bawai.com

Issued by R3

About this certificate

This digital certificate with serial number 03:07:43:b7:25:77:4f:30:c5:d0:c0:63:e1:c3:4b:5c:d2:8f was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bawai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:43:b7:25:77:4f:30:c5:d0:c0:63:e1:c3:4b:5c:d2:8f
Serial Number (int): 263808843589671825373737369600755635114639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:ba:aa:65:23:63:20:58:f0:44:bb:22:44:8e:87:38:72:3b:32:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:b4:75:28:3b:62:fd:88:9f:64:74:f5:b8:9d:a4:26:0f:46:3c:cf
Fingerprint (sha256): 7b:8d:1b:a1:af:d4:0f:f0:03:ca:c4:de:8d:6e:06:af:d2:73:c5:f1:50:75:91:f0:91:6b:e8:ee:43:da:56:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bawai.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bawai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dmaterial.com
bawai.com
decoracaodenatal.com
fingernagel.com
geldberatung.com
grandparentsrule.com
haidee.com
hankasalmi.com
iarial.com
mandandental.com
ndubuisi.com
oubli.com
sportsmedicineknoxville.com
starkvilledental.com
stopandsmell.com
www.4dmaterial.com
www.bawai.com
www.decoracaodenatal.com
www.fingernagel.com
www.geldberatung.com
www.grandparentsrule.com
www.haidee.com
www.hankasalmi.com
www.iarial.com
www.mandandental.com
www.ndubuisi.com
www.oubli.com
www.sportsmedicineknoxville.com
www.starkvilledental.com
www.stopandsmell.com

Other certificates including the domain name bawai.com

(limited to 100 certificates)
www.scubaforsale.com
como17.top
www.mothballing.com
bawai.com
brzezicki.com
vebers.com
my2ndhome.com
bawai.com

Certificate

The complete raw certificate details for bawai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01b0bKQ7aqVFpyPhoCRg
R+3vysWlSrkuDs08VT/rQBRb4SYnCCdnPg759/Tl9ShuryR/jHGX45ljIFsVheTX
PFuIhaGTW/XnN/PextxhihRUtWqQLEI4JZK40EC4uQsCCGNd5NevPGqDgHpCPKv+
m00m9tzVZBCtRbIZJml3H09EvuUGe8+8zL4/dQkH29L7yoUq8FU7cZbhh8ReY6Qt
7DKIlrNVb9QLz3Lh7l9Am3RqEubpvwJ8YD+ATNx6zYcqv2IJDPmDruwXbshx7EzD
zRqgFsz1TSuuazYeGT1lmAPzDgLmPNuwjGlwejrva1CUJFKNiywRTHWiVOpv8zU6
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263808843589671825373737369600755635114639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 12:29:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 12:29:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bawai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26679161349328854030730731563577934792655933648036731604074083704476534594280849255007172975563649700949521054096807471517828124086116958772296684021443942301760091646395045354809871186836351480411480534707522736925414166192512540050650663163661708756965597553664596346869119751657452380350251727904564222792975483179422938503555354174015735004911019086563612500408621273558770967830742656767657605267233000878548013233984359961934682644530498640737333746086564445606727367526273141909597274854014129345139391105848263064035948742751898903344676519365959655299993129495481422785695127574798998548502260045730513500817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dabaaa6523632058f044bb22448e8738723b32ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dmaterial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bawai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoracaodenatal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingernagel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geldberatung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandparentsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hankasalmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iarial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandandental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndubuisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oubli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starkvilledental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopandsmell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dmaterial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bawai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decoracaodenatal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fingernagel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geldberatung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandparentsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hankasalmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iarial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandandental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndubuisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oubli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starkvilledental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopandsmell.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894f71482b00000403004730450221009eb05541ee11deb8bd09226df65559c26913366b93d7246849884ceebc7a225502202664cf2b5f3370c2f6d2c58fcef07b839465ae1bddb65164399e40c49e413c2a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894f71483e0000040300463044022019049da1325bd9816df57c4d0fed33e2c34f7adaee2e182f2350b44e85bbe35b02203cbdf280318c3ae3238cf60e7f3fb9976784f649a2732efccc8e2b1d2dfab77f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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