www.bregal.com
Issued by R3
About this certificate
This digital certificate with serial number 04:f8:94:fe:6f:f9:71:1e:c6:ad:f8:a4:1e:d0:e5:3e:24:91 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bregal.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f8:94:fe:6f:f9:71:1e:c6:ad:f8:a4:1e:d0:e5:3e:24:91Serial Number (int): 433037217581322248404329315206818395202705
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5f:f3:60:95:95:90:15:4e:aa:28:c3:26:ec:1b:2a:76:8b:2e:c5:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 99:46:cb:7a:4a:6f:20:0f:bc:00:23:7b:b2:24:85:38:fc:2f:e7:3b
Fingerprint (sha256): cc:ae:c6:76:8b:6c:5e:f9:97:bb:53:c1:a6:37:44:2d:21:a4:8c:81:4a:86:57:85:36:04:b2:2f:a0:87:27:95
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.bregal.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bregal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bregal.com
www.bregal.com
www.bregal.com
Other certificates including the domain name bregal.com
(limited to 100 certificates)
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
*.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
www.bregal.com
Certificate
The complete raw certificate details for www.bregal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISBPiU/m/5cR7GrfikHtDlPiSRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMTkxODIwMzFaFw0yMzA2MTcxODIwMzBaMBkxFzAVBgNVBAMT Dnd3dy5icmVnYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA gdQ4gS4nQ7yAil0GZd40FB2bPpEr+jYMghIa/PY2ARLlt20lvYsm4NVNGXGWVs9j J+2lI1kiFBgCECRdi59gjgUcPuukonQPLEy4eJQzUwsC4nTaYzxQOIXcmfYH+Bax H1Y0qLDeKv55TIUh9q2j7zjmUCDOXvVIaCJ23yFr0ZdJI+g6gaTsdoh70mC3DyA0 ASi4Yj4unB/PKMPVWp9hZ/TKLQIODbrsdOmANSFjQh3HLNOAQ12Q6YaZSNr8WIVw yusQUflyZeImhqV3mjksdfLtmw14vYENMt0jF1yT6UAIXfu68T4PPaQuWA+ZdmOA enJbRNB9oDs2d1lQxVPtEQIDAQABo4ICVjCCAlIwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRf82CVlZAVTqoowybsGyp2iy7FIzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAlBgNVHREEHjAcggpicmVnYWwuY29tgg53d3cuYnJlZ2FsLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhvtQ85QAAAQDAEgw RgIhAO3Onhp+M/EXTjwlTyLZBzI1NNPjb5lE8SSM2fb7S5vmAiEArf434aj4QO1r CLKQ09ZWVOU3BjekLTmkyaGpSeabpHYAdgCt9776fP8QyIudPZwePhhqtGcpXc+x DCTKhYY069yCigAAAYb7UPOpAAAEAwBHMEUCIQCn18YFTw8DCL/aJ9eNmXw1LgP/ iwlqu0+JDu9TNI/pmwIgMHdwsPKpBktSH27dEIoFhrNzOsC1EphSrOgXxQAzcPUw DQYJKoZIhvcNAQELBQADggEBAAswXhfFuq9xV7zLPR+1lDQ88dKyFWKmKqyi+QyG 0ucoF5PsmJpYWu+xpOUVR1u/XDtgKWMiJQvt1Lp9BsI+AtN0glljlXa0Cl4FsLyj kSioI0NnneLQh/aS0e+4hh55omXOponmBkS6/CMVcKdW4FQVwe7wNBpDh+3jnQo2 HUrykY1LO6uLZD+k5Y6rY6ECzbwQI42iWQqxAHJ3quxhU23JD4paB5i79iSJC/hp iqTBRlRKRlGAYiR+6innSbB3Zk3DlNqLssxhd8XXILLf90lkd9RcWS6Dr5iqBuiJ irp96iDTTViaWWZEUUH8XzDlkHc21GzStdIB5yNqKiMPHW4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdQ4gS4nQ7yAil0GZd40 FB2bPpEr+jYMghIa/PY2ARLlt20lvYsm4NVNGXGWVs9jJ+2lI1kiFBgCECRdi59g jgUcPuukonQPLEy4eJQzUwsC4nTaYzxQOIXcmfYH+BaxH1Y0qLDeKv55TIUh9q2j 7zjmUCDOXvVIaCJ23yFr0ZdJI+g6gaTsdoh70mC3DyA0ASi4Yj4unB/PKMPVWp9h Z/TKLQIODbrsdOmANSFjQh3HLNOAQ12Q6YaZSNr8WIVwyusQUflyZeImhqV3mjks dfLtmw14vYENMt0jF1yT6UAIXfu68T4PPaQuWA+ZdmOAenJbRNB9oDs2d1lQxVPt EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 433037217581322248404329315206818395202705 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 18:20:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 18:20:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bregal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16389391278569705971042014519708783084078848479055929259832553326931970028322745437269819330245822152498239359305744839098520831174900844706312540574879733239927696593403404639186704321063966354574793206702425294275017733641357982507877550677193783934738143603730905395103774663112003154540974329031464597804803692414983902197708372931925122116922991699856713484097942825162867594677920708841984363526686231673083804344801295062387024337517702872334510289550179206811955594438314284402125809391172268805859420170839689251883410713067784332240775600696595161652962108134746179546911356919664304135765050074166742740241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ff360959590154eaa28c326ec1b2a768b2ec523 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bregal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bregal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186fb50f3940000040300483046022100edce9e1a7e33f1174e3c254f22d907323534d3e36f9944f1248cd9f6fb4b9be6022100adfe37e1a8f840ed6b08b290d3d65654e5370637a42d39a4c9a1a949e69ba476007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186fb50f3a90000040300473045022100a7d7c6054f0f0308bfda27d78d997c352e03ff8b096abb4f890eef53348fe99b0220307770b0f2a9064b521f6edd108a0586b3733ac0b5129852ace817c5003370f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000b305e17c5baaf7157bccb3d1fb594343cf1d2b21562a62aaca2f90c86d2e7281793ec989a585aefb1a4e515475bbf5c3b60296322250bedd4ba7d06c23e02d3748259639576b40a5e05b0bca39128a82343679de2d087f692d1efb8861e79a265cea689e60644bafc231570a756e05415c1eef0341a4387ede39d0a361d4af2918d4b3bab8b643fa4e58eab63a102cdbc10238da2590ab1007277aaec61536dc90f8a5a0798bbf624890bf8698aa4c146544a46518062247eea29e749b077664dc394da8bb2cc6177c5d720b2dff7496477d45c592e83af98aa06e8898aba7dea20d34d589a5966445141fc5f30e5907736d46cd2b5d201e7236a2a230f1d6e