opticsblog.bruker.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:90:d1:b8:f4:6c:55:3e:0f:bc:46:c4:7c:65:94:e7:12 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opticsblog.bruker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:90:d1:b8:f4:6c:55:3e:0f:bc:46:c4:7c:65:94:e7:12
Serial Number (int): 301002110130874629524515882796107068401426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:3b:a5:59:9b:64:eb:ee:43:7d:85:e6:7c:d3:d9:be:7a:7c:a1:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:66:2a:51:0d:5a:26:66:5d:9e:f2:a3:14:04:1e:3c:fa:63:46:e4
Fingerprint (sha256): 80:cd:eb:61:33:25:ad:bb:cc:0f:ad:47:45:80:d0:70:c1:0d:66:e9:19:b8:de:39:a1:de:93:90:07:21:90:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opticsblog.bruker.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opticsblog.bruker.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opticsblog.bruker.com
www.opticsblog.bruker.com

Other certificates including the domain name bruker.com

(limited to 100 certificates)
bruker.com
*.autodiagnose.bruker.com
bruker.com
*.adiag-qa.bruker.com
mbna.bruker.com
licensecentral-bdal.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
store-stage.bruker.com
www.bruker.com
mbns.bruker.com
*.bruker.com
cibrubwp07.bruker.com
www.bruker.com
*.bruker.com
*.adiag-dev.bruker.com
www.bruker.com
*.bruker.com
guestportal.bruker.com
sso.bruker.com
bruker.com
licensecentral-bbio.bruker.com
mbna.bruker.com
mc.bruker.com
*.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
webmail.bruker.com
mbna.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
monitoring-mrs.bruker.com
fileshare-nano.bruker.com
mbns.bruker.com
knoluvit.adiag-dev.bruker.com
monitoring-mrs.bruker.com
www.bruker.com
licensecentral-bopt.bruker.com
mhmp.bruker.com
*.autodiagnose.bruker.com
*.adiag-dev.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
bruker.com
login.bruker.com
*.autodiagnose.bruker.com
ok.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
ok.bruker.com
*.bruker.com
cibrubwp07.bruker.com
bruker.com
mc.bruker.com
guestportal-01-emea.bruker.com
monitoring-mrs.bruker.com
ibcm.bruker.com
licensecentral-bbio.bruker.com
fileshare-nano.bruker.com
fileshare-nano.bruker.com
*.adiag-qa.bruker.com
fileshare-nano.bruker.com
bruker.com
www.bruker.com
repo-bbio.bruker.com
mc.bruker.com
opticsblog.bruker.com
bruker.com
*.bruker.com
www.opticsblog.bruker.com
fileshare-nano.bruker.com
*.bruker.com
bruker.com
guestportal-02-emea.bruker.com
www.opticsblog.bruker.com
www.opticsblog.bruker.com
www.bruker.com
licensecentral-baxs.bruker.com
cibrubwq05.bruker.com
login.bruker.com
login.bruker.com
cibrubwp07.bruker.com
licensecentral-baxs.bruker.com
*.bruker.com
mc.bruker.com
fileshare-nano.bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
fileshare-calid.bruker.com
mhmp.bruker.com
autodiscover.bruker-nano.com
cibrubwp07.bruker.com
fileshare-calid.bruker.com
www.bruker.com
fileshare-calid.bruker.com

Certificate

The complete raw certificate details for opticsblog.bruker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1IfUN8nD/TvSoqhgZ3TI
mfs62mILQr5i06CXdofSSc85K3mIF8A7X8bdg1u7eft7O1W7Zkkfx9nBzRKPj95u
QKfuXI8i4tlGHspK38yypZNu6wAKEOUxW4+SST5M3tZqrFZf53Y/kNRyPyojwFrA
S9W6X/B159BL3qmYRDVgn1gSPx09timGafLdbXVs5lntQVFfOiRvKEwyImVOQnyA
TQNvPoR2PL653SA1PfXt1aQ8CRDKE0/mHEzrAIPfLQw7ntwvW5rzZPZa7ZKexkqk
DG++y86Lge5ZcdhV1b5Md5cUuSL6aIesxqGYy6EbDXxf7KXNsoO43x4P4MKNY+Z8
k4jHF+BoSocEzhqi/o1PINwRqiIvw1s8kgrtQF7y6lksjDReQv71J/6qu0JP71Pj
CuR+CPoiCfvHqSb7jYn8TIYKe/7ecr7w6403kdK4RH3SqmP2Bc4WfgcwTnvjGKMQ
mzJtfBjd01eEaWt1vj6DFXUL4htuIAiVb6ZEWoB2jx5l5H0F8eb2XpaGx9Mx35aQ
V/gdnEc+8h59QnF0Kpt+3qYAelue1Iw31LRIWtX3A7TYhrsCbR1FRSrAWG26MMZG
4Rbb8w64a+OuxKLQy5U3kL1OVpMmftvbasw+taIHt/RnYEMVbh/YaLgzLNKBrvXk
IKZBAatxnKNPK5DxK+naBKECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301002110130874629524515882796107068401426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 12:19:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 12:19:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opticsblog.bruker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867049127878323865948554985048029806749085484342023253903292763246681901681049042386111612763756568326509001188760221302594480230979793701152311272760927916318290839974662174688972202355277099710360471784596112036990534151314273301777815015356506057995003652795361558536604255304964365776840059467975752566988907876447432049970035343753829905999017266004251504045072336246763105690836978132234298268419864963010962539469979046185322630558232997195811994059874091564104026643512240081672944105219257814535952825535410898914292573734472542482651271468397842944060513372416717306330196184661391044597703705990958645149378839691328599204943384740777813558218269454237699758529387000754734420537372656775107189686032933877675595487228423491302512260878765267076128791131154084253529426616672975892257703920674789563730175380474772500698841095321166247793609802973896442085671075860022965212358164610946967097298416695098270213054572476975216464505379455633675418660113696117303311318944812907741417467502980556238202262186828444219757141840870961773239024986434739116625790103249353810523321808182640810560855457617599979587667665703141760017039952914316306640449542765773721138403428413821833780269487580382166398690355033886563984082081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							223ba5599b64ebee437d85e67cd3d9be7a7ca169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticsblog.bruker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticsblog.bruker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017062c0d440000004030046304402204dc6b536b4dbb6be14774c22c311255bf60bfa1c3e24afcb015d6c47814804b702204fc2f278adcec11614ed5bd70c8757a2ab0fb0afb308b0f56da56518e3cfb4e4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017062c0d4310000040300463044022063fac000a8b724ca023ad7a8615d51550e56422861f83cb00c9bb084d55e4f8f02203ce41a9846329fb4d0b77c9e1f2b5b725eac6a504bdf9e5405e2f6ebb752ae12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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