budtendo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d1:ae:c9:bb:fa:d0:3b:42:8a:3d:5c:af:b4:2c:35:05:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=budtendo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:ae:c9:bb:fa:d0:3b:42:8a:3d:5c:af:b4:2c:35:05:1b
Serial Number (int): 419800491549134347346900398889250241971483
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:6c:1a:f1:b0:db:1f:18:4e:40:28:e7:45:fb:db:a2:ef:13:11:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:8c:1a:c8:d4:e2:b7:74:b6:d3:a4:14:88:82:45:cd:1c:ad:e4:65
Fingerprint (sha256): 10:b1:3f:e2:33:e6:17:12:f0:fe:ff:48:fd:0c:e1:d2:ee:aa:c5:72:23:a0:77:69:ae:7f:38:35:b7:86:c7:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate budtendo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for budtendo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

budtendo.com
www.budtendo.com

Other certificates including the domain name budtendo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for budtendo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419800491549134347346900398889250241971483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 17:04:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 17:04:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'budtendo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744713292211864262516880670294175143377926714295802613690661422786376687358575461083894780537307756987030290882303517274569392856440796669176742894756841150545618890446854873716963992086177750530466781381522813489210468616955517908929127409643980917724325555859862506842400401751151397374013132704361116599697444253717092305175095760359643784443969121181847997173727803937745152350900638261367408039929633908292069361503647420328934805148017618336035138426205935596877859303551759978917157154701514987969129899244059751156106681904949420576032706718950320915044663593028322414126334500422430327280849919948567511548245712948555228676522813625583222821619994645354532426159109082646316806754305425081294969106560935192832650929680640508307180970045708204258446388198094928806471266917125486242800318836510597291229461640203489095755285296007824002194879863849883588906695811683132192253155891015637736513568647264612421341848244976149872521506229084566723878460911173539500973079552510908585961698339898254230807272838538088539668367981557506248849042468931844440045494414703038386112858026911162705240303278907322340508089884805639772615035188421883522423577120705786718651623113293715743507953589044469981842006732908654382604183741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b16c1af1b0db1f184e4028e745fbdba2ef131127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtendo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d56651b9c000004030047304502206e6c1cb7ef9e4bb55d48a09e2294b1e8396d7e0c2d574654b7dbf646cd1a397c022100c02c208c5a102c7e49b78ec1306062b4436e32a6e2f5f3e9c92e61584cb9d12700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d56651c010000040300473045022100dbc5448ab4bc443fa09d6371f7baa3d4269f8651ecec9fb74a52eee396a73a6e02201b1a73eb69fa563fba5803fa5d3a59994bef68c3a9cba8b58d77a4133007cf1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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