buytime.network

Issued by R3

About this certificate

This digital certificate with serial number 03:73:2a:da:ba:0f:ca:2f:0f:7d:a8:47:1f:b8:bf:25:2a:40 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=buytime.network

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:73:2a:da:ba:0f:ca:2f:0f:7d:a8:47:1f:b8:bf:25:2a:40
Serial Number (int): 300526293261505971878820321364186822421056
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:37:30:d7:7c:4d:ff:f1:62:68:e8:b6:d9:3b:bc:ef:00:f8:3e:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:46:21:fc:f0:07:db:34:8e:f9:a7:9c:96:ce:05:a4:59:82:90:c2
Fingerprint (sha256): 59:fc:16:5b:f4:63:fc:0d:49:18:58:bd:24:9b:3d:70:23:e0:17:b0:3f:44:87:80:7d:0e:df:7a:37:84:ca:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate buytime.network

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buytime.network

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buytime.network
www.buytime.network

Other certificates including the domain name buytime.network

(limited to 100 certificates)

Certificate

The complete raw certificate details for buytime.network in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300526293261505971878820321364186822421056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 20:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 20:35:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buytime.network'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850292094942026168087207624132796273212533163516706507851715069319748471869112827287764790379118281238119904334221108410779934318307963969477074241299949657532428981300480248497813729374361361709399764263354146138975255106807805021651572683679528280530518164303281945446951244776230380648986250546580269132902572504013511048170863514177246984914296295593333903444372280523124047237706688501278231271023118683025132978739344001762174402012088582005761648499040984306015255565869780542262230550305270183880025784491415963990737221729596126113555353497895097823907414129652071691761228029895527279819568692441554139081191537610199227897554621147542474781941801707472989748526879446153660830887894943444220860167042058844785189194841162345852331474200263332300095791449184339514898889092113094787247518660744835218943178089009667413435614195577035311167915187992746758480444352267788250604389567615163504246108425402747250209401087850611387851901260954131371885503754948272119770702322545074958482351521476951596766684217047766855586411934366310447381171983008442123875213130368478283585134385183159041784130862441143554605646285979931384763809239616503211911447335615704346619836805510603356337279158073127589731421309320729346801043737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							973730d77c4dfff16268e8b6d93bbcef00f83ec6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buytime.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buytime.network'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea5e3b10b0000040300473045022100953cb12ef75e8cacd91446d2316a277d123bb869308d38424f66832ca2efa52602205985a20c62f6803c5a145e94ae4bb17187b5a232dcc66014f1daf52443969b4f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea5e3b1220000040300483046022100a4f056c4a3219073771e2c0c97110d311e615953172f9608900ce571d2efab900221009d6b7822b74577c99cbcbfd8d5e8779f4527d673e198f57c06f8d7d6d459df48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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