bionutritionals.com

Issued by R3

About this certificate

This digital certificate with serial number 04:48:b6:67:52:00:3d:4b:13:55:d9:52:33:7b:a3:c1:68:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bionutritionals.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:b6:67:52:00:3d:4b:13:55:d9:52:33:7b:a3:c1:68:b5
Serial Number (int): 373191930110334396577753945237614825138357
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:d3:2f:66:90:d9:a6:18:b4:af:04:af:3f:73:ab:f7:ed:41:c1:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:18:c0:e1:4f:1c:90:f8:9e:67:e5:e6:88:dc:6c:66:19:0f:b8:5c
Fingerprint (sha256): 12:c5:8c:96:ea:60:4a:fd:ac:62:fb:0e:89:20:cf:d5:d5:8e:81:29:4f:cc:59:34:8d:ec:c1:f6:3a:e6:01:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bionutritionals.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bionutritionals.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bionutritionals.com

Other certificates including the domain name bionutritionals.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bionutritionals.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373191930110334396577753945237614825138357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 15:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 15:56:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bionutritionals.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662167002426355007109157790501426345310729379329938394368516595089487276355571472471401722427180947709795979595867884102740030108117656200195564097862600199285639890644458953937369070539207904119525957566534376279593349434571009578449304260860864902965134834066313735725187777833524700046285305522981133095632055178735427029699545536502305586638503791924618523723989796441979008081797499525165715112344641538169768007357794354683415805085803180452736781066863735329238965044074582833124838621076635099525181606894935734716857962256837639112345462846946573343590308846497305059166498598126845046491585591435468510956137530314401026258039755168288472860654235459316675735905962605489150631888477777027259679553461479841255517205783239133354848516655698542477356178440725742610481094113272050440497319804450429445705956978982820925316229938300852630544350743266711057431974957804976760758710918980652470249441940781357863948493460178031926410525516455229653387597638857848196793445008471777018127545760407419695298286800680997114911157811540958159720534938559684937765296614145386020209020296683086888457281030588823512911255477718935955178705475204052599910914378947926960553849995861948273790947821707978972692149762455214595302598931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05d32f6690d9a618b4af04af3f73abf7ed41c1a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionutritionals.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036ca57be69ee4f0e17a361701bd2401761b4a06f5967f10fe3d431f2d0f4a2560cf978a5f3d180763f1459300fa7eccae4ec13550fc819e4427f4298f2e85977099a450f888e753d5500763fcbe3b53fd983f9a8ec02e12aa49343290494fdb3528759dbd8e1f5e48d1f50470a1d3978615887d7bd677361f3093f568082d4e98e021350b805e09275edd451bf98cf8d10f88f6489e6338b232ad76b8a09db75855056b1be15fce46a700a572cff0f0562335a5cdfeb2e78374e11014a258cb20c8b5d8b0d0825ce61863d696399806733bf1c2b7fa58a140c523ab00d9c74477255674f6e3048dbd3f50c29823bb9bc4f5c67c67c988a84cd6d5bec5e741cdf