bakerywest.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:de:93:e7:d6:65:f1:58:74:4b:01:a8:c2:b8:33:80:09:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bakerywest.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:93:e7:d6:65:f1:58:74:4b:01:a8:c2:b8:33:80:09:82
Serial Number (int): 424188429467956422071279187490979792816514
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:ad:4c:6d:06:a7:a4:70:9d:08:90:6b:ba:98:94:e6:eb:3a:72:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:32:55:14:ae:02:dd:29:c1:79:36:db:6f:4d:c8:0b:1c:c3:7b:e1
Fingerprint (sha256): 11:e9:0c:ca:e7:a4:05:bb:cc:81:66:2a:d1:ea:96:d1:4e:63:1f:99:02:cd:51:b5:73:bf:d9:c1:8b:68:6c:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bakerywest.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bakerywest.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bakerywest.com

Other certificates including the domain name bakerywest.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bakerywest.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424188429467956422071279187490979792816514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 16:14:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 16:14:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bakerywest.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788903236418011531799393032986031914469543506135221272754833760320777764066444558447422079715704093239365738430830875297008824880466283308636283926305007053550193607497214024405854588237711136360268767953662762231375110976514198414834456235223899311161321577247320847580863836703801561357510707665199428458027141576227912521490719964596023127270000416346520051988242578604262694372373225726503367130775580345970177853262222697932187414044109193973816343819521060150449785597766377270177112582798306031951879826375475338228134659641602405894786095055889885422680641876531188638441019270451256533061533176221555116453314648472030429019789044547654467064596399767537339990153560932764981776034395905900737354254985324967675852434051608530226199612484862932329140962753849428886330964149854511751831072738072766261665506719664724787165638957101782148621109389456521847864068641103536280681838322798229934305121878684332572677097177629947816672806655136879796227174921589652660107448568908048438894567465802285060226295941231606418225654940149300960980210843334905578991056042276118101031585275909942680298312620225938842593653015173368873600065845577970185773943288175068835119422931734939308070659871321760384035853916687612920737485379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dad4c6d06a7a4709d08906bba9894e6eb3a7246
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerywest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc0f6fd0400000403004730450220202318545fe1d3e63c5e9dcdb68a4b1c748bf708f7fa96797c24e75ee26d1527022100d3aaa8e3b87f4149345c86c1065d33ee6353cb185a759c5ce2d7acd6d96b6f74007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc0f6fcf70000040300483046022100a90a8be28174fdaa8941dd3d9124faa9fea848c724efed97d0bb908bb5440d70022100a6616917a19229689336545c142ed9e6b11bdbf815ed6301ab0effde4a07e67d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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