www.bergtoys.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:e6:ab:f1:4e:54:ef:12:c3:59:11:92:35:62:df:f4:30 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bergtoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5e:e6:ab:f1:4e:54:ef:12:c3:59:11:92:35:62:df:f4:30
Serial Number (int): 293630015501909092530588467188379544450096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:91:64:39:11:5b:ed:d0:d8:94:8d:1d:6f:c3:64:fe:3b:9d:b4:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:0c:4b:92:16:b9:89:d5:f7:d2:d0:c1:b6:ce:e5:d7:3f:46:c0:cc
Fingerprint (sha256): 13:bf:da:a3:7f:f2:8f:ab:71:b2:65:4d:77:a0:81:4b:22:cf:ff:4e:d4:ad:62:87:5d:b8:84:17:a7:1d:fc:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bergtoys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bergtoys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bergtoys.com

Other certificates including the domain name bergtoys.com

(limited to 100 certificates)
helpdesk.matisa.ch
www.bergtoys.com
bergtoys.com
bergtoys.com
e.bergtoys.com
itservicedesk.poundland.co.uk
bergtoys.com
www.bergtoys.com
www.bergtoys.com
support.sodra.com
bergtoys.com
e.bergtoys.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
bergtoys.com
configurator.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
e.bergtoys.com
itservicedesk.poundland.co.uk
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.bergtoys.com
helpdesk.matisa.ch
magento.bergtoys.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
e.bergtoys.com
bergtoys.com
helpdesk.matisa.ch
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
configurator.bergtoys.com
helpdesk.acrotec.ch
configurator.bergtoys.com
bergtoys.com
bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
support.sodra.com
e.bergtoys.com
e.bergtoys.com
servicedesk.ecm.software
bergtoys.com
support.sodra.com
itservicedesk.poundland.co.uk
www.bergtoys.com
e.bergtoys.com
e.bergtoys.com
e.bergtoys.com
www.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
e.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
www.bergtoys.com
configurator.bergtoys.com
support.sodra.com
e.bergtoys.com
magento.bergtoys.com
e.bergtoys.com
bergtoys.com
www.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
*.bergtoys.com
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for www.bergtoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgISA17mq/FOVO8Sw1kRkjVi3/QwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDYwODA0MDVaFw0yNDA3MDUwODA0MDRaMBsxGTAXBgNVBAMT
EHd3dy5iZXJndG95cy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDM83X3LRdyXTl9ITFmC5KkXZe4xsm1bCBxNkalJlqWdLi6tnUQisbXsU0CKxXA
AqP9c5S8s++G70W34fziUDhXY9/Y9WpIYQ0p02/fVG4TXXcxb+Ni8dvL4eiAkVp8
s5Dk8an6ErQjeAlDJ3Ac8KDN8tsEMJiyEbgZAuqUEweFm/Yhpwg5eDGlseKVon25
MuNlBKUYLGWIrhBwS3IMzpKSTxdkUjOcrgXOJ9yJj6/T2mO1UzW6srXH1nNna4OX
lD/kCDIJN3GzzYMwP6+3wTawoar+eKRWRUj9Z0n8S36YZVnp2vKN3TZYlM2X+HaG
x3wH9tCCGIXjjiiV19FkbOHk1r02NyUu0Ue+C6dchn5W8f4TKyrtqRHOX6WcsuiH
/MJpeS7S33YX+68PSgw4OFCSIW7VS3GQmiTtM02HQITTtaPk6HX+L6zNp+obyImW
qbkbj24DFW46OIV3j0lUpc9aGh/OeuSbFhi0Cs7cOiZKYfIKuLKImXA1OLsGus7P
sYxnSqpQVuXoQAP4X11xYnuZAoDJ+tymNe63R4JZDAaHQf/32PcLo6jjgP1K54KS
Qs9/bPn84Hb2I2PXcL6DJT923YLRsZJpmcfZraQgERqIb7LZx6mV/j+jnBzsq5/p
Q78AnuI65dLit5ZBHJxlevk7Liq0MiP0z4CT0H/QLA2tNQIDAQABo4ICJTCCAiEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSMkWQ5EVvt0NiUjR1vw2T+O520sjAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzAbBgNVHREEFDASghB3d3cuYmVyZ3RveXMuY29t
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOsqaV+QAABAMARzBF
AiBT8tH1Nb8u039eP1NASPMnU3RaB1YXJhFJJYGvWKTNzwIhAL+0h6DFrVjdT+R1
R3YSZba4Q0eBM7O4976LO8Z8FjnnAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7D
UUhZRnEftZsAAAGOsqaV9AAABAMARzBFAiEA9t6l5TPs4Cq5khKRdJpkvrpCOfwg
EKrl6lHyNlpGnBYCIECQyvkIFISp6k78pkFAIo54r1fuVkdz30VVWiDErPshMBEG
CCsGAQUFBwEYBAUwAwIBBTANBgkqhkiG9w0BAQsFAAOCAQEAF7P3R40BsLK+gUwt
MdigCQzpkdJA0pYKRxXWJu2S/qCZskcvfzqW4x+Tg519PWpzKsDqq87tqr60YES7
0sOm9gZrjonyI+cwll0mADStE4xGsUyc5ehCW8TrerHNcwP73MA1kl42zHanBX21
UlfXM7DaKVsaR+VfrcTyWKjAaoIlA602Kh3gqX0i1/eYj7u9Qs3thUirAZdKFk0/
RB8XM/UmiYA7oM/hxIdzHo1YlEk+HwhgzZJnn/iA1boKpvF1hmLYaQD1+Bx8cyaW
WhKURfkpxS9NJHIkJj2vhB6n3lDnnd1T+5KVriCRPVJVHPtfdydHwgyA3HS6PFll
9EDBTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293630015501909092530588467188379544450096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 08:04:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 08:04:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bergtoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836127207923673750192056359839270331126944063632935272801950565053238327610250636716919249324247904506052836058809466494073212225669796397089000728245884339808356327726220030729712778562064843207730418832458343662600130576645893448023124088800042515575739272329882510268463143058520559511681286213505370821373830567795968350276746974479404242050726793029681091129136023132948614020714481738947034591110251172376802378056368170858635442809399839156421701233199407916814477506836837592502918882808611411264671433848287948223695436905377309608952465815135242332249650275521689537735774179214360391779323488405138072887026744461262806920192501506307267170233938372610083599758749660170826739087520808563179780757613515909099034063207749507451129686113286932090489147173420998657106950535366484558848733722591377923244038789860719932459503852988570485896963442367622033052663904609835287426191642500971381299173955967105546962365473687788270187117367361741059846654048666157068854636072900953854164929925936288520784893730750525111354146718904811325844441964136384595818138155714359220930862290289265684152002212463767178550055800773478679314771536272902523331612389501144099102620456717146281570514487067998108761439046728041479824846133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c916439115bedd0d8948d1d6fc364fe3b9db4b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergtoys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eb2a695f90000040300473045022053f2d1f535bf2ed37f5e3f534048f32753745a0756172611492581af58a4cdcf022100bfb487a0c5ad58dd4fe47547761265b6b843478133b3b8f7be8b3bc67c1639e7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eb2a695f40000040300473045022100f6dea5e533ece02ab9921291749a64beba4239fc2010aae5ea51f2365a469c1602204090caf9081484a9ea4efca64140228e78af57ee564773df45555a20c4acfb21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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