiG9w0BAQsFAAOC
AQEAWg48YG/Ck5scSB7KDeBWCFYK3tISbWQHOgVSF3359t8RkY13hgSzGg9Y+xT7
GlJrQbDWwQA8jysXpcSDDDVG3acsbDU3YkQugTr6j0PKDBJ1rigjPvpvuOoTwa7D
cpIHJEodhq7qGy3Zw/lny4wVkPqknL/INg0ZeLrCqxJVrV0pCvn6qL+KniMlSGMf
TbOSxBb2YaMpUQJgO1ZKqR7FMu0xEPXYUS0f0Dj4QpEvKRa7YydCIKq6AmC7LTnM
wigGzKJE+GB7cz+4mtbecEahB1w5+wtMnI1S/e0kNfUZvqV40W78qCIJdEgxQz9b
gPCCEkCwqQgszShPvXrbfD8lCQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOZug1HdIOHQgi7oWWPR
Scd5wdOy0dBVhtBk/y6R55E1FzRxkSb6W3gVxVyBa8Q3/+T26s45yKmVJ5ZBdUro
Wi+kFGdjofstzwpSuIMV6XOerOn9vhEB1OUN0e3Qjf4Tw9To9fEiyci19TQ/HkHC
FxWi8Gn+wBypSWPxOl8vuQGECZDuUuI1rzgvixyrZx5yb4aVfQrEhErTQNdbu+j9
rqIVU5hXoVQXbyBhSFGFuQ8g4iO4XlgY7aDfuWutdqCE8aUcZfz27K88Zkq19qvo
/6aj+6BZ9/FdO6kLrEdOxVm09ytJ+pI31uoZHITQLSsp1156pgcyF2G7rjJ1G+Cy
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333976877290560985357402207492515910255301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 21:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 21:46:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'link.buzzfeed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18796899236999152460283058641044218292297205777466595792334301286406399367485011916809141799586072485073495932049823027824487342045635893974252896904348870699217692985593742269500498044447464153637641319968694920715406645878912690176198646779585675283370894972261879303496531686278321711434619819697993846924540737059735936181833305717465880767192522340320355773729796678983632704613104512404991263125148859343152189314208136146062189097353888789180568926443078375974444424189428781275904996774784204169943918234511393880361736260149991731819562017477208378361507109786270480737191101005512607591926000918756549767891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e06ea021dc0efb7d081ed1f6086b9b96dc0000a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.buzzfeed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3fd148d1000004030046304402201f8b3156eefa2855a8c2eeaa73bee2de52b300bd9a6577de5522d3d971e2b4c302200d3b38866f54734fbaa593fbb700550b84eb6f1ae215b51d491dda4c8b5d7e1300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b3fd1490b0000040300483046022100c37e59b3596a085395a34e5a117d78d5ffd85a3500c390d6d0a7d013646a536302210096d15622f10b49d8e8b89ed498a7c81184d98700b1f353fca545307e534d0b92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a0e3c606fc2939b1c481eca0de05608560aded2126d64073a0552177df9f6df11918d778604b31a0f58fb14fb1a526b41b0d6c1003c8f2b17a5c4830c3546dda72c6c353762442e813afa8f43ca0c1275ae28233efa6fb8ea13c1aec3729207244a1d86aeea1b2dd9c3f967cb8c1590faa49cbfc8360d1978bac2ab1255ad5d290af9faa8bf8a9e232548631f4db392c416f661a3295102603b564aa91ec532ed3110f5d8512d1fd038f842912f2916bb63274220aaba0260bb2d39ccc22806cca244f8607b733fb89ad6de7046a1075c39fb0b4c9c8d52fded2435f519bea578d16efca82209744831433f5b80f0821240b0a9082ccd284fbd7adb7c3f2509