bergtoys.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:e0:ac:17:af:b8:b5:0a:ad:d9:91:bb:54:78:b9:4a:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bergtoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:e0:ac:17:af:b8:b5:0a:ad:d9:91:bb:54:78:b9:4a:ba
Serial Number (int): 402852680694003204854850506260033704643258
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:a0:e9:93:96:05:79:8c:72:9f:5b:af:3e:24:32:7e:2d:e9:20:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:65:7a:c0:5e:a8:c4:d1:36:e7:0b:90:57:13:74:34:ca:89:da:5c
Fingerprint (sha256): 8a:8c:a3:72:f9:c9:36:c1:98:2b:19:61:dc:2d:42:52:c1:37:e3:b9:7b:31:f5:b1:80:cf:45:bd:51:8e:53:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bergtoys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergtoys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergtoys.com

Other certificates including the domain name bergtoys.com

(limited to 100 certificates)
helpdesk.matisa.ch
www.bergtoys.com
bergtoys.com
bergtoys.com
e.bergtoys.com
itservicedesk.poundland.co.uk
bergtoys.com
www.bergtoys.com
www.bergtoys.com
support.sodra.com
bergtoys.com
e.bergtoys.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
bergtoys.com
configurator.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
e.bergtoys.com
itservicedesk.poundland.co.uk
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.bergtoys.com
helpdesk.matisa.ch
magento.bergtoys.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
e.bergtoys.com
bergtoys.com
helpdesk.matisa.ch
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
configurator.bergtoys.com
helpdesk.acrotec.ch
configurator.bergtoys.com
bergtoys.com
bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
support.sodra.com
e.bergtoys.com
e.bergtoys.com
servicedesk.ecm.software
bergtoys.com
support.sodra.com
itservicedesk.poundland.co.uk
www.bergtoys.com
e.bergtoys.com
e.bergtoys.com
e.bergtoys.com
www.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
e.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
www.bergtoys.com
configurator.bergtoys.com
support.sodra.com
e.bergtoys.com
magento.bergtoys.com
e.bergtoys.com
bergtoys.com
www.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
*.bergtoys.com
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for bergtoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402852680694003204854850506260033704643258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 10:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 10:05:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergtoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863764153831733130024317914701519225692169419247658908566849563926127629298060187968794859745955545643658177064334853717583232762103864109667346139681481353730957221696190681149999767866981954671868863065955562681256392534246088366931237749643021195428863127220528652537325697560914860226600383889014876066669543648390322306597390802311810240337163810675601156962113842727982242615677236608384102836328865045836617198509556784488884290270716574651908593134377119089945435940475786361864911742339209836263871463090226366510339857310115374556718774165789449340965394392972479070129719024678659342056563616140064924645237759792128228360371912918439062249607568447747606859428194719948147809258420784067094613528284548478263814711231842669780784583922976827857922993714481891365672633732834198433847888179711411750643170182852952664998652555368218990933683465277392094052538891214182478787173349392350811823676976852799013075999213581582145279960904044569825429830433970598151804902437236948413935907967366232751837893351370792089516617886344338618572921044058340601397036198964777839921243040111078368203157226386475431556329601565927084392931312295226319995204528660296187034031739141236187620110207287621598728929950551631181902713739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22a0e9939605798c729f5baf3e24327e2de92084
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergtoys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a625d476356909688320e1c565311f45700e577d38fefc979db34529519fa5c224f157260dd4a094dafecd0c05f301c5a4a91d73488760b731604fd994f6ab734bbe63a13484deb7007f3acd49e4a2971901f85308cfbd86eb7f8f69a07cd44b17e78aa2899da7f935b14fa55180c54818ae700797525b90d4645fe31dedfe1c99f31528f6b4a25ad83c98f4eb02e8e58fc1482c723b7be36c1e8d926d8ea7fc69543e8ca77bd9cb5ba617f4d2dd03162fa0ecfb3be4e18d1d8cd4f080810d13ef890c7a5f9c7e9cc8f63f51be9c32511e4a36eb7037c0d12e5d406bc168fcb83c082c5ce7b3bf42b6e0c30cdb95dbc2523af00c1369e04c47a70b89af6821c