beinai.co

Issued by R3

About this certificate

This digital certificate with serial number 03:c1:f6:1c:38:a3:9f:57:aa:8a:a4:1d:97:bd:21:c6:b3:ad was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beinai.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:f6:1c:38:a3:9f:57:aa:8a:a4:1d:97:bd:21:c6:b3:ad
Serial Number (int): 327338491231075434060997242785161330209709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:88:4c:4d:28:dd:93:5b:e9:18:70:00:0b:b8:cf:86:e3:c9:dc:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:95:44:2b:23:b2:30:6e:5f:2c:23:06:a1:17:57:29:4a:fc:3b:9d
Fingerprint (sha256): 1b:bc:1a:fc:6f:d0:fc:3f:7a:3a:83:10:55:0b:21:8e:71:e6:18:df:84:1c:c6:4d:93:2e:8e:08:2a:fb:9d:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate beinai.co

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beinai.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriturista.co
aluminum.design
beinai.co
birdwatching.info
calipow.com
elettra.co
gaio.co
hedrush.info
hotspot.design
nectars.info
qsu.co
saverio.co
themoon.studio
www.agriturista.co
www.aluminum.design
www.beinai.co
www.birdwatching.info
www.calipow.com
www.elettra.co
www.gaio.co
www.hedrush.info
www.hotspot.design
www.nectars.info
www.qsu.co
www.saverio.co
www.themoon.studio
www.xn--efvx5o.co
www.xn--p3up99b.co
xn--efvx5o.co
xn--p3up99b.co

Other certificates including the domain name beinai.co

(limited to 100 certificates)
beinai.co

Certificate

The complete raw certificate details for beinai.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3OlCt+Kqw/2skW6WCwf
/8dcqVZlI86ESj3qe+loud3jOZC+UaPaY/On7Uf4JOvdlOgT1gDsO3cMw0ike4bl
xoJeok+dRM2syJBrWgqAxEXJcRoNx7J83yGsoGIQQB+7OFTF4UJZd/WMNHFrMAUD
XG/91yZ1c8rPouIPLf6QVXnxpQLR/RBYqZho7Aw0Z/z/oL2vxn7O4z1qnqpWVwUv
7rNGJfZrqGLn6xe41d+CeBUl9yyOtFA6i/+4L12fwTYHZVG2yZ6ICldhi4KWMbYQ
AlQGuGUnfvHfcfI/r4mom/qrTTFlATl8DAAeJpB2ZBeAQqZdjFSKGes4dxq7Uym/
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327338491231075434060997242785161330209709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 09:40:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 09:40:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beinai.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21138823454910093212059225072850954644477243738663469755122357642100929357315339660720950722932384831246643836216281216901543386838301804451772225868375754185030990581265415050435507614504805127238289940909871827932648295982058779907109134954346329959914470971620641767425682660849000208873625126738916934017688648976142547932086963600641764264269701206031333989299100285636320548909189933729976668989488438307831799056727735369242627620658457773166968745391653720668114030078306142746748771014605713653013220126452536119912345287942527828626567356746052534493010651984573185312581964145746273151231639970047003836279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd884c4d28dd935be91870000bb8cf86e3c9dc04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriturista.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluminum.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdwatching.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calipow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elettra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedrush.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotspot.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nectars.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saverio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themoon.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriturista.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluminum.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beinai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdwatching.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calipow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elettra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedrush.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotspot.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nectars.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qsu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saverio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themoon.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--efvx5o.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--p3up99b.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--efvx5o.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--p3up99b.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018959233cc40000040300483046022100b66213dec5789594623815c34489af40a7d3388794f7ab7ff51ca60552ea3dca022100c352036b1cececec0d6a07e1639cf0716a1aa2f1e8bd2c9caf38f75bcf0ee490007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018959233cc20000040300483046022100b4922cc409aa0a4e3f441ba2e8cb0bde92417908c58cc6f5a4f7c0a5dfda15170221008848f5894bc68386ef394bec0d9ca13d2ca994c231b5598fe06ad281aca3aeac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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