bacoli.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:09:1e:99:d3:6a:c9:dc:46:38:ac:67:e3:d4:8f:86:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bacoli.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:09:1e:99:d3:6a:c9:dc:46:38:ac:67:e3:d4:8f:86:50
Serial Number (int): 274960274412944959860653810266889232811600
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:f4:9d:07:68:7a:0e:f7:b3:40:18:ce:91:70:75:14:6a:8e:75:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:22:09:6a:e9:59:5d:a4:a6:da:bf:0f:ad:a4:b6:87:2d:11:91:76
Fingerprint (sha256): 4a:b5:ed:16:4d:15:35:d9:3d:25:77:91:22:08:97:f5:44:90:0c:f1:f8:9b:8d:59:fc:15:1c:6d:5c:b6:37:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bacoli.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bacoli.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bacoli.org

Other certificates including the domain name bacoli.org

(limited to 100 certificates)
www.bacoli.org
bacoli.org
www.bacoli.org
bacoli.org
www.bacoli.org
bacoli.org
bacoli.org
bacoli.org
www.bacoli.org
exivi.com
www.bacoli.org
bacoli.org
bacoli.org
bacoli.org
hsbc.melbourne
www.bacoli.org
internet.creditcard

Certificate

The complete raw certificate details for bacoli.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnfXicZGfb3WzOYwUyt+S
RCGGid7r4Vx53cZhqrPrZfSKZwfOSmtn0YGUiaP8OmsMVsmNigWJyc1CReE0+srY
Jk5qFaaVbtUviad3JZpH9h0M3MDP5R4Ipa7XplcdprSs3R+J+Wc1HRPRSshQV51k
9bpyF9ZOTnP2uiIJ7ydga/T75CKElybKCsqRpqs4ta8T7ex7aG9E1kPPczB9le24
yoET4t1959JrzddWNw1b+t6ve0IwHwaTgQBUwkQgf6ZD2Aain9JJmIoQ8d3vfYoz
dyjVIeSMjzTfwobL9N06nQ4XJ7OWnpkfDOvOrzr0O/vntJWzI7r7aaBXM+3W608N
6DqGA9WfNxt5R2ukzE8ms/+u29KocwX5qZUMGaRcoptVDfOqmE3q80Z+s04tIbh5
FBygZbWWLH8x0dkyvR4annMUb8S1aJR4D8+5AM0lElenLbxkwazdM2xItPG1//dF
Mc5MDuCCQRbiV31yJid6ScQ+RihCOtMrB2k30KmhSGIFKDWflZHF0cllcqoRF2cA
G2xIkck6L4CV8E82lGGjhkp4Mz6CjHJ68Ysnkl+Ft+4acOiPdCqn3sCLH0fFv7MK
gWcJ14HX6YU5xmVOR0whU/vHuFzfKdgS3kUZwtClkxrW5C92QqbEshpAlZuwWbJB
TwZJPFFTDS3PLSanLi8UIdcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274960274412944959860653810266889232811600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 10:47:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 10:47:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bacoli.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 644422561753974780064117099940386548805896381648643578750680968147606419311622095483060070865769200410980030725256806150991006704592495073131549297308327743968245138743269885569905440235705651140143620087604547587583234637424543273911149047482264463341324595868394377759038741524334772568502357225581895687647478535336742863757656939819969422507785039563157341227963387679248303617142074716563951201214661084772843979168677522616660240439811766080257317339813047943721229251148920853568810136148856703245375462647349223537719464532416043745616502980892939125799410455354896995144436810757147149803655637294213033169406223715438651893776659843459849605456745585131171047601441990816253382785751641033844878622050316378943399393692710401919311337179922019682702564824141851234190668733559037403311445458394274912602145130641916231572529460026277722468266629980632980017441633635166091091126267496115670267801715072521823488928857191191386607559480218708146990370231477506238569015203072894222533914406290205360195347550974952828038207767885924760553814653194684997384529731691374098303988448362108339137170729763858993350732483085284607516883918870610747079346622908274168253428126825402419466550472708011133567924562151384524596191703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4f49d07687a0ef7b34018ce917075146a8e75c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacoli.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2e1b5ae8000004030047304502210097dd239c4b3de4aa5b229323aa03d81cfe3696216a24c4ab04491374ede762d002204d7b47763474b1fa59d301d0576a5832761105330ee8675015128319d586d39f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2e1b5b0c00000403004630440220275c3b3f2525040b5931a5b7cb6e3690a1758bec71bf45edc3cfe369720d5c8902202052bc7ec958ff6537fc091a31c18b8544ff28bbed2b4bd03a888019da051ede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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