www.bebarista.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1c:92:3f:bf:cf:41:ed:d9:7f:95:af:d8:ac:03:31:ff:bf was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bebarista.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:92:3f:bf:cf:41:ed:d9:7f:95:af:d8:ac:03:31:ff:bf
Serial Number (int): 271059162361514570334517195078067276611519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:ba:47:82:95:18:4b:fb:1c:09:5a:8c:6a:e3:14:62:66:f0:f0:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:79:37:5d:f9:2c:3c:d7:1c:ce:92:b5:63:23:93:db:b2:3f:cd:12
Fingerprint (sha256): 99:88:df:2d:5f:0a:85:e5:ca:5e:08:88:34:b0:f7:e5:15:01:46:14:67:eb:12:a3:44:75:33:62:9c:39:74:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bebarista.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bebarista.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertisingpicture.com
bebarista.com
brotherhoodofthoth.com
catholicyouthbible.com
codeofvirtue.com
desmoinessportsmedicine.com
futurethinks.de
jointpainstpetersburg.com
kaptive.com
kompassnorthcoaching.com
lifesesh.com
matchmykundali.com
scandigaming.com
sieuthidiengiai.com
vietshare.com
www.advertisingpicture.com
www.bebarista.com
www.brotherhoodofthoth.com
www.catholicyouthbible.com
www.codeofvirtue.com
www.desmoinessportsmedicine.com
www.futurethinks.de
www.jointpainstpetersburg.com
www.kaptive.com
www.kompassnorthcoaching.com
www.lifesesh.com
www.matchmykundali.com
www.scandigaming.com
www.sieuthidiengiai.com
www.vietshare.com

Other certificates including the domain name bebarista.com

(limited to 100 certificates)
www.xn--celstia-dya.org
bebarista.com
www.bebarista.com
bebarista.com
tester.world

Certificate

The complete raw certificate details for www.bebarista.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hAOkN0v5pIi4iMEdRye
9nciD6lsUnuOPfgWJ9DHWDtJjbpae28KMEkM7Okp9AROh4VWbwOgRWzHjrVLqA6C
nigTZWtQyUXjtHntFZJ+yLlUqxDuVoAMp7WWYv/V6b80vva72g7OUUgZaz4W02uE
T5la7LQOnrXDfreGUrGRg/lEPrLhJ4uSg4m69CkSTqnObwSk+Y4OhfikfIXJFi3v
LdxnZZKHCebOPy8GcSzPu4i9BEws6vJwJmZQrl14xJCGaWShRT8S9q8uqq/Qej07
VWFC7spoENFIe/CESWPg2h2m1xw5zzdGVTBAmu8XlWLWpyznqgD9DyRGRUaUbbFx
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271059162361514570334517195078067276611519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 06:05:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 06:05:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bebarista.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28537774873814193060783430971209950083236819668209137577453122601177386131028465157899470208215567205540132476055810887149633127100912256165468112057437262393897045441515134115650017727741499459088397390767500532472063736130560200080069069869990503168124940790259664171019843013109427176102527640533813118748320174342138905810960798880574959108976839742287405574469754966362810482211605682947480911379754585613393140277748474728901415948574291158102972416243130591902949092002478024791330894191734443558406371083526891298932684531887180027049489590695242809386050602562500749004208862393653983702944302330966170497513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56ba478295184bfb1c095a8c6ae3146266f0f0e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisingpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bebarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brotherhoodofthoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthbible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeofvirtue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmoinessportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurethinks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainstpetersburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompassnorthcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchmykundali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandigaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sieuthidiengiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advertisingpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bebarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brotherhoodofthoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthbible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeofvirtue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmoinessportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurethinks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainstpetersburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kompassnorthcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifesesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchmykundali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scandigaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sieuthidiengiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietshare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894e11e3e100000403004730450221009bc264671d7ba46eb414da71ca61ec0b9c3c9ec8a58af5eadbb6609214ff4466022036760b169b5b63b8c8522e34c87d420975dd1ed15501e3c5b66c50e412b6a7ca007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894e11e3d60000040300473045022100c24c94228cbcbd6c02e4da1a241bad5a7e5360f3ffe74eea4c71f6bf11bad7f502205ee64ae64babb000c2ec918429e8d4e7e0fca635f0aef02cf95249e5e0914aea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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