barieste.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:03:5e:ac:37:c0:d0:72:1d:d5:33:bd:7f:b9:3c:e3:bc was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barieste.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:03:5e:ac:37:c0:d0:72:1d:d5:33:bd:7f:b9:3c:e3:bc
Serial Number (int): 310001715517858671120278187697199552193468
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:08:2d:86:92:2c:20:38:34:33:31:87:03:bb:cd:6e:b8:77:2e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:36:e0:65:46:d3:68:d7:1b:05:96:46:2b:ac:74:9f:d3:7a:ec:eb
Fingerprint (sha256): 84:ad:da:3f:3a:e3:3d:95:99:e8:d5:ea:06:08:38:e7:0f:0f:cb:e6:9d:2b:18:fe:a1:ed:cf:e4:10:4b:ea:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate barieste.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barieste.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.barieste.com
autodiscover.tufanergenc.com
barieste.com
barieste.liderlikokulu.com.tr
cpanel.barieste.com
cpanel.tufanergenc.com
cpcalendars.barieste.com
cpcalendars.tufanergenc.com
cpcontacts.barieste.com
cpcontacts.tufanergenc.com
mail.barieste.com
mail.tufanergenc.com
tufanergenc.com
tufanergenc.liderlikokulu.com.tr
webdisk.barieste.com
webdisk.tufanergenc.com
webmail.barieste.com
webmail.tufanergenc.com
www.barieste.com
www.barieste.liderlikokulu.com.tr
www.tufanergenc.com
www.tufanergenc.liderlikokulu.com.tr

Other certificates including the domain name barieste.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for barieste.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDN+u4vEkm1phy7QUHFs
BNnigYzYl6j9mR5l+4ITKXUMrKggGt1wESu3fC6v8Cv9B2hVBtJb+5j7zBrVIPUI
TZ+fox1joaj/QfZYFLbpuCJHIqLeeCvPeiqWGMR7G9pDMu7priAadyPB88fuDhAE
MuCdVxh63QkMcZRQIQUu2WbifgcgnJeRGm31v3OmsZCJeQDmCc0vO4NwPgeW1Mt/
t1OqpodpCMcwk9K+9fXB84thVUsIYI3Hq4neh82BP8uv/32fBsOmmucvb9OvkKZj
F34nC+DWV3/Z2PJTyfd86e3rvOjbhSUaT8U/yoBDM1tNENOS5QpV9NdSlTqQ7liq
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310001715517858671120278187697199552193468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 05:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 05:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barieste.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24768100928535880609171469589098362836547913875575083692413763953251277221373228101689358338827847587113416914130183306510531304592003427157736731315240516217307075068166409112091384593083251561945981818061923346473351357465574925840384254211353437381340447079548731713265558378739141847331499881625329198915419040831586720547587065508231821430253413709075197085188868700064100513278360696409365622717089583097198953596209493345274691333683480577535245933128247151760270092742088061711186673475867799297200414375373865286414150601023006270426070397793834703913641522473396069879784597706816152286198897857334741609101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d082d86922c20383433318703bbcd6eb8772e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (557 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barieste.liderlikokulu.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufanergenc.liderlikokulu.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barieste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barieste.liderlikokulu.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tufanergenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tufanergenc.liderlikokulu.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001708024e9730000040300473045022100b86bdb1548c9b138ef658a5664c71bb3e42b5bd45621f75b206389e2a5867941022041f944a1439636a9adaade909b9aae173939986e7ed75ac6286fc9738878910d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001708024e9730000040300473045022060d43c2e41424f6ba7cf28dc369ebe405fccb3f872967da567b24e5c26af36b3022100ee160c80684d935f9ce82aea0899148489823c7d8c9b6703bcc2d3a5ab401851
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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