balukabela.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:22:10:f4:d0:bf:65:f6:5b:b7:c4:e8:64:4d:c9:4e:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=balukabela.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:22:10:f4:d0:bf:65:f6:5b:b7:c4:e8:64:4d:c9:4e:f7
Serial Number (int): 312424494627474569152050949659575718596343
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:a1:d8:59:4e:a7:dd:15:d7:a7:b2:ed:c4:4b:20:7e:6e:e4:59:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:e9:b3:09:74:57:ab:51:f2:fd:32:e7:31:43:79:9a:68:33:35:fb
Fingerprint (sha256): a5:1d:e0:88:1e:15:c6:7b:44:61:39:a5:e3:5d:c6:82:45:b7:5b:f4:f9:83:13:22:20:76:fb:ed:02:7b:cd:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate balukabela.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for balukabela.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

balukabela.com

Other certificates including the domain name balukabela.com

(limited to 100 certificates)
www.hospiceoutreach.org
balukabela.com
www.balukabela.com

Certificate

The complete raw certificate details for balukabela.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312424494627474569152050949659575718596343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 09:10:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 09:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'balukabela.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773107207266978176663235067801448128257675579992270690890984500502378669408337935807024555517632099484551452351075641737628685427663654967312121252662007663606572875369928886538040569615196163135939989377350840461050654465601413628072385896044684171115370888656218510447687219608911424278310354029717249569026916630443456514104480842822884921135171088074574351171872158566329901926229475012661062355893054201317218410544434392351657428190892989776216471906813403304548019112749965741911937694086871711644089675420456719787816357859257260508683155645319229956447358952764061142229101404078655145226039230959833567580051915942549622697273443160969296759145596826768480890641625515135666467812765858081748833984625451512399442814977624939840247838158290425456646532066558831383554837071919944976716759880442287760415972968499244822204083285323479674297741288359269297444591356886268439778705774484110111464602255107326226634776721326075543218099961178340194911872902321590680333149290511686347599543714337111237410318557834610107414521057457771742425341416430440266651788605417153862779066818116385127658187594950632911586721007108800269469557101974530744583898792315894222480802992617558144648603462203157359278390932537322029859319403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55a1d8594ea7dd15d7a7b2edc44b207e6ee4590e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balukabela.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f27efc053000004030047304502202aaa8cb4ed3f235e921ffe5dd189edc15bd522d10317e9adbb106191e5209c66022100e9bb5fa32bc46079191203d4421a7466a9ca1e518c0ccbdca2d4432e6a083822007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f27efc044000004030046304402207f9893d2a4329eec7e47e83a948ce63e06fa665bfd302e3bab800179c6466d47022038420a8b5bba8e1bf27bc118cc2710ccc7583083a0dc9e4432ec20ac871bbd0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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