www.birminghambreaks.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1c:09:4e:29:88:f3:c7:46:04:cd:2f:b3:aa:37:2e:d2:06 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.birminghambreaks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:09:4e:29:88:f3:c7:46:04:cd:2f:b3:aa:37:2e:d2:06
Serial Number (int): 357989418894373563138818600128756864438790
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:e9:62:55:6f:6d:61:54:1e:ff:a7:e2:7b:0b:8e:03:19:65:c0:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:84:db:d4:6b:ce:3d:b8:8d:5e:79:3d:f3:ad:6a:27:c7:62:ba:fc
Fingerprint (sha256): 59:db:c8:7f:3e:d7:2b:c5:cd:6f:40:44:f6:6c:61:8d:83:94:aa:05:56:49:11:eb:76:52:c0:04:fd:12:d2:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.birminghambreaks.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.birminghambreaks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

babymoni.com
birminghambreaks.com
cashbuyerofindianapolis.com
customadvisorygroup.com
durhamsportsdoctor.com
geilesleben.com
herbtier.com
homeandparkvan.com
lornahards.com
lovellgovernmentservices.com
marvinbeach.com
muslimradical.com
my-interior.com
russellmarineservices.com
waterfrontcommercial.com
www.babymoni.com
www.birminghambreaks.com
www.cashbuyerofindianapolis.com
www.customadvisorygroup.com
www.durhamsportsdoctor.com
www.geilesleben.com
www.herbtier.com
www.homeandparkvan.com
www.lornahards.com
www.lovellgovernmentservices.com
www.marvinbeach.com
www.muslimradical.com
www.my-interior.com
www.russellmarineservices.com
www.waterfrontcommercial.com

Other certificates including the domain name birminghambreaks.com

(limited to 100 certificates)
www.birminghambreaks.com

Certificate

The complete raw certificate details for www.birminghambreaks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eUFVusbdd+2x9vzPGD5
xdN5Pro5K8NZrq6qM83+eT4vbzIVLGVJsxysDUr5gcx1aD3Gc6sLshEBxFlDa3qk
Lo2l5aae/cW+zbiLyDS7xE30e7jVpoHiZN2xhVOoOYV9z+thZPcTmf6aLXuulnag
5Jat9ET2uJAmFvOe+gjVeA2Bb85NWd6sIUxnR1U01wiNpYipCN895l81ABfR+pjd
OzP771eVQzIVhvy0Tty3oKN2XKiIxGQxB5kAeKnQOXASxnKXr18xLfLRFq9Zsd9J
qPlYfcSyouwW4CripcTmJ4kyUT74dKLliIxXKNC8aOn4tkuC/YGiJdZodkoS+jDI
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357989418894373563138818600128756864438790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 22:09:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 22:09:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.birminghambreaks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27506646571600015074350072248783578703760717018593726254531034474571773572170380517934414106583726850045130924954473720386229501905790641530487943424548026598914996168519923837779989850360584065727614499817935523599469853039880413769283029850682340910104512641473571730082458253345884575626455042895938884519969004627952060746071608550726302897165922607251150315812285851919695114597410305338460738280396266260139409117821912113837552083841955622652907461969287491334915489573984225514556579648255861443709150545817096292729579440653209451424662895797852067314362030426121547949627635469069939911273857685783026124977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34e962556f6d61541effa7e27b0b8e031965c02f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (698 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babymoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghambreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashbuyerofindianapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customadvisorygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durhamsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geilesleben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbtier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandparkvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lornahards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovellgovernmentservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvinbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muslimradical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-interior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russellmarineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontcommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babymoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birminghambreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashbuyerofindianapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customadvisorygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durhamsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geilesleben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herbtier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeandparkvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lornahards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovellgovernmentservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marvinbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muslimradical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-interior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russellmarineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfrontcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018951840bb3000004030046304402201d5644006073a7932a57454cf971bb487e9b17ac9514aec5d71c5705e4846b9c022005fe4d6d23a16355a0a4b868e2f457bb572897c519ef0f9ee3ac2f54de7717d2007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018951840bbc0000040300473045022100a9e83f888467ba850d01091ee9737371b2de82defe1aa6dcb194defc73635c44022054bd7dd7774ec7f0b9c1f296ca905497f8de0397fb9aa82c8b9109f2cb052461
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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