baby-girl.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0c:19:20:30:34:15:88:28:4c:e1:28:f1:5e:54:b1:29:b7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=baby-girl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:19:20:30:34:15:88:28:4c:e1:28:f1:5e:54:b1:29:b7
Serial Number (int): 352565929961168533374815279539477525113271
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:9b:ce:f2:7c:37:1c:2f:cb:7b:ff:6b:ad:ef:e1:b7:bb:52:61:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:30:25:9b:04:59:97:91:7c:31:ec:cc:62:62:5b:4d:93:f7:3b:fa
Fingerprint (sha256): 7d:e4:e9:08:4e:25:eb:82:92:68:84:79:4a:f8:89:77:06:f3:30:7b:b8:41:25:ed:3e:8e:43:d3:38:a1:b0:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate baby-girl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baby-girl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baby-girl.com

Other certificates including the domain name baby-girl.com

(limited to 100 certificates)
www.heatingtape.com
rfdetector.com
www.nybookkeeping.com
baby-girl.com
www.believersfaithacademy.org
baby-girl.com
717175.com
www.inquinato.com
colleague.id
www.keywordsranker.com
www.cheerleaderpoms.com
www.keywestmilezero.com
baby-girl.com
www.cosmeticdentistrydallas.org
www.science-book.com
baby-girl.com
pomucky.com
traslazione.com
www.lorissouthcarolina.com
nybookkeeping.com
www.rfdetector.com
comedysyndication.com
tightafsauce.com
www.baby-girl.com
awesomelifeinstitute.com

Certificate

The complete raw certificate details for baby-girl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAovNhS11WmUVXUzvnMWWD
RGMB5Lv9v9dXRzgZ0fUD6GphUm2WSUmNV6CQED8ljhvbcmDbwHfK1LtHo1IaciBu
Rz0imNCdSqLAbWrzXR3uhSK/BYGl4GJi9zKDYOl/kijDOh2kF5fBdy0sUins5cuZ
X0EfWT/g21FnIHC6FVc5raptVDsFr+DkZVp6/KtVTdRtnCMN0BPNoZub3E1KaBSk
7AEQr32TywXju5ANF1NN1GD60e0vnjlxMQDrxQqNO68bvMoxLEcLP8HbrNLladaV
5CEpdiu5cFyALm5TMHbD9fGNbjzJQOFpehbhva4PRK4X4tbpeqmO4gmJLKTnpSHL
eqHA3DxmLki6x4/ss/q6RPBnya+NXSPtGPGIHPPuoMHHjuyOtAPpjQ5pwg5PdNFn
rWvkYbh/O6UG+oYhDQKJWq8yiyfXPv61T1sJm39YtrMHm03V6nAOdfkI8Vyoc0RD
3+d00IIHHkA8HcwofsHdQAoJ60OivCqpX+GKNJVdsswR4IfToDQw3k3fBd6Zqnyv
OF9RLlLRuJiLmrLZL7ynJUndmp6d/N8vph52qEj7X+Dh0EKseMSqErSMuRdmncjz
6A/ZDl47WdO7q7qUbFOP5bF+R/omFJuqXiY6TofzLZDSswS88D49zZc/UyVzTuDg
4ASqzvNYQwe+AuOtlRw/iisCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352565929961168533374815279539477525113271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 20:17:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 20:17:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baby-girl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664780870279584129214545145255520662029079966774574687691732229842606247929014172509621577571840421951418987352996356174280558296282882630259566418576354350348242822176147948769996228026756388987374710214850384518381135436245729186392118396059286643483922529945169156850456530548240351110452945877933684522667432617208000879488689833181629871486306808531845594947391884908604135723328888579851705327833351109420609723635078312338062828210458231114103509396209020630298577957756980470629675862542656705156386900015465466423959487209508969955316618953969965939801969650130822050458472873083401730919847098134311717229417241412990475984631591150779424830298073214169149090421087309306687116551020491170900015279833200088368820301112757491845822468157362628420770620543422119599003723822191517568345489642563126745839237922640486997994825460927570710504911130328459624227998023299237588676096935844992648731037438875388510054842763872579755414805835495932269484808511964308290500517459756072679892857555445835252749284350819382202078490064784715820083322917619650546818652354812481534419547243342488567225255913301385332464016649833402993396613809942143233024455278796384479869615862720415773973492695237988991043691472498679991651764779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d99bcef27c371c2fcb7bff6badefe1b7bb5261b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby-girl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1948f4f8000004030046304402205dd6b979d8c8e064720a7746a74c41ca6f98d352f3c3ffe9fefb81d048bb2029022003bdf2179c87214728c4d1e3993aa9025c2c2a67b8450e4ae2442535b8708d7f007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1948f51b00000403004630440220408182b3e8fa0ca671e73a5d8a51b47b5c08d9dd0aa8c269455e2dc89226400c02206a7e172b5c93f05e13151936e58666d093382030bfbb5e0f73335a9f0c6b5740
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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