barbering.net

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:62:e8:06:91:20:be:7f:2d:24:f0:e6:18:9a:63:a2:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barbering.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:62:e8:06:91:20:be:7f:2d:24:f0:e6:18:9a:63:a2:4d
Serial Number (int): 435352616381531071608482185076912154714701
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:82:0b:dc:b6:86:3b:d7:ad:16:d3:69:80:e9:2a:88:31:1a:52:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:56:c3:ff:4c:a0:ca:03:33:32:6b:ac:a5:b4:76:ac:c3:64:dd:b9
Fingerprint (sha256): 5b:ad:a0:cf:0b:ff:7e:cd:ba:b2:a0:49:b9:f0:95:52:e2:9d:99:a8:09:6a:20:ae:cd:e9:f6:26:a9:4c:db:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barbering.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barbering.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barbering.net

Other certificates including the domain name barbering.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for barbering.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435352616381531071608482185076912154714701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 04:24:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 04:24:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barbering.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715150764166306966153533406911879293249811943661322904526522081233433767029593578863622828861356519291287490598517054048212862407959152965123560068326553703490869736302475131289159417061234501906172464600279911911377091137770356641210939669574302231935522545048098126174996365914090830932810182808626978242648044479031983211824265632577501648428276075528532277362426398617969327959322925156943356624594162015971105348076710295605725848441083341896228781474363324582508193332606695011926950165513435779852592657680220036636304078696067749304134395237539959072968212019181822688557030607169439314976880926298617911618421050353382810216034653027020088041689440483106424795847000223532678012973401612805064830865311104579413811988719274507987277375093193547948912215145116276780991616457752663172248078487966558094167532377517725574111563662033212881945044242479215066695254311281934972670970215932469160190065333936397561133011458300053659013189068119081052516399772722158970946841565680082171127796144384469121698227302318422733421017182076541879216114468877507837376069285332680924914137403760664965012375618302350849548041181700977144241925338400272030007340668251223361928171348103311848394361508529251835832527470922676097807878157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e820bdcb6863bd7ad16d36980e92a88311a52bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbering.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e552aadef00000403004730450220385d3501e5972d018581acea6bf0054ce5fa2643cb045dd0884fcbab5abd67280221009407d2f3ad4c4431cdf978aa9fa8ada48bdee8eb0207ecb9ed7513264c289eb300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e552aae2c0000040300463044022045be685bdee580bf47814a5db092ea40fab401c34e65968f2b65f73a2b4515da02202922cfc393fb5786e65ab19ff1aac4c1a361f2353e1259fc93a7d45d5d71ea61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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