www.baqco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8a:ab:f0:a8:1a:53:ff:5c:c5:46:01:1d:3a:71:d4:f1:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.baqco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8a:ab:f0:a8:1a:53:ff:5c:c5:46:01:1d:3a:71:d4:f1:75
Serial Number (int): 395636657910186505126186138885578307203445
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:c0:f3:f7:35:3d:88:23:ec:98:74:d7:78:32:a3:e3:84:1f:88:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:d7:15:4e:73:2d:4f:e0:8e:11:36:63:95:f6:7c:a4:b5:e8:21:3e
Fingerprint (sha256): 49:fb:54:a9:df:24:4f:05:c6:a7:57:17:0c:a3:d2:23:38:fd:f9:3d:c1:6d:98:1f:37:22:ca:aa:13:bc:58:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.baqco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baqco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.baqco.com

Other certificates including the domain name baqco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.baqco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395636657910186505126186138885578307203445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:30:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:30:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baqco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776000637972549979928845159599861043911762446632932468361475688224403947372683732938188649529464354289958427899737694557388558772492581016321511717834533877475077559347992310460356523876315841587215478247944241880571721075902744958708437964951260356912460841599481025239674569612305023802535952313306206193423413489664988857967339539161724654455056191441244926921130817573633163435440621425418804832867393351013877147870611969681951896709946260604233679190171303212804273172861047169132981085638420506890801840676881495315356462755944567235477580698001397295182321549929146495195715508657254573235046053094843755508664441732973809002344274430595339847576861347515595195461110524004679922438235937170995116493644184250665268466683336589207834917258883180274663154471354197372628272450271299754760916828320024298477311162700879491581779324084867800773301632861901862211163822866259938647172794366004985472858839889010145283735376841580161378578744080274604997353774700950723802567594861081539355501549962364744752530040561898841383559232013468963076128561000660951683287772036276264243271804798083226585533438808870645453854062480338137432158491021100712415025649426095667793259623297213689176119791302124899431908372739577657662546711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37c0f3f7353d8823ec9874d77832a3e3841f88ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baqco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe72b338000004030046304402206ddca9a399cb860b145157dc056c12b28c1fcd1e9c95e7966f1faee275a17740022062b54c44a8716d9dc6e07f51a95b6ed2691c53db56b09c02b4fb2039aca774a00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbe72b36b00000403004730450221008b6ca44ca7563d882bd11c7860fcee720059dd54642af663aa3656c9e0bbe13b022063b833e0d964c7fe06ffd5123caa38c04896797ac71d3bc93cabff5c8d313258
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d56620911a7e310b1d74df1f5388cf203bf377b6c7778d8e196109668d2a7d058a11fbdcab7449cbe7bf7de59129187cf314e372c35144bd5eb81b987be8de6305e4ee9841f05239534882b510d8fa488422284f8b5a353933c3baeaa97c0eec0c64c33c971bfb8147dfa660442bbada970b8c722e898881346cd9f1645e7c00791816a5676b580488b4a539aef8ea719125b2600779acfd67d72e41ad2ec7d0242380a38204f88998da3ca6b66a650fcb78d28cf94c12190ac5ccf986dd15335accfdfc6d30bc65d13426d130054a56ee87bf513382a0f5c2e6010a8f4f2d909381302ae8c59ffac9ff8a86a04c60065511bc6abd4dcc16d004a14ba82d62b