bigumbrellas.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:c2:4f:72:0d:20:38:bb:7b:f8:85:57:b2:9e:c3:ec:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bigumbrellas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:c2:4f:72:0d:20:38:bb:7b:f8:85:57:b2:9e:c3:ec:fa
Serial Number (int): 431396041624697764173327055908698331540730
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:11:56:3e:41:f7:e2:a5:97:6a:a7:87:53:3b:76:0b:58:74:78:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:82:ec:d8:8a:d1:d3:3f:aa:e4:f8:f6:b2:c0:ea:f1:86:6e:d0:82
Fingerprint (sha256): ad:c4:0b:94:4d:c1:61:e2:8d:c8:e9:61:cd:3a:5e:51:91:10:a5:2a:3d:96:45:e9:7f:ce:79:0e:2b:fd:83:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bigumbrellas.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bigumbrellas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bigumbrellas.com

Other certificates including the domain name bigumbrellas.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bigumbrellas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431396041624697764173327055908698331540730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 13:26:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 13:26:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigumbrellas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748197076715367686692548347665518905358828922156416954899159210376224008369712782366541880235372832983454986183772002482377771137687954435917536805037748064064743498677267833505824087410454154736439640742931037390666523755471277783610024333375049104934361390733787254917735347629635302316623177901977307805707810547719617197510089163455424043219677549252463422988074735349810822899673613319690464694362058838169470264189826377754043406202889420485836413268008219624334511265897787605014361933670534411505808304195513506709806999767778921532188492356065603128794747821605484697870465065591241144004949540877745188714013309930037375122274651560384403890390406098952935124621293976966300018088203162625996479983823985759934944127565982880042995435531455476721204569176737600961432502969456504266659181356197649970625500170924560625126042750586341607971871702840802848949427670035470496826294746544098360733394710788236951329475547808028565516852497599149979135154772890981194020312345576301458363201707234304741953519244237492071532915183722536722787882552638833404438239519239765257837310255846091661932994032032621407749433576760875144371478092908757799281006990700666328928286623130592459853854587749744556885330713433872765042961361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca11563e41f7e2a5976aa787533b760b587478b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigumbrellas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4ccefa29000004030047304502205e8467ef55bf615a000453c3ffb7e1b9b2b698b2e0e5c127a64cf85b63e2e892022100a67da2cde45de1435bdb990386b5cc29128f41f59c0e841784a98ec3fc62c8d900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4ccefa690000040300463044022002940ae9806c50062c4419463f5f5c0072911771e0a7f858708e3101254962fa022044a7d4ace96e7bb03cf0792b603fd78e675f24f2e84e899caf0634fcb20499fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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