demo.hotspot.bhaifi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b6:13:9b:71:10:98:ab:65:71:4b:3d:f3:58:bc:73:9e:f6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=demo.hotspot.bhaifi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:13:9b:71:10:98:ab:65:71:4b:3d:f3:58:bc:73:9e:f6
Serial Number (int): 323294311006051711329797376088079510773494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:b2:2e:0c:ec:f1:2a:89:0d:cf:5e:c8:f8:71:08:7b:3b:77:65:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:6b:29:29:6f:01:db:cd:c4:8c:b2:53:59:69:68:d4:ef:33:62:46
Fingerprint (sha256): a8:04:b4:00:0b:40:20:98:90:0c:da:ea:9d:38:ac:c9:6e:58:7d:f1:70:fc:6e:6c:5f:74:b8:a4:9d:8c:6c:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate demo.hotspot.bhaifi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo.hotspot.bhaifi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo.hotspot.bhaifi.com
www.demo.hotspot.bhaifi.com

Other certificates including the domain name bhaifi.com

(limited to 100 certificates)
blog.bhaifi.com
beta.hotspot.bhaifi.com
bhaifi.com
hotspot.bhaifi.com
support.detect-measure.com
www.bhaifi.com
servicedesk.intrascloudservices.com
support.detect-measure.com
portal.bhaifi.com
help.bhaifi.com
bhaifi.com
blog.bhaifi.com
support.seen-apps.com
blog.bhaifi.com
test.bhaifi.com
test.bhaifi.com
help.bhaifi.com
portal.bhaifi.com
servicedesk.intrascloudservices.com
blog.bhaifi.com
support.detect-measure.com
suporte.scansec.com.br
support.detect-measure.com
test.api.bhaifi.com
support.detect-measure.com
support.pixuate.com
portal.bhaifi.com
support.elixirct.com
bhaifi.com
support.detect-measure.com
helpdesk.poskassasystemen.nl
support.elixirct.com
bhaifi.com
helpdesk.poskassasystemen.nl
bhaifi.com
support.petroit.com
911.wijungle.com
support1.giottus.com
testcs.infasme.org
timemachine.bhaifi.com
timemachine.bhaifi.com
test.api.bhaifi.com
hotspot.bhaifi.com
support.detect-measure.com
suporte.newdate.com.br
*.bhaifi.com
bhaifi.com
servicedesk.intrascloudservices.com
test.bhaifi.com
support.netixsolutions.com
support.detect-measure.com
portal.bhaifi.com
911.wijungle.com
support.squarecruit.com
support.examonline.in
timemachine.bhaifi.com
helpdesk.poskassasystemen.nl
helpdesk.xprpos.com
test.api.bhaifi.com
portal.bhaifi.com
servicedesk.intrascloudservices.com
bhaifi.com
helpdesk.xprpos.com
helpdesk.poskassasystemen.nl
support.detect-measure.com
portal.bhaifi.com
blog.bhaifi.com
hotspot.bhaifi.com
support.zpesystems.com
beta.hotspot.bhaifi.com
test.api.bhaifi.com
test.bhaifi.com
beta.hotspot.bhaifi.com
demo.hotspot.bhaifi.com
test.bhaifi.com
test.api.bhaifi.com
bhaifi.com
bhaifi.com
servicedesk.intrascloudservices.com
test.bhaifi.com
bhaifi.com
support.netixsolutions.com
support.cloudvariation.com
bhaifi.com
support.breakingcustomtech.com
bhaifi.com
test.bhaifi.com
blog.bhaifi.com
bhaifi.com
test.bhaifi.com
support.detect-measure.com
hotspot.bhaifi.com
hotspot.bhaifi.com
blog.bhaifi.com
hotspot.bhaifi.com
kfg.klein.consulting
helpdesk.poskassasystemen.nl
servicedesk.intrascloudservices.com
test.bhaifi.com
test.api.bhaifi.com

Certificate

The complete raw certificate details for demo.hotspot.bhaifi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lgTEu0VwojiG0bCR+fs
RXTaeGqDyKnsWq4TKWG9LVFK/88t9z394WJFNa8souN2Zu0rngaCUar4J7pD61fZ
OBKu8isyrJ6f3B35OsS3cBoqjpBJaK2uUXL/G5pYszfiN4vFwVSSueV0Jtx5FmE7
iLA6agEdS9128AdYdGtHePBWzunZUmOL7U420JjjkihFw7ITJl5NwesbD9QgYaxT
3Dh8ujVeD+l0pdGq5qaa1BY9yozUQRmrmjLeUt3Cztk2HxNcT14Im5ozJ/ptI1cO
crCGni9VoLTGEtS047VLsdAv6/lc7mtXOUvYCcDG/2seZ4j8FSxB1Lfuq5dhcVLE
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323294311006051711329797376088079510773494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 14:07:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 14:07:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo.hotspot.bhaifi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28068334860834216120356039328335413279413980113902473810385115986984082665863290575012583201926209253278933156812065682857299653589406442980084212648452843309247337300353838594886013463092966613630334934252752012887161713027015812738860882644817755908433864648907670247055880275573228671337711705352095947268395364532760816972039494022910323182535013283253716944935766190916469397974574457807550582009613804212813515579647138607210875857931873119985352289474422757781920897364398655573013526603928496844187592510867175362008879611965217799623353962041297169047842253012886675202601965526495480958363981339725858522359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05b22e0cecf12a890dcf5ec8f871087b3b776508
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.hotspot.bhaifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.hotspot.bhaifi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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