budtendo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:34:67:b6:92:89:7d:da:16:80:eb:f8:08:d3:28:df:37 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=budtendo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:34:67:b6:92:89:7d:da:16:80:eb:f8:08:d3:28:df:37
Serial Number (int): 292372211550451796011326122368842099908407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:00:71:bf:fc:fd:ba:40:e5:bb:ee:ce:02:91:1e:0a:1e:ae:45:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:33:97:e2:c4:1c:c2:e0:75:1f:9b:8d:e6:ab:5b:8c:2e:05:28:c6
Fingerprint (sha256): 31:1a:01:ba:11:b2:60:ff:87:76:e1:3d:65:12:b8:0f:18:a5:e9:b6:90:8a:8b:80:c1:17:71:60:09:a7:0d:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate budtendo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for budtendo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

budtendo.com
www.budtendo.com

Other certificates including the domain name budtendo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for budtendo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292372211550451796011326122368842099908407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 15:04:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 15:04:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'budtendo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720542059879930207935393034138352813076230239646189263358722339246336161556077263612245858972794650744716465301708630961210033000548109210199564994243101106903557713478037987670134059712075476773534431614001313639181039352470638568052236026308016614686348457030635859908699270259157194765457055946586846301094486937683715270049302613371791885446546045505494935440050601418653132819723966208327739342824684376296299559447064729144042147998432623360784053892707441672061774382919086714570608493809408451472038262986573418051582108610132061066653494474994359697845252026150665015874757083520127815855929466811138469571807240470411997646488670085292856508445891329069484447303327402013747267409924056875732689342490562013424790734263316956171458354303616372437214885614132402546424740623362793304423128301113631288200411137005627893644042449111092560659661316873002693274419725849263084163241862215375373671271077890720841558835166498693073735684733473655964140179488715778605932596895906851976101247083410812350480345586687064930540576403714936348303673064160561479444434564307490324647036687507345353745284818941079980280964077041376989502337197819879988094946117535466458539944496659086453510467046745200919523307245243950386735107867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa0071bffcfdba40e5bbeece02911e0a1eae453e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtendo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e901b07b50000040300473045022100fd1c72aff980d1c975d49f3e0c561d1af46d3acd7d5344930d340d4b76774a8c02202bbc2f22662d32875c4ea304a9c3d808de56f5a8e164f4bdb9b24ae5f9b3b666007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e901b07de000004030046304402204549a1b0047616c9728ef794df57210961fad75758730be9fef6cd3e702d4e57022076ac6c9969f46228d529c2ab3fb317e5190e1baeb53723eae47aab7c4fc24ccc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060354a6b2d42bc532b4c4538252234b8a150f78936d93300b4ed21af0e45b69e441bac51ed554941d5ad43a7e8f8557cd0d2a511a3c51eecfbbd46c81f7155f45b4a9d4029b228e2ff871bd1ba739e8a0c86057ac51c758a1628d3ccf7234a10b89157f078f85ea22815ddd4d4219cd2bd019e0c5835135c223ae36555238c442dae8901a878128b15f8542f84531134d12cf11b59ac59053766e48277c827e74e76275bc5671411ea3499f65e8f77f333d913fc5c45d1f313a28e9c886d99de48f4ed3626afb09ae77d605837fe34897fb5ebd66d35f57f0f07338873440c5f7e4216764d6c9097a3d935233958b299820e6a992a1bee645567e20434d113f3