www.bedfi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:a2:32:3b:35:c7:e8:a9:98:4b:38:88:90:dc:16:bf:11 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bedfi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:a2:32:3b:35:c7:e8:a9:98:4b:38:88:90:dc:16:bf:11
Serial Number (int): 296601537339220612806729550446123590008593
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:56:ff:82:82:74:f0:84:df:5d:c4:20:8c:b2:46:76:a1:b8:d8:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:f5:2b:3e:f6:91:b8:03:4a:99:f4:72:fe:b4:7d:c9:26:f6:ce:b1
Fingerprint (sha256): 49:2d:b4:d1:c6:d6:ff:13:73:f4:05:4e:57:91:c7:dd:02:35:bc:4a:c6:0f:6d:ed:f6:a0:b0:3d:5e:c6:a3:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bedfi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bedfi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bedfi.com

Other certificates including the domain name bedfi.com

(limited to 100 certificates)
greatbritaintours.com
bedfi.com
www.bedfi.com
www.bedfi.com
bedfi.com
www.bedfi.com
bedfi.com

Certificate

The complete raw certificate details for www.bedfi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296601537339220612806729550446123590008593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 03:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 03:47:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bedfi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893582071250610996836902643092882005424159113996908706747202507342137645549271128704775007550359558345585493399325635590765657645128641554025798608170825495935525462529324264848521115140015016293448087750768516751354053134442434199896522824873512490569329026495757510121702523738940131976927490174805274174481705003701832599516468480505350718681024950964821382841811181033565207102083612872599307708020104483843922069561611977556268447467274816383627832104294905076312700806476168765648379166936932732598479528448492978522895767649348297090093436085753312677101983783016678311785279760824451266472841276352300090589032926444791849853461137749261738945300867773783288016968011601733330870427217862358130307222760347473114917859314397662245716268133245790544095929293929113252794861002709481483880766812795700075905473607259165119568983495974044941608852059862452166997439364883679634071260769168299510467705223541658848231498812610794110016237787658976847621115151145987283613462342212721231299167701063795500284861504211882421672342079664657664322483722883664938263539947369245375975927635207039344175491408367746443193028889489215103507856689413258298852370286615942197254100241815879159710318189838825070989907118116174397507401681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5356ff828274f084df5dc4208cb24676a1b8d853
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedfi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5f6e3667000004030047304502207accdcc976dd733d901946505c00e39de17d30237bca738a8b75f9126873dec6022100fb96c1acc4960feab9c3c99a9ae9d752d49dfbc13f69e4b7756dffcc9f1722560077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f5f6e37e50000040300483046022100ecc4de176bd95bb9c74f2156aa5a3193d48d7e8ff4abf855373e21ff852e3d3d022100c997c824666902e03f2d99b426dddc72ca4ddfc31cf2f833c6bf669a5fee47e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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