baby-girl.com

Issued by R3

About this certificate

This digital certificate with serial number 03:33:04:b0:7e:ca:19:d3:e7:83:54:24:0d:e4:90:33:19:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=baby-girl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:04:b0:7e:ca:19:d3:e7:83:54:24:0d:e4:90:33:19:00
Serial Number (int): 278697491836074535559532626009754417961216
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:6b:4c:67:92:1e:cb:93:80:c4:8a:50:21:f0:ab:76:a2:75:68:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:94:d3:77:84:60:01:a0:0c:61:19:f1:96:e0:30:ba:f5:80:e1:eb
Fingerprint (sha256): a3:f7:28:f1:b9:e7:f1:79:24:fb:e5:b9:ec:c4:dd:da:56:1f:0d:93:b7:be:e6:59:3a:0e:1d:58:ed:de:ab:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate baby-girl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baby-girl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baby-girl.com

Other certificates including the domain name baby-girl.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for baby-girl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278697491836074535559532626009754417961216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 14:51:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 14:51:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baby-girl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811533862700586563572372042915527360174425713866764672774505325676200498776495631302677414043916766202147449791419616396143757208065229867328416659257854595281480693333375207995329835108574258581203565110526303331483882865185250149732510598791962498032360890397737268436780472329208903340025062954205662269624316574117027082795905862018502785778370752835581762372781236198264404648286240421547679148792452061300551100325155548105072638426435111434272210026808742838319755898302254599160759900716375978224171207725949786897716627454422188961087547546841627741469277976237079810060808907260901262790042044822271308971737348166011923951270281203508106758840920567459794467756669375115225238760306285202991331964919627864715985496804648517363878363880498142990602459722787756065656406598546311683426839228548899433675081575652063805488334626219392384281223529074689463558195140655140197444544832313029736953295665523744193540027103983135649378958421518834724444698980783623350823717846677668743770541169226502649762668422883563796138880421097355951690509905495516196800597256875536308065080719551181902293186075348084041818556679736111528507039685437190988601375132488938346127101089844211233256130202757267468783060174061058069330927261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e6b4c67921ecb9380c48a5021f0ab76a27568e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby-girl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e47f66d47000004030047304502206a6d5349a34b148ee3bc981a7872409509305a129c8f763abda5737703dfd42e022100e3735569c12278b9edd6a5e661e4bb0b6041274630c420d0c682c45810286d4e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e47f66d8c0000040300483046022100f0d7c6b917d23958ac85ed2cc0685995a8ee7e04d5dbf867ad203431437f936902210084fc1cef06b9fe18783f78eecf1c1c7f9d8f1f3727ea7db8cf3d517c6d626868
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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