www.baby-bouquets.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a8:9a:70:54:f4:1e:fd:65:40:bb:93:76:ae:ff:e4:b9:35 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.baby-bouquets.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a8:9a:70:54:f4:1e:fd:65:40:bb:93:76:ae:ff:e4:b9:35Serial Number (int): 318709579809661103993741153764596104083765
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ca:93:6c:a1:f1:26:7b:e7:1f:85:d4:06:7e:3b:6b:69:80:8a:94:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): be:16:15:8a:65:a2:b4:82:8a:a9:71:fa:c6:4a:b9:72:0e:db:d3:e8
Fingerprint (sha256): 16:46:48:55:b5:f6:d3:c2:fa:50:25:61:54:b5:b1:50:3b:28:d2:7f:be:cf:3d:db:6d:d4:01:49:24:c7:d7:31
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.baby-bouquets.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.baby-bouquets.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.baby-bouquets.com
Other certificates including the domain name baby-bouquets.com
(limited to 100 certificates)
cheapveganmakeup.com
www.baby-bouquets.com
784.me
www.judithann.com
baby-bouquets.com
andrewtayman.com
www.enescuphotography.com
www.inkteck.co
www.lorenaduarte.com
www.goprokeywest.com
www.houstonideas.com
stemcelltherapyidaho.com
baby-bouquets.com
tvgeneralista.com
baby-bouquets.com
baby-bouquets.com
www.blackdiamondbracelets.com
www.baby-bouquets.com
784.me
www.judithann.com
baby-bouquets.com
andrewtayman.com
www.enescuphotography.com
www.inkteck.co
www.lorenaduarte.com
www.goprokeywest.com
www.houstonideas.com
stemcelltherapyidaho.com
baby-bouquets.com
tvgeneralista.com
baby-bouquets.com
baby-bouquets.com
www.blackdiamondbracelets.com
Certificate
The complete raw certificate details for www.baby-bouquets.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA6iacFT0Hv1lQLuTdq7/5Lk1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDQwODI2NDdaFw0y MDA0MDMwODI2NDdaMCAxHjAcBgNVBAMTFXd3dy5iYWJ5LWJvdXF1ZXRzLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOr76YNvch09zfs04JBHtc1G WNS4zrdwxwXz0ZnjxZSZIPVX3VpDkVec5vPuFZxoECuX88Ow47JHfrBCdoXcQ7OU c/IBRxa27CbwssbnxvnH4AN27QoBjyIvCzx1vrCOWRMlASQ1LlBx9Z4Ryc4nDyYC 82sYMTJ1FE2fM7VHkaBIOVe6cuRfUNKj429uJkMYWAqrXt76Zs5vsZTKY1P1Pbue 9J5+zfnpCFHYOsFrVMs4o0p1NyCSLBcmytvtSWxfMAu2J6khUHvV//iiLW+qFy4M POs3eHtm/IasN72+Q+5bm2AQoo0vFazeRYX9bPBCe9oFd0bmrCb1i304lEdpDFdN HcBm86CQ93scQfABVBwUp/M1JmcYpNZJ+/7dOIpEZvTmBoMojs72pGMDO/JPcR4Y iQM1bv1o9H7sjdk5KZmPzEuUVj5FXzvB8yEaMy2Wc3Tda3Vt4NBjYby9O6mOPFtI 7h/fARWIWUYxOAyNy65kEEvjs2zPky8QW6Z/p7cMVyw6LBC8TvjqMAvr/+tVEkQN l9Epa1lw8b/UbP1i4iGQvTPYxih4t1tyUUFK9DgJpK8gykWDf5kMJxAqgwbv/CZp h1sSsb0iTOaXc89MNKBf58Gwmp1gLINT+BvYAbFWhbPaF38tY5kYxoRGj1CrSIuW YPs+SydV2DAlh8JKrRUvAgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFMqTbKHxJnvnH4XUBn47a2mAipT3MB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmJhYnkt Ym91cXVldHMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKaw qKqOsnMAAAFvb+Dn4QAABAMARzBFAiAyS8sIm9q/xuTeKFMDSFzX3AVoneeG19RE vdrKgl3LdwIhAM8s8jAVYISSA1Lv4spyA5TwOvF13JjFqEJx6GBaKPX2AHYAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvb+Dn0wAABAMARzBFAiBQ 6O4RADSn8xvy7YL535is4Q8aWRf5AcrkJayHLnzXRAIhAMVVsSdEhW7bxhbh4c1V Y2Zy1xq4POyob6hJzw29J/yfMA0GCSqGSIb3DQEBCwUAA4IBAQB6u8eqzmD6Aupd usOKIuX2Y/iHOfGvRa8r7s3Bc/Sv9gpfZhStKZKTmT4OJdzJIIcb33HqG2hi5c5N 9IqKpYwtrYVIPgCQ/L84b4agpYq0Lb3UO4//0/X5S1Gp8Lub6VT7gq6ENo3epafj YD1jmT93rQ7H4Uzsur1TcD5ccO0iWmAmq6l4EAprt2FoVrqjReo+kp9GEYaas0Nz In1stSGxGrjNvT3G8eXDjTPfMa0aXrGWsE5mE9OAXlBEyXIDzdpAwq/5sLl4OsVL k6FINR25bxohisd6BgPNNP/EAn/Abt597G3KfJzLyduf0kXGEeCj5znHxR5JClgj /gM3P2gP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6vvpg29yHT3N+zTgkEe1 zUZY1LjOt3DHBfPRmePFlJkg9VfdWkORV5zm8+4VnGgQK5fzw7Djskd+sEJ2hdxD s5Rz8gFHFrbsJvCyxufG+cfgA3btCgGPIi8LPHW+sI5ZEyUBJDUuUHH1nhHJzicP JgLzaxgxMnUUTZ8ztUeRoEg5V7py5F9Q0qPjb24mQxhYCqte3vpmzm+xlMpjU/U9 u570nn7N+ekIUdg6wWtUyzijSnU3IJIsFybK2+1JbF8wC7YnqSFQe9X/+KItb6oX Lgw86zd4e2b8hqw3vb5D7lubYBCijS8VrN5Fhf1s8EJ72gV3RuasJvWLfTiUR2kM V00dwGbzoJD3exxB8AFUHBSn8zUmZxik1kn7/t04ikRm9OYGgyiOzvakYwM78k9x HhiJAzVu/Wj0fuyN2TkpmY/MS5RWPkVfO8HzIRozLZZzdN1rdW3g0GNhvL07qY48 W0juH98BFYhZRjE4DI3LrmQQS+OzbM+TLxBbpn+ntwxXLDosELxO+OowC+v/61US RA2X0SlrWXDxv9Rs/WLiIZC9M9jGKHi3W3JRQUr0OAmkryDKRYN/mQwnECqDBu/8 JmmHWxKxvSJM5pdzz0w0oF/nwbCanWAsg1P4G9gBsVaFs9oXfy1jmRjGhEaPUKtI i5Zg+z5LJ1XYMCWHwkqtFS8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318709579809661103993741153764596104083765 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 08:26:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 08:26:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baby-bouquets.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958651211746886396341112971939401551952992656027536961577007709249956710381614488814448827087157634354913570575898521728148812613111117344473407906095936842843649803423507572198659855031839483670328181807422705515153881009400080920359415805548426004835067103131924165350298305585791905306019858323559362574645325271265145706305239957492456809417848711406914562564617403235931533387351755900208093314046315600062515428406225826651550874436778465585717743890140285750194484990409302093688874802418857988235279556000779577562783207222515071407170529479430395542510211058093305236012087199482727770619553850116780284749720599490861181356186696795082108596541354395177400284966726057691847524695175444305945700575179090933188597927510672717038672621826418477359541063293657266096355635402457142834070323831579512289550396654446336799243856196568274629267291178680088189627944980662657815100571132729065146666917819244118244245720380272690352126538230665748534678375022568273310813272467203745282143497206977243032595896308939502797619994955054947917621715864749294836922815401212944491726351468337035202858168616255987256758353080369103404747478035684900989414004798582426010001684186582029843270217332367811466128790141890187516875445551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca936ca1f1267be71f85d4067e3b6b69808a94f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baby-bouquets.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f6fe0e7e100000403004730450220324bcb089bdabfc6e4de285303485cd7dc05689de786d7d444bddaca825dcb77022100cf2cf230156084920352efe2ca720394f03af175dc98c5a84271e8605a28f5f6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6fe0e7d30000040300473045022050e8ee110034a7f31bf2ed82f9df98ace10f1a5917f901cae425ac872e7cd744022100c555b12744856edbc616e1e1cd55636672d71ab83ceca86fa849cf0dbd27fc9f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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