beehonestshop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:44:08:e6:77:1b:00:3e:ec:eb:8b:17:65:28:fa:19:d6 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beehonestshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:44:08:e6:77:1b:00:3e:ec:eb:8b:17:65:28:fa:19:d6
Serial Number (int): 344796471407389622617880920675463370250710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:2f:34:18:b3:24:be:76:fb:6a:67:ac:13:f5:5e:33:1b:1d:e6:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:f5:4b:e1:c4:6f:12:49:cf:66:aa:ae:79:73:49:c0:21:32:23:9b
Fingerprint (sha256): 54:c9:f1:82:16:29:d6:6f:c7:4d:96:7f:8c:f3:53:85:88:fb:c9:a1:bf:00:aa:0a:82:d5:99:76:1f:5a:f8:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beehonestshop.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beehonestshop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beehonestshop.com
en.beehonestshop.com
www.beehonestshop.com

Other certificates including the domain name beehonestshop.com

(limited to 100 certificates)
beehonestshop.com
beehonestshop.com
www.beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
www.beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com
beehonestshop.com

Certificate

The complete raw certificate details for beehonestshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344796471407389622617880920675463370250710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 16:18:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 16:18:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beehonestshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833225367537051223511921195004148639881044529682804727586379934346947118153565146363453257755453379196104509684663328570641800696765864936637930468676913223012775280466807321707082546216401575799033796294378659492718943885856589316191404044278299438367257836075445758972597447600116469509865916924641159432177502938863075263475011659141275497654527152311073375149950551076434482431967749065764201403850187958728335995493868683472273087636719367631291565441386653631253737782368419177859542056317954893291205044756070248654634481182708308220997276811793436527277606956671476596986235104519929169401415418261069767102859473143881409998206851950111754716849228960383744133874416545281440727043366484202426674006007045950387551718015140453596762537269736061219999471429821478935708159765769578526440650487832614946324803440827806732324566631046884089447493532539512451907361480175527688029428135456128894891740425015582585355035035107872900796365865794725165385871236805852378677139188035611523139167697389257443527305759412409800079069222709187766833420614754896104394357243081591398124049475014789546369249288290711287502371738647068524393875001556019200730722502657516700033027789750346228987008358719542860857090202659340397455890201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e82f3418b324be76fb6a67ac13f55e331b1de656
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beehonestshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.beehonestshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beehonestshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001692ad0f1c90000040300483046022100960ffbc45470ee9279fc115d70c6a6dda7936cb485ef57a60a75b0e64116499f0221008e3e9763cbdf16f2d237ffd6721c54b109ee561e704a51396986aac36c07772300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001692ad0f0280000040300483046022100e2fbed456c1d17bac6c822fd8fad86f2c1a9e52a47457e7b9e4fa4e84f33709f0221009e52d11896ce7ed9ec2129bcc0080aa5e243f532f9eca8916721884c9bf6ef7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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