breakthrusafety.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:29:ef:fd:c2:76:cd:16:4f:76:7a:22:36:78:20:25:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=breakthrusafety.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:29:ef:fd:c2:76:cd:16:4f:76:7a:22:36:78:20:25:b1
Serial Number (int): 290656885804114479590263920672332893398449
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:e0:02:67:d1:43:0e:0f:3b:ba:bc:c1:c3:c7:fb:3b:ff:08:c6:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:f5:96:f2:a9:2a:74:a9:4f:b2:26:0f:ad:34:74:4b:74:c6:98:f8
Fingerprint (sha256): 07:2f:01:38:16:a1:9a:d6:c0:59:dc:52:76:c9:19:8b:8f:6a:e4:21:9e:00:67:0a:b8:f6:32:ad:5a:5a:69:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate breakthrusafety.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for breakthrusafety.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

breakthrusafety.com

Other certificates including the domain name breakthrusafety.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for breakthrusafety.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290656885804114479590263920672332893398449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 19:20:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 19:20:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'breakthrusafety.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960683081245050231130173536040812201765643600489204132389039191667234512291926332020775426889125950988431354997214715369900042355523785751673069885706751784126760532212162884835273849728960246949351351028046046220511300551803933424052857784255072597548444981107557070727744752795989012523452508829804959213850407856868599946632216732938037408316498306342356570256483226213123342098335456413797257978734347316167331619376567275698597156295041254530126033304737102440774600541563944671116457174442152516069683944981802661519168928989343656186869355051446784762081981687696669477297188085735975884814683087484923643090711148034741478662311228224126932175522573148252147283219813841496784203751266790164447533237449176420006366479433920639116668701084404179282020909663374321296116645696338985109116602980215558714887713310197963957032575037909252270199745939110798074239108103382287631060752965882671388694135393590270610634298279381971442913339697231312313074518972051293773922068095051557894949073400360845559295047852550589460817033178811133432162526978421397268995139497940908698610591448661373660514301580145725387284514772173394466201274846618058782162936325503245084785506885516942028863754449566839300235461886035755170552741773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fae00267d1430e0f3bbabcc1c3c7fb3bff08c6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakthrusafety.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0b383cd70000040300483046022100bd50260144856c9ca411c0543c8ff8c72af4eb8dc7f60a6e85225f7cc7232300022100f6e3f51530408beb399a1d7cc73282b8cc128a71274a6eb6dff50362f12e66b50075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f0b383d93000004030046304402203c923875577c37480bac3a055b7b1452cf9eb2b39cc3cc693bd2eb2d3e95202002201864b8c40b15aa23bbaabe6e290e847f6370d0ae50ab361cd4ca05306e586dcf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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