blog.brikl.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:55:2d:9f:a4:7b:4a:d4:a1:dc:02:5f:93:b7:f1:5d:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.brikl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:55:2d:9f:a4:7b:4a:d4:a1:dc:02:5f:93:b7:f1:5d:f1
Serial Number (int): 407771496842219333899363986377641571737073
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:5d:71:27:e7:e0:9b:50:80:4f:d0:77:64:9d:1a:34:0a:a5:7a:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:bc:0a:36:3c:cf:fd:79:52:54:30:d1:82:22:8e:e7:26:79:b6:f1
Fingerprint (sha256): 1a:65:d0:c0:64:47:1d:f9:16:f6:5a:05:3e:5b:0b:8c:3a:97:3b:ef:69:a6:86:91:01:bc:d7:d5:74:32:e8:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blog.brikl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.brikl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.brikl.com

Other certificates including the domain name brikl.com

(limited to 100 certificates)
brikl.com
www.brikl.com
dashboard.brikl.com
brikl.com
brikl.com
blog.brikl.com
dev.dashboard.brikl.com
dev.studio.brikl.com
brikl.com
brikl.com
dev.hooks.brikl.com
www.brikl.com
cdn.brikl.com
staging.internal-dashboard.brikl.com
hooks.brikl.com
auth.brikl.com
www.brikl.com
staging.h.brikl.com
staging.dashboard.brikl.com
brikl.com
dev.auth.brikl.com
brikl.com
dev.cdn.gql.brikl.com
nx.brikl.com
vermarc.dashboard.brikl.com
brikl.com
internal-dashboard.brikl.com
staging.api.brikl.com
brikl.com
brikl.com
dev.h.brikl.com
brikl.com
embed.brikl.com
custom.brikl.com
custom.brikl.com
brikl.com
brikl.com
billing.brikl.com
brikl.com
dev.api.brikl.com
dashboard.brikl.com
brikl.com
creative.brikl.com
studio.brikl.com
cdn.brikl.com
dev.studio.brikl.com
brikl.com
api.brikl.com
staging.hooks.brikl.com
dev.embed.brikl.com
dashboard.brikl.com
custom.brikl.com
custom.brikl.com

Certificate

The complete raw certificate details for blog.brikl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5xJCsFC37TgJKpgqXUT
7aDUWhP07YYALd4kAbm2gll+a+3Xk4IHPJ1C3cnQf6QRmHAa66PKST3C75tHwvSA
M0+5Rr8jjbsk794bzMnOyP/dm2x8J1ADs1Q//12TOGBnqmO2Y2cwQvIvjByRL4ol
WEJqkkbZdvrGrDbhFYzUzPzJPmD35SPTSvZ1Wy7yPTgebfi96kzEU4oNitwT8Ag1
lOQCNg9P+nmyATkOXVdB0X8XZxTxRJnvg2pihPlisGIW67iyW+RZe+QSF7szjqi6
YMyUs9y1NTUYz2rMn00xZULDP7XHnn/LzrtErnsDWI6hEaM4INgSicsSRYSHwtbJ
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407771496842219333899363986377641571737073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 12:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 12:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.brikl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20653910873268199958150917834861293880804387702204558909245425831299367737047695829500959722384753819022948078203884442195272095128883371583017007584297964099433483221570524187937539211680077017789623484660934101875270647224744053750545319287011015766974755578555788144053204408720579899578959592926111730304057583151241505126780243922363818386491410837984439301785684962406272413862703539901649137182986905125992195874548708771634710708609497877674690487622642964112999189973301481894889507465282884983999121270324339844056455324526260749019809886161298247722757995310333738034643150481551875119935572019730437294419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							995d7127e7e09b50804fd077649d1a340aa57af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.brikl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018775a4d2920000040300473045022100b143c95a61a15c61aad16081d42d85df5661bf0bb570bec33e80a4bd08b6f8f5022064257e2eb603a8a957f6610b1d4e48e802d94bd35c320538e81037d8d16eff18007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018775a4d2dd000004030047304502200d7fb0da46a11f7ee9d61efd69c5a398b2b044fe1fafa14c9420cd3742d91d5e022100ce9a3807cea1f5439455620c8b17de9382bcbdbbe74cee10ee876a93431f0217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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