bergtoys.com

Issued by R3

About this certificate

This digital certificate with serial number 03:29:38:9f:7f:bf:c2:56:87:90:cf:47:26:a7:7a:e7:cd:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bergtoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:38:9f:7f:bf:c2:56:87:90:cf:47:26:a7:7a:e7:cd:60
Serial Number (int): 275363699773062422672048809362908208680288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:97:24:fd:20:42:01:c1:36:47:90:c8:08:e1:cf:ff:d3:02:43:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:73:29:87:fa:9d:1d:dc:8d:a6:94:4e:c0:92:7b:89:48:a9:c4:ab
Fingerprint (sha256): 91:4f:37:29:5e:ca:df:21:fb:00:3a:f3:18:73:56:52:06:98:db:e0:93:65:ed:69:d1:6c:5e:f8:7e:42:61:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bergtoys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergtoys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergtoys.com

Other certificates including the domain name bergtoys.com

(limited to 100 certificates)
helpdesk.matisa.ch
www.bergtoys.com
bergtoys.com
bergtoys.com
e.bergtoys.com
itservicedesk.poundland.co.uk
bergtoys.com
www.bergtoys.com
www.bergtoys.com
support.sodra.com
bergtoys.com
e.bergtoys.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
bergtoys.com
configurator.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
e.bergtoys.com
itservicedesk.poundland.co.uk
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.bergtoys.com
helpdesk.matisa.ch
magento.bergtoys.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
e.bergtoys.com
bergtoys.com
helpdesk.matisa.ch
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
configurator.bergtoys.com
helpdesk.acrotec.ch
configurator.bergtoys.com
bergtoys.com
bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
support.sodra.com
e.bergtoys.com
e.bergtoys.com
servicedesk.ecm.software
bergtoys.com
support.sodra.com
itservicedesk.poundland.co.uk
www.bergtoys.com
e.bergtoys.com
e.bergtoys.com
e.bergtoys.com
www.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
e.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
www.bergtoys.com
configurator.bergtoys.com
support.sodra.com
e.bergtoys.com
magento.bergtoys.com
e.bergtoys.com
bergtoys.com
www.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
*.bergtoys.com
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for bergtoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275363699773062422672048809362908208680288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 06:16:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 06:16:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergtoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767312787347585085949263922952014144955417285472801928804157537409021561334472589335255046969259844583958041038213234020421631896043001716382572260417488510397457119898529857181553472413622878739661953145557230344625904700743655285871423335656506111673006611754382462421525963819255778482249604798634953088999846887737095949955565963331372911866066766931603060951272141700587870402399780223689965732915972895542081723902151092043027922807903795354386340298473994598988832629526129353236770562422196929256262937923805159377363104572919171385714838765619477368845682737661596543326086878349380547134889912059234095874135899629277776362680360402791255510410477173829311848497306386586899414255511298386872320187117743688535683941767486759686808947343429935340597581391512384030035449197095051280596303083052288685805621533425790328196702242994231368651255915669610072776169852537579221189523307425005787705291922990603028443825347568060576745875675329889701317845294247506446410356583936397817816612136327918116939308914780090535323613044025017499507283658391035107790815729238484482304473836885340384308346653159999642324959561704118046837046575405103486493476711712185474821372694193864880259308723960281488815414084441359982067028179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a79724fd204201c1364790c808e1cfffd302439c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergtoys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afeb246e7000004030047304502201d915673c91c59278b407b049aa040e4ff8ad08ed46fc16cebb95b119d040a14022100be6bc782c41428742ff3370a3a2b21db54b3ff4b19581db3b48ea058f5667df300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018afeb2472a0000040300483046022100c999515ab85108f24e6bcd59cfda562a03549d7adf30a8ee54b0e3733fe909db022100a640834d0c2a58db789d7ce027885cff309425e0c5353727e63b443b69f68724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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