www.bedfordheightsrealestate.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:57:d0:ba:fa:45:cc:05:30:e4:00:79:dd:c9:69:5a:79:8d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bedfordheightsrealestate.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:57:d0:ba:fa:45:cc:05:30:e4:00:79:dd:c9:69:5a:79:8dSerial Number (int): 291218873983873621584602168771828506065293
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 87:38:10:39:8b:3a:64:25:c1:9f:e0:28:fe:af:5a:30:08:af:85:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:16:ac:e6:ec:42:43:50:1c:64:a3:7a:04:4d:55:4a:ef:06:c4:67
Fingerprint (sha256): c3:cf:52:0a:96:84:0b:36:84:b7:29:38:dc:35:ea:8d:41:60:31:38:90:43:bc:89:bd:e0:e7:65:ae:ae:51:5e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bedfordheightsrealestate.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bedfordheightsrealestate.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bedfordheightsrealestate.com
Other certificates including the domain name bedfordheightsrealestate.com
(limited to 100 certificates)
bedfordheightsrealestate.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
www.bedfordheightsrealestate.com
bedfordheightsrealestate.com
www.bedfordheightsrealestate.com
www.designblogs.com
www.bedfordheightsrealestate.com
basepizzetta.com
www.bedfordheightsrealestate.com
40529.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
bedfordheightsrealestate.com
www.bedfordheightsrealestate.com
bedfordheightsrealestate.com
www.bedfordheightsrealestate.com
www.designblogs.com
www.bedfordheightsrealestate.com
basepizzetta.com
www.bedfordheightsrealestate.com
40529.com
Certificate
The complete raw certificate details for www.bedfordheightsrealestate.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgISA1fQuvpFzAUw5AB53clpWnmNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTgwMjM5MTRaFw0x OTA4MTYwMjM5MTRaMCsxKTAnBgNVBAMTIHd3dy5iZWRmb3JkaGVpZ2h0c3JlYWxl c3RhdGUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy3OqAELX tpg8dO4o+pWJw+oIahII4q6dldtyLtKEL58XgE5zhzpg+GCtBKLxzhWnROa0Io1B M2USTzYRgbZzZ5Wdh/PK5ZH2S77DWMRfwzBfxQODK8rPkbQvWMKGjpcG8oQJQR0m crv+sP7onh8jKqn2F5DyammtQnZ4mHKUvTJtniZWCvjGbzbFwqmx0K26O9qy4ZRJ H3ZwLhsWzSOJbTZ6grnihz9x1ra0WtCHGUsLiQNzDPYn16DUB9L/HDAkEfnZAcjj tjExeAw7djQfi8lzsBcWpSKtvQHKED4d01o8s2nbRWWkkX4E9FdWBxbNLtx33hr+ 5xH+kzcDRE+njz8z06f1xVrdjW6McDckNP4LK9nSftyyIJiQflJXp2H/e6ccXSdu slkfeBC4WPbaw1CqEwb+DpYyrSV6qiuz+y+YjYEKm5zw9TdQB6w4PLqHTma50n5t hwAJ8iXFqThzpt4sA/OQ4az6rbjPxfKrDVD47e429f8L/4jFaYPkcySChfPTzL27 mbrXu29CtJ8/DhvjSPBlVI2Wczul9lZTZPS+kKKpk+VL+hcA/3tkFh5VN9s2fdhU 4bA+an5jQ3Qm8owGjqLu1r2ahS11cum6aylqNREef2luh0hM7hrbOOfQMPcvEFtP +18GmgRo6Zl9o5glMNL6KSQr5Mdiw/UUzJkCAwEAAaOCAnUwggJxMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUhzgQOYs6ZCXBn+Ao/q9aMAivhUgwHwYDVR0jBBgwFoAU qEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzAB hiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAC hiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzArBgNVHREEJDAi giB3d3cuYmVkZm9yZGhlaWdodHNyZWFsZXN0YXRlLmNvbTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJpS64m 6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaskFsV4AAAQDAEcwRQIgIKuN D+5MpRJ5jRguofMuIUmAfgYhvzTrK+heg2M87AECIQDqu9bC2CRes5ETLB9jwNrP PvEoXqEQAZwYC9St5tIS5wB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABaskFrx4AAAQDAEcwRQIgFqRqZfTRHvxRbZYs2l4zMIrRwRJZr0IbUCo9 1Kzbk6wCIQCuz9h+CyS7t7uqF/MnCnYcFSJjAxF3B3gsPE7yZIdAGTANBgkqhkiG 9w0BAQsFAAOCAQEALDd3jyxa06Tnoe4XrDnBJwiVtZp4vZfee8yD1Vxq9LgNUvX4 5jsy4Xo/2X7V3utccpzaUA21BsLkLYAAHYmZ8N5vG0n9Fc2QoZMH7Qvb0if7T9kD VDKpiFss2xmFLFbr3CSmE5AJAynKmBREqrqpHq0qifq84ouOAEC9yatTBkucvdeX MMZr5DizMpE+yE93NL5jpbehJRiy1gZeOh9lGop1okziiYEw+RnIF9Gygaxwbbcy 0noFtoo/txADM4yiKkrc1HZXeyM53tBi6ooLeSqJp9lworLvY7gFby6e3VcDqKe9 JFs/WZtWvokwoe0G3uRNfEaw6DAamfuDKWTxKA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy3OqAELXtpg8dO4o+pWJ w+oIahII4q6dldtyLtKEL58XgE5zhzpg+GCtBKLxzhWnROa0Io1BM2USTzYRgbZz Z5Wdh/PK5ZH2S77DWMRfwzBfxQODK8rPkbQvWMKGjpcG8oQJQR0mcrv+sP7onh8j Kqn2F5DyammtQnZ4mHKUvTJtniZWCvjGbzbFwqmx0K26O9qy4ZRJH3ZwLhsWzSOJ bTZ6grnihz9x1ra0WtCHGUsLiQNzDPYn16DUB9L/HDAkEfnZAcjjtjExeAw7djQf i8lzsBcWpSKtvQHKED4d01o8s2nbRWWkkX4E9FdWBxbNLtx33hr+5xH+kzcDRE+n jz8z06f1xVrdjW6McDckNP4LK9nSftyyIJiQflJXp2H/e6ccXSduslkfeBC4WPba w1CqEwb+DpYyrSV6qiuz+y+YjYEKm5zw9TdQB6w4PLqHTma50n5thwAJ8iXFqThz pt4sA/OQ4az6rbjPxfKrDVD47e429f8L/4jFaYPkcySChfPTzL27mbrXu29CtJ8/ DhvjSPBlVI2Wczul9lZTZPS+kKKpk+VL+hcA/3tkFh5VN9s2fdhU4bA+an5jQ3Qm 8owGjqLu1r2ahS11cum6aylqNREef2luh0hM7hrbOOfQMPcvEFtP+18GmgRo6Zl9 o5glMNL6KSQr5Mdiw/UUzJkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291218873983873621584602168771828506065293 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 02:39:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 02:39:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bedfordheightsrealestate.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830010981053066524780050990434260157028200001046564122741591711377271172756210035769645673314579471968381204919447893285463174411193785681360695846124472089888585325194567114686563859834849059312370010750603358628925532041023350083283887995293021904092936082523101736867820603838248145879744600127492733469026595422849816836433303091057172321354578172706354168950793326852826215122550244622641685085770899422873838235643489078632721729714446045146885554563598429898471066724192376615305184445507894062080027618797391159866212255505868927643983635966472523045840759839539434355944908194121931856338413967782233859707952190056866093670459852167461231816139869919964417744643358220879867064483290826027680096056150599535041063960390335620529224379028981869711744351895976150260289291560470648075509886447245336215517584124385653787561865927406995287515460149670736362760740804106154053708437963890096928053518830748674772927258400717775535246418454235296873689081797697551188449531047815454698464381264286023868907258275856572286655539868869226231133231684305607211097412322670609752826491290687892963783493665902551887554052847310391552775851786516143792054969495520778406176807709914867691442646572018222598161529037893831055797177497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 873810398b3a6425c19fe028feaf5a3008af8548 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedfordheightsrealestate.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac905b15e0000040300473045022020ab8d0fee4ca512798d182ea1f32e2149807e0621bf34eb2be85e83633cec01022100eabbd6c2d8245eb391132c1f63c0dacf3ef1285ea110019c180bd4ade6d212e7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac905af1e0000040300473045022016a46a65f4d11efc516d962cda5e33308ad1c11259af421b502a3dd4acdb93ac022100aecfd87e0b24bbb7bbaa17f3270a761c15226303117707782c3c4ef264874019 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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