www.bregal.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:9a:1f:f9:7a:d4:8b:bb:c9:e5:df:f8:da:2e:a0:5c:33 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bregal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:9a:1f:f9:7a:d4:8b:bb:c9:e5:df:f8:da:2e:a0:5c:33
Serial Number (int): 303056173692240330992071199771255692614707
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:97:ab:33:b7:e1:61:de:29:7c:ab:eb:51:a7:cd:5c:0c:2b:bc:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:ba:20:0e:0e:7e:66:fa:b9:c7:ca:c4:33:f7:2b:87:b7:8a:b9:4b
Fingerprint (sha256): 18:2e:13:be:9e:27:8a:6e:6f:e6:34:c9:4b:ed:93:bb:75:6b:49:b1:89:37:41:2d:be:1e:5e:de:8e:83:f3:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bregal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bregal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bregal.com
www.bregal.com

Other certificates including the domain name bregal.com

(limited to 100 certificates)
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com

Certificate

The complete raw certificate details for www.bregal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLxsn45HFKjPQ131P8fJ
a3sRRnEHjqhjd19nUfDA07CBsJVIl+3TmVfLqxZ+s+pH19H8qVXlXnwRou0jJaeM
tTSb8R6B+vcAuO8C7yBtr9PCu0KWRvzBhR91nnCVUXkcAfGRpUZT3CIC4xn/uTDS
/RYY2LS1D4E2oCz6VBPvd8uSResfkDq3DoZGORTdznIVHDHhWJgY1jrX9AD9iKsx
84//ZtIhj82yZzzdFK/hnCOZUOU055jSubU/RMv1iCO7zWGnXfPGQDxwRGTYsyFa
r/U6hHqI8ZWo6VPTayCJEE2YqBxR8Yt79Vuj8d/ydC1Suf3+C7RklclPvFGG7fEm
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303056173692240330992071199771255692614707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 16:50:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 16:50:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bregal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17261324965469215370039808756644100155320087557014063919544783577993724686524230446709485521964016894687413227307226090079655631963367776944103125784810215012531934457968118622348941570671023388149072836373963336862163123921961682952856004926635089960948556188007906124844079915528880822991720119695269887301766633346331008058352963096457543520437143220852535078822056106688565152782882580323869800896556463477962321505204562085159977833331587833070099983104337278080817204359016658549669323725612296367536279202634366261017315530727988718784635460754222918696480937832855034414111657619680338848228651994498873763463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b97ab33b7e161de297cabeb51a7cd5c0c2bbca2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bregal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bregal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001852b81de540000040300483046022100ce715446581d3fe8bacb0931df16fd60b002f41a8ae57f99be6416724c61c4b0022100fb1629ad4feeaddb5490ef5ecdcdf4a5a36247a58caf5c5f79ce9cdc4f2f0650007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001852b81de430000040300483046022100bc9eb012706dcded4f62b592fb251b20e17b2eb9d0d9900a6d7584c1cfa60f56022100d8c5a2f32e953e014ddff55c3a314994a9e0936a00e9f27bc6d21ac1332c7af6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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