www.brueckner-india.com

Issued by R3

About this certificate

This digital certificate with serial number 04:81:bd:67:54:27:02:9f:c1:cf:59:ae:be:c7:d9:14:95:b5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.brueckner-india.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:bd:67:54:27:02:9f:c1:cf:59:ae:be:c7:d9:14:95:b5
Serial Number (int): 392597329664434943709758736267617468978613
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:80:f5:51:99:7b:45:6f:0b:55:8c:2d:38:dd:34:f1:8e:ce:4a:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:3b:94:10:b9:d5:c1:a4:75:e0:5e:3a:c0:f6:12:4e:36:69:d2:e5
Fingerprint (sha256): ac:47:7f:78:93:0a:53:de:6d:77:b5:e0:00:f0:88:f3:0f:7a:02:f1:26:25:4f:79:a2:d6:a6:16:6e:60:8e:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.brueckner-india.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brueckner-india.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brueckner-india.com
www.brueckner-india.com

Other certificates including the domain name brueckner-india.com

(limited to 100 certificates)
support.infinityfincorp.com
support.infinityfincorp.com
servicedesk.brueckner-india.com
servicedesk.cosmos.in
www.brueckner-india.com
servicedesk.brueckner-india.com
hr.itsm-presales.in
helpdesk.arbp.online
icm.tvsscs.com
servicedesk.sudlife.in
helpdesk.arbp.online
enterprise.duggads.co.in
enterprise.duggads.co.in
helpdesk.quickparts.com
helpdesk.quickparts.com
servicedesk.maveric-systems.com
crmdmshelpdesk.royalenfield.com
helpdesk.quickparts.com
iportal.crsinxt.com
vpn.brueckner-india.com
support.infinityfincorp.com
hrsupport.ziomart.great-site.net
servicedesk.cosmos.in
support.infinityfincorp.com
itdesk.shreecement.com
itdesk.rchilli.com
servicedesk.maveric-systems.com
helpdesk.quickparts.com
hr.itsm-presales.in
helpdesk.arbp.online
www.brueckner-india.com
servicedesk.brueckner-india.com
itdesk.shreecement.com
helpdesk.quickparts.com
hr.itsm-presales.in
enterprise.duggads.co.in
it-help.mountmerugroup.com
helpdesk.quickparts.com
servicedesk.maveric-systems.com
support.infinityfincorp.com
gbshelpdesk.indorama.net
hrsupport.ziomart.great-site.net
crmdmshelpdesk.royalenfield.com
itdesk.rchilli.com
iportal.crsinxt.com
support.sequentialtech.com
iportal.crsinxt.com
itdesk.rchilli.com
servicedesk.brueckner-india.com
support.infinityfincorp.com
servicedesk.maveric-systems.com
www.brueckner-india.com
servicedesk.cosmos.in
iportal.crsinxt.com
servicedesk.cosmos.in
gbshelpdesk.indorama.net
support.infinityfincorp.com
servicedesk.sudlife.in
crmdmshelpdesk.royalenfield.com
itdesk.shreecement.com
support.infinityfincorp.com
support.infinityfincorp.com
helpdesk.quickparts.com
helpdesk.quickparts.com
hrsupport.ziomart.great-site.net
crmdmshelpdesk.royalenfield.com
itdesk.rchilli.com
gbshelpdesk.indorama.net
supportcenter.mcarbon.com
gbshelpdesk.indorama.net
teams.brueckner-india.com
hr.itsm-presales.in
itdesk.shreecement.com
servicedesk.sudlife.in
support.infinityfincorp.com
servicedesk.sudlife.in
hrsupport.ziomart.great-site.net
helpdesk.arbp.online

Certificate

The complete raw certificate details for www.brueckner-india.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392597329664434943709758736267617468978613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 06:23:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 06:23:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brueckner-india.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788624707483929767378607647118428761541975483269625912411518827644363333300159735891502191176246739233843551481037238588415370029361075203494148621668622551174297158699895915267748019438509106301994010224468233152510293736143448768968128618217498109506833736084668862264298976346393253634197932669985072992620787859211166345388778241039554425864345765494646113434046757207080916766743747522928284419009449229062831072663505815491856240493766997448002578797908784820090529328495547841065718791881335711028388381712583412974441020862304254853344506802794166588783430286060065882242020810790129947428106326716717961176956662481945838953725846016591406894153392419248355878755669287137484370386725990697451133590182683378845542567192973192053922751882062216115525424591425525339820987072676459108101998358066388527240916527854156281312583492543285918249867197581935848269432395974600624129958716678013172787182821496745906587071418521397982710456089697864325226887025011522040799165364318062888565901080434400496450647539009036569254291051570567579487790326406163725044366891671644987283571966846249402368370528750463591117930770805624411434676668913797089632076009537973664337072068279386234868146531150769167598348691501633943017442237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9880f551997b456f0b558c2d38dd34f18ece4a1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brueckner-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brueckner-india.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc3e84324000004030047304502205ea94186d53d1e3dd85cc0b674c1eddcdecb96e0e9cff3d8009d31e742b9a059022100ba91da5618d2e395864c716e8834353cffd23e7a441ed80a78e98f60576352e700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cc3e843d50000040300473045022100e76ca0bb4125ec0a0fa5de86498a5ee98ffc34825f3d6bbd988e4adbb6de7479022079f78380a0a45859e052dede4d052408f0027606e5f6d5c69fec7d85358e7c56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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