breastfriends.id

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:0a:5a:d7:e1:1e:a3:3a:16:f8:2f:c5:e9:2c:cc:0b:9e was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=breastfriends.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:0a:5a:d7:e1:1e:a3:3a:16:f8:2f:c5:e9:2c:cc:0b:9e
Serial Number (int): 432172369954820849122044180003753311341470
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:46:66:03:7d:26:da:17:1b:3a:9a:57:05:c4:94:1a:0b:7b:fa:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:db:e8:91:9e:a6:aa:cb:02:44:f5:58:06:02:4f:d3:0f:0f:6f:48
Fingerprint (sha256): 12:cb:d5:f6:bb:78:75:a6:3d:a9:15:df:d4:5a:48:16:3b:6f:f3:dc:e9:b6:c8:de:b3:fb:23:a0:11:c8:f9:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate breastfriends.id

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for breastfriends.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.breastfriends.id
*.com.guramebogor.com
*.guramebogor.com
*.mini-cooper.id
*.mitsubishidipobalaraja.com
breastfriends.id
mini-cooper.id
mitsubishidipobalaraja.com
www.breastfriends.guramebogor.com
www.mini-cooper.guramebogor.com
www.mitsubishidipobalaraja.com.guramebogor.com

Other certificates including the domain name breastfriends.id

(limited to 100 certificates)
www.mitsubishidipobalaraja.com.guramebogor.com
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
www.mini-cooper.guramebogor.com
breastfriends.id
www.mini-cooper.guramebogor.com
breastfriends.id
*.guramebogor.com
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
*.guramebogor.com
www.mini-cooper.guramebogor.com
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
breastfriends.id
www.mitsubishidipobalaraja.com.guramebogor.com
breastfriends.id
breastfriends.id

Certificate

The complete raw certificate details for breastfriends.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiEPlsrphWRjcsNlxXsh
hqvGD7EHFINKVXx4VYtkrKsBXn5DocufFeeenKmienFQoa4/AsTMsErTnkc4vSWK
u/IDBkBNUxn8gO90Kf5rl0kR4Fno3b6KDPu0Z/Mg2W28r6GUn57kfaRIhxKk6f4e
Mja4thkunSde/fUVoOD2UBe8cCRxhoozgJrSOgiJOlEq//leDq1XT/zD2NOWVWoz
ApjZfoWXHS63ff0xif0IjVXRb3btjFqkfk4rwj4dfQJlXOKuFleIuIP4Rn+Fdgvt
BqQ375vDBrwV5Z6rvo2vW3/oSGh+sqyy5gTV1EqAhjN62yKoO18hoD0b47fb4/YO
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432172369954820849122044180003753311341470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 07:27:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 07:27:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'breastfriends.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22486721218735395431430404120567129171930158331941726746060199162126597650797613636737015928500443686699537742705232156834017253506010187826228681427956044199137196294009943708738306578262983266420839104779796485703373282149885842545813022206161432636778806075656344189338705922322288899626825415796968534746293656570130062988583171782271441289333841174833312339431680738232660698497733804272329027865575430265493402615796039415424311950453124947934458762762812107463391657125014663896356360726460052372072432027684818988260247238180529502831262903328248674527021795904658764902541672525731140469277653000656447213273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							304666037d26da171b3a9a5705c4941a0b7bfa33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breastfriends.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com.guramebogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guramebogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitsubishidipobalaraja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breastfriends.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitsubishidipobalaraja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breastfriends.guramebogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini-cooper.guramebogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitsubishidipobalaraja.com.guramebogor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc2a4ddfe0000040300473045022100ac3ccc307b922f1b14dab1b577bbefd75718552c4e149bcecf8b90ee4223b6b902206435c97d7a7cdaf9cc4f92459cc739e9f49b38edd479f9c1262c3f6487b362f300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc2a4de0600000403004730450221009ad361faf5bf715dc41587992ae5ac61d3cb34af1928c4078001361a154ee48c02207c18e7929d5fab68f04c2e631459cff2d981f61428ef209ba0795ee0f8a2a05e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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