berriesland.com

Issued by R3

About this certificate

This digital certificate with serial number 04:21:95:0d:c6:cb:d9:56:b3:7e:e4:c2:30:a8:62:5e:b3:68 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=berriesland.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:95:0d:c6:cb:d9:56:b3:7e:e4:c2:30:a8:62:5e:b3:68
Serial Number (int): 359876588338730750874431295392920318686056
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:87:16:ba:a6:78:f5:cb:bf:de:6a:83:79:ae:e7:52:bc:e0:71:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:7c:67:d1:db:65:60:93:00:09:b2:1f:4c:40:67:37:25:57:46:d2
Fingerprint (sha256): 7f:a1:15:4f:6f:d0:63:43:38:59:66:74:1f:f3:a5:57:9d:e3:15:f9:e9:37:cb:d1:94:88:16:68:65:ed:20:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate berriesland.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berriesland.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berriesland.com
www.berriesland.com

Other certificates including the domain name berriesland.com

(limited to 100 certificates)
www.berriesland.com
aereovideografia.com
waldwick.org
pay-matic.com
berriesland.com
berriesland.com
neha2014aec.org
berriesland.com
michaelsshop.org
cryptovesta.com

Certificate

The complete raw certificate details for berriesland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgISBCGVDcbL2VazfuTCMKhiXrNoMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjcyMzExNTdaFw0yNDA1MjcyMzExNTZaMBoxGDAWBgNVBAMT
D2JlcnJpZXNsYW5kLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
ALIyrFJYYQuLEwB611ZnfS53ndcxxApTFjufgITScWm0JXXcu441o9J7HGYxTo3b
so8o5SeIVuKg22Wge2ANu47AjkhGzpWHufZHK+grIqXUlXEDgMt9LT/IcZdEsvYz
+ky0xJtkI30iGXYjO7Kepgcav0dD0GLhbOeZK+FarCFS15PLAEIc5vicpAqmOipY
mj0uwchpVyRQN6l9zKiGM6XI3EjaOJm6y6oRtCf29rCUQZ9RbwrO/mMSorPX/q/Z
W8LgPUhWbJLNmx7nAzMLUDodeRQRanFLXcffwFhOtVU+Qt58ggGI8U0Qe4bt5vYP
0REPv3SVxyV37ozz+C6ncb8rQW2t622P5fW2789K16KeLegBqvgcQVGgqGAZj5UV
vtBaV+AZ1Vp1Q/vW0q+IKo5kfv4SaV6L/CFG1tPn7jqYSyQGZ14DzfBGcd8pOmBV
XoQvZvSuXdfMpMyQh7m2Ah1FFtcGpTP0DgiC/HqaioFLb8gnk2lBBXxq0giU+ObA
PnSJFtYETwQXBWtuxxG+FWJ+OpwIF/h6+xAdPyn7spDB5dkt2YKaIdC4aJOGLM/i
clekKBPcRIHO/BxKWJzR1BUwfbXUJzXtFvQGnUcIcKPxLWKriq0YJALcJK5mjzJk
dWbBUGdpPi/Qu4htZZOeu6VkYLp0bkeWOOt78BZ2e61XAgMBAAGjggIkMIICIDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFFOHFrqmePXLv95qg3mu51K84HGpMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD2JlcnJpZXNsYW5kLmNvbYIT
d3d3LmJlcnJpZXNsYW5kLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisG
AQQB1nkCBAIEgfMEgfAA7gB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM
Wjp0AAABje0Nv5YAAAQDAEYwRAIgNhnoImTdzsIVsMjfWVONFyFb71DohDwjzGrT
NeHm4x8CIBF93Lt4MRK/eNQWgt8Ug2VYtTwY7gN4fYGS+bOCALWTAHUAO1N3dT4t
uYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGN7Q3BKwAABAMARjBEAiBhEJQV
PlCgig3xB0WWe8zViknwmiJf4lttx09KILUaVwIgAdzT2jvpjurffPUPvwDcRv7j
Ld8SDNW1k1puEB2rgJ8wDQYJKoZIhvcNAQELBQADggEBAFdwfLDAubNaPcpz6iGW
OJcJtDCN86wYmv4k551LyPme5Y1Dk8vG71kMPyFbQVBMXYQpVMWogH4s0ZOaZo5G
QWxK1DaVpAZbLj6aWDtU9krnNB81eZfzUpvJGutBalPzNW6sD78svBj/Zx1N9Jfh
jvZdHC7SJxG37hPb4T1rWbcZ8SrmDKQKM9lWSiTne5k7eIjThNjuMO0f2jP6lJkP
4wYsIQzSKW7FP2+Vpjqs+dyPXqvq1mHfW3ErqGvmunNW1/bzmH98U2Yuj3hJKD1X
BcWDzAPpRdXKunG41xTG+GOnl/s5+IrXv5q6Tm87NRAC1p6W+We80PTubnv9Uf2K
pk8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359876588338730750874431295392920318686056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 23:11:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 23:11:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berriesland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726984176686821239924412991243943906706737670624910416003372134148505837088008917000233639121257804804957808312661663172738665286526957767833609486779961728819993625346005309523331642580991081729940534461467415452917882039180978184853235748454341955861731778608213260732124218494280071619368567362246399777774381174178146139269928673474010166859643776924518627661903802449694822031384287489166040694561642132894370822383671336089333040242776909145419256799345067142612574635897434531850202435020609587783785370823292068349988553302909328271374033538819898278411341412398902507763711415411159366268311287358574054739834396614953281031748604393770998852340119340333986826751938006739482558497297580768772804710763802094187426975673751827893411025899086528107173284960815346405252198535397464167576359243128264449692393917624082872037638999891964162870927802346262348116806757759228785303604422030350078218922047930857642387514558048381135184739759685252375777525038195247265221591023565178339367136086281903694304502030059161295253066731625181044796925956274240432388066485057253150450790856053317662127276923405508181142770762643120590464318684924103447330868644558973537842115187883828754126957407660960843958599050703373030416690519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							538716baa678f5cbbfde6a8379aee752bce071a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berriesland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berriesland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ded0dbf96000004030046304402203619e82264ddcec215b0c8df59538d17215bef50e8843c23cc6ad335e1e6e31f0220117ddcbb783112bf78d41682df14836558b53c18ee03787d8192f9b38200b5930075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ded0dc12b00000403004630440220611094153e50a08a0df10745967bccd58a49f09a225fe25b6dc74f4a20b51a57022001dcd3da3be98eeadf7cf50fbf00dc46fee32ddf120cd5b5935a6e101dab809f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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