bd-watcher-01.testnet.solana.bdnodes.net

Issued by R3

About this certificate

This digital certificate with serial number 03:79:84:1d:04:3b:c1:6e:d0:60:41:29:9b:98:fa:0a:00:b4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bd-watcher-01.testnet.solana.bdnodes.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:79:84:1d:04:3b:c1:6e:d0:60:41:29:9b:98:fa:0a:00:b4
Serial Number (int): 302686632950630764999876322067603855638708
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:18:26:e0:f5:ce:b5:93:04:fd:14:b0:27:ce:fc:5c:0c:ad:13:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:a4:d0:4d:8a:bc:83:84:7b:f8:40:9f:7c:b3:94:c5:cf:21:cb:bf
Fingerprint (sha256): 50:5a:5a:ef:da:76:61:b1:21:a4:9f:af:44:39:96:26:06:1e:56:d6:61:04:a4:a5:3e:6d:30:10:a6:3b:06:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bd-watcher-01.testnet.solana.bdnodes.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bd-watcher-01.testnet.solana.bdnodes.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bd-watcher-01.testnet.solana.bdnodes.net
cd36c2gk3a6evh1sp5v0.bdnodes.net

Other certificates including the domain name bdnodes.net

(limited to 100 certificates)
cgmqhke06985rdv3mg1g.bdnodes.net
co76ucp37b42qdet1hpg.stg.bdnodes.net
cgq6fne06985rdv3mgcg.bdnodes.net
btccore-test1.bdnodes.net
co7c5lt1a79t9jn668g0.stg.bdnodes.net
bi059qttetosabk8ggbg.stg.bdnodes.net
bi7t3pttetosja3fceig.stg.bdnodes.net
ethshared.bdnodes.net
co2k8q7ubfe5a9kmlahg.bdnodes.net
chvgcjs5kla0rfub9dmg.bdnodes.net
ckdvdnvq6iai7sgnsi80.bdnodes.net
stellar-main.bdnodes.net
co770u937b42qdet1hqg.stg.bdnodes.net
co5tuaainpeijjrbemcg.stg.bdnodes.net
bi9ajgvnplt01b64ik3g.bdnodes.net
bdi.sh
cnfh4bvdid18pok22qd0.bdnodes.net
bksm9qq3lk8are29rp60.bdnodes.net
ci05kokhuk0klqr272n0.bdnodes.net
litecoin-main-va-2.bdnodes.net
biajl8i3lk821gjounjg.bdnodes.net
co776s937b42qdet1hrg.stg.bdnodes.net
cj53voav6e0crg30945g.bdnodes.net
blepsiacm1jkg1tknq1g.bdnodes.net
cmsgo81htbo49p4bvlvg.bdnodes.net
co76tvh37b42qdet1hp0.stg.bdnodes.net
clmphcld5fdopknl76p0.stg.bdnodes.net
cljhp3fedfl7l0i6qhe0.bdnodes.net
bphaji23lk800djks7dg.bdnodes.net
ci0g110f19195p3em1kg.bdnodes.net
bmjipdh17e503ajr224g.dev.bdnodes.net
litecoin-main-va-2.bdnodes.net
cln3ustd5fdopknl76ug.stg.bdnodes.net
bpc00ettetos7985l130.stg.bdnodes.net
co77hari9g377mro4rkg.bdnodes.net
co771h137b42qdet1hr0.stg.bdnodes.net
blockdaemon-flow-consensus-0.bdnodes.net
cfgdbu1a3l7jctkcufbg.bdnodes.net
btccore-test1.dev.bdnodes.net
co6hjihb8mcmplfgcf1g.stg.bdnodes.net
bdi.sh
blockdaemon-mc-0.bdnodes.net
co77hari9g377mro4rkg.bdnodes.net
cg5lmlcjv2cek5e7enlg.bdnodes.net
bd-watcher-01.testnet.solana.bdnodes.net
ce2ooteirqbn8gmls7m0.bdnodes.net
btccore-test1.bdnodes.net
clal337ijt8iadj4cvm0.bdnodes.net
co5tuk908kihm0i6r3kg.stg.bdnodes.net
co5tujainpeijjrbempg.stg.bdnodes.net
blockdaemon-flow-verification-0.bdnodes.net
ci0g17shuk0klqr272rg.bdnodes.net
stellar-main.bdnodes.net
co6ii4hb8mcmplfgcf40.stg.bdnodes.net
co6hji1b8mcmplfgcf10.stg.bdnodes.net
co6lho9b8mcmplfgcf7g.stg.bdnodes.net
co6ihvhb8mcmplfgcf3g.stg.bdnodes.net
cmucethhtbo49p4bvmc0.bdnodes.net
co5tuaainpeijjrbemc0.stg.bdnodes.net
ckdrrkck32cvdu7eqku0.bdnodes.net
cj5ptu2v6e0crg30949g.bdnodes.net
toml-server.man.bdi.sh
litecoin-main-va-2.bdnodes.net
blockdaemon-flow-consensus-0.bdnodes.net
bofjjmiqgodc1119bnig.stg.bdnodes.net
co7c5651a79t9jn66820.stg.bdnodes.net
metaco-watcher-02.testnet.solana.bdnodes.net
solana-pit-7.bdnodes.net
metaco-watcher-01.testnet.solana.bdnodes.net
cgn9v8u06985rdv3mg2g.bdnodes.net
cfgesn1a3l7kq97huso0.bdnodes.net
bojju92qgodf63hngqp0.stg.bdnodes.net
aion-main.bdnodes.net
co6hb0vubfe5a9kmlal0.bdnodes.net
co6hlv9b8mcmplfgcf2g.stg.bdnodes.net
cbc1pmi33utthf9guhjg.bdnodes.net
litecoin-main-va-2.bdnodes.net
caji7p9v7adedr07f260.bdnodes.net
eth-geth-archive-mainnet-4.bdnodes.net
toml-server.man.bdi.sh
ethshared.bdnodes.net
cgq6ij94mld4tdurqao0.bdnodes.net
clkbpioorfv9c5ac04d0.bdnodes.net
co6hmihb8mcmplfgcf30.stg.bdnodes.net
cnfh4bvdid18pok22qd0.bdnodes.net
litecoin-main-va-2.bdnodes.net
cj6obv2v6e00nbcpb5r0.bdnodes.net
cln403td5fdopknl76v0.stg.bdnodes.net
algorand-testnet.bdnodes.net
bjctnvp17e5372v41h6g.dev.bdnodes.net
co6il21b8mcmplfgcf5g.stg.bdnodes.net
co6hk31b8mcmplfgcf20.stg.bdnodes.net
cd03rbd87vcbjfkqlqq0.bdnodes.net
btccore-main-sync1.dev.bdnodes.net
bdi.sh
boehekaqgodf1ut8ivs0.stg.bdnodes.net
chvl7nc2agmn3ev3sgt0.bdnodes.net
btccore-test1.bdnodes.net
cbr7iav8hascdnmg81cg.bdnodes.net
ethshared.bdnodes.net

Certificate

The complete raw certificate details for bd-watcher-01.testnet.solana.bdnodes.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67CIhBRkPtAn68LGwIZW
xhrqFBHQn6qxULxkYHDDm2P4w2qWP3qgX90nzR7nk2Ax3kIAAwgfe9BxUw6Rukx+
3Ei0+KkUanvMfx3AJ3diezGoi4jb+/2ndNTzIfG0lxBtbRyhAV4G4Vsd2zTE0gFT
nDJUGF8EpwQ+TmnTmOP6iSfEFTSZfv3gYa7ayxv4DmJ6NzEWUq4vrV/77n+fct4s
EHvJPzL2XENUzbYOjbIAGsMbGBtGBw0y2kFrd+R8BrBacAQYDlkhfMgeUnLTDxn4
zNyCJOThV6AUC5VzcsX9+8FrGyczzgkXjrA19iXzMD2kyZiqAggnHuonBRIa+e/R
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302686632950630764999876322067603855638708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 19:28:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 19:28:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bd-watcher-01.testnet.solana.bdnodes.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29753053464645408280620546386980110408685124589422893811242429503045952207316219790286522969126488032480419860371715414156056053667121903119740757905607336644338625335010793998251700843697975480854822008155305199850993838079728431931992410437366911019271007059042423844640516321090927575789167133718168766059705057894028574141293843535568881761797028483490765561941410153718811963760975334392830300122679839503384324148920387300994819593857066255108065130647131794508635656897302323746729935129048813607215207562770036634119909323151171537901876656998742058727903934008982436811250306825734091655994374802832589050279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							201826e0f5ceb59304fd14b027cefc5c0cad1398
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bd-watcher-01.testnet.solana.bdnodes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd36c2gk3a6evh1sp5v0.bdnodes.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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