berkowitz.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:32:fd:85:2d:8e:31:d0:33:df:1c:8e:d3:1e:2a:a6:c6:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=berkowitz.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:fd:85:2d:8e:31:d0:33:df:1c:8e:d3:1e:2a:a6:c6:6e
Serial Number (int): 278687962323717679669318489757589921252974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:44:51:c4:db:01:78:f8:5d:ab:7c:c3:d4:3c:38:8f:83:9c:c1:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:ee:3d:20:dc:80:38:e2:9a:a7:a6:99:45:4c:69:3d:4b:02:99:1a
Fingerprint (sha256): c5:97:9c:c6:e1:e7:d9:cb:95:c0:e6:01:c9:1b:2b:07:18:23:01:90:91:7f:6b:c7:5f:df:f7:ba:10:24:f8:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate berkowitz.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berkowitz.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berkowitz.com.au

Other certificates including the domain name berkowitz.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for berkowitz.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKysGS4EqKdcY4PNLdVL
amlh7pstlf/r7qzcieCG5Zo0xa1DLTwGKA56teKe+l+xZPBZrz62JfBtsASP4cP8
+FbVuP4Mko4Z3eTnvA9Ei5Aup+qK+7VDqVp02ChBVUyVJLH2fbzYstOhuqmKcHak
OzedrdUWC/iCeJt46u0n0KBxlNjoEMfeNZUKfrsl4Wcoi1SXDQ2d9QWbZqPjk0kw
BqfeZ51EfJqdPiBDzpK3sgM+jt/NDyO1EbvF58EtP++92suausy3wz0rF8Jtz93r
j7GA+dIXh/qyisZzXtIv0xSZIRE1RT5TnrJ7hL2rv7qBBPJ8tba/cxZ/4yFo0tSh
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278687962323717679669318489757589921252974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 02:20:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 02:20:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berkowitz.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19273370219363026490855961135652776332400493511245658278260489946629881690181207445790704916090306957911727858285144647905214616857204813915523492193993561039978543076394770439057789268879052807323327389148306654751376981067344930986844401595794458748780591720031587720910577243297883055559240782976964400823472874685093459922048363758550851752912557209244394895236283292956719926296313364607691335724232667786602679205373551375170324896435080769732653754336560846826267976785243152078766129886138925571007327129135847243294625160920781068294650191730867171333036067809110193751627424254808070172687121168892645646759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf4451c4db0178f85dab7cc3d43c388f839cc169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkowitz.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001899a82daf30000040300473045022100d03096dc0b3b5907700bea95e5bdea982b3bd71d66b15f014e9b3c840348f4d50220736af5fc782e84db69ad42883fa591b4865fe0c9d1eeb85ea4de1ebb20a5a755007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001899a82db1e0000040300473045022100ac255113aca384fd407475d533fff7e52c112355afd7cc7c14e03afeaabc7c9d02207f065a63e6f24dca1da433b1ca12567585df9d5a439c7d87aa2b27425edca890
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b3a17dc3328b13a7bacc9ce0f349b930f3ec9014783d237f09779589bdf4cb6adc7b156acbdb4bcbeb54abc42473da636d2ed608af40e1ce85aa60ffc91fbfc9af4fb98f3c448890a299fbf3c4d14eb596c09b9acf1b4eda727f418baa272a3c6f2189bf169e20f50ccf9d228c85a4d03e6fc63db7b2c8de15f6c09541438fb9b469bbf7a169ef537364ec9599b635c1e28a80c412d87ad93bf2898a2dbe6e84a8e82a19604a3cdb3d45d8a0cdddb972ad352d6bfb4e8b827f8f7531d80286348a05f60a60f22b9f7fe637333b3c7206c6ca9a883ac3cda5b692258121ceba10921399ce3b8cf34260cd9f1b949e70be21413f82216355fd90396f30531b622c