bargteheide.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:5b:9a:70:0d:16:ab:7d:4b:56:c8:4a:39:24:02:10:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bargteheide.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:5b:9a:70:0d:16:ab:7d:4b:56:c8:4a:39:24:02:10:6c
Serial Number (int): 282215843811457485628915906757690843598956
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:c9:81:82:dc:5c:fb:ca:8e:51:b3:1d:9b:9a:62:df:45:74:00:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:3f:1d:8f:8f:64:c3:3d:52:2a:e9:91:3a:20:d0:48:be:9c:9e:a5
Fingerprint (sha256): c1:f2:c9:64:f2:63:f4:11:1c:74:0a:31:d3:d2:8e:5e:b7:2b:7c:e1:b0:5b:64:d8:7e:87:14:64:fa:c6:40:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bargteheide.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bargteheide.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bargteheide.com

Other certificates including the domain name bargteheide.com

(limited to 100 certificates)
bargteheide.com
bargteheide.com
www.bargteheide.com
www.bargteheide.com
bargteheide.com
www.bargteheide.com
www.bargteheide.com
bargteheide.com

Certificate

The complete raw certificate details for bargteheide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282215843811457485628915906757690843598956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 02:28:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 02:28:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bargteheide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778701997138327830436755074368207771589615654755328253548806317938418944608766627166033494519408676809993947492553526813105296569732765736970865323728138317832704495330773124765689942575229443027212663290947105292681189979323371682726106471504890441715075110563374162135662110913355139719263265460262002834985818062932331601211745702265890717006157092302774324016145107908447167681647086942552291657421436751586924956390920687483187225840792600553438120179436556990624044615380677131847211528795877306721646797751788841345911510347832416025423483018373962295936286095428103840943527575418097530062284727681216084712283819427684650345563922198653394130172128995060234392422570933573265366863635094409657818365572124265857367568253798151222072950525361650456595957112174760848444726563747597277039439927479059932597791444805181552997617438527847770221263022587228530860453831215177706281629282682505321313552249312715624186347244309917464915656467310370715907096068613087524267768222564061702060893002135190930843758919106253616955701552634858796017591903644102353997490203739192842176845014638736613426685845687492013528177894092939999990081503887604364498544621376598037303588527967447579761237716349350103861063817293977992831783661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58c98182dc5cfbca8e51b31d9b9a62df457400ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bargteheide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d0eeaccc700000403004630440220074b935e20518b13da9d2614fbaed83af10d4ea7e893f2ab2dc9961d1d7068a702207fbedfdb281229397b4915837e36805713bd1c8721e647662a39a5611739b84e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d0eeaccb40000040300473045022100880c21a315c0ad09b33a1e070504aa9e66ddc4270bce7c80b80566ee145ef094022021b64756dd81ba168a519d968389182956567246dbff550708632b8c70934acc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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