babaosoftware.dev
Issued by R3
About this certificate
This digital certificate with serial number 03:35:d9:06:ae:9a:a5:2d:00:9b:1f:ac:46:9b:87:1f:d5:e3 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=babaosoftware.dev
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:d9:06:ae:9a:a5:2d:00:9b:1f:ac:46:9b:87:1f:d5:e3Serial Number (int): 279660300412348483950547743975590405854691
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1d:0c:b9:b9:64:d0:79:47:f2:f6:6f:04:cc:b2:1c:b0:f3:7d:94:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8a:4c:fd:e1:9e:c6:a7:5d:a8:09:83:ac:7e:2c:b3:b4:8d:50:97:fd
Fingerprint (sha256): d0:0d:73:f8:ab:8b:a2:3f:ae:22:d7:b8:0c:8c:bd:ab:db:93:b9:f1:ec:cf:a7:a8:d5:dc:01:00:04:9f:2e:76
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate babaosoftware.dev
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for babaosoftware.dev
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
babaosoftware.com
babaosoftware.dev
bikinginstyle.com
mail.babaosoftware.dev
www.babaosoftware.com
www.babaosoftware.dev
www.bikinginstyle.com
babaosoftware.dev
bikinginstyle.com
mail.babaosoftware.dev
www.babaosoftware.com
www.babaosoftware.dev
www.bikinginstyle.com
Other certificates including the domain name babaosoftware.dev
(limited to 100 certificates)
Certificate
The complete raw certificate details for babaosoftware.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAzXZBq6apS0Amx+sRpuHH9XjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDEwNTAxMjFaFw0yMzEyMzAwNTAxMjBaMBwxGjAYBgNVBAMT EWJhYmFvc29mdHdhcmUuZGV2MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAywdWAgBNGB+o8yVltAIfNINXsJzTipvhaEMupLFwXhJ/p1BTEGxDoHyZa50P pSS6vVPqM/dW8tpZYy3DsQ5+ZangDaSuhWbN25cdEkeuXx8nLBuEpn1L1acwfphq IdraEkyJbXZRPnPi8fzwTF5z90mWYvWZtay3wcx0QqKo6TUgngHGeRBxUi6pOJwP inyKJyRj9JgIHPzDUZpHXZ/Dq5jU0aLoTOQhCbYEzmzjhamzkh1dPeeKi4LAlYx4 /dPxc0R9yZFVuXsjKmNb3ou0UCNY3guv97ecKSyTa3QfuwT/CHLm6lkk8HItzRqt a5efBlW3OirQXoDeZK8iCOWyGR9o279svvEwQm9M1xxegs86oyEWkGHzTrqhwAm5 hgbT4al38aqxrc+4YdLWTx7Ixi/SppXbDIYR1ltnqCzUkdHoz7DZsucG8bgcLorq REuCjmhw80KWzDoucyxXXUQyDkT//bXozAdY0ANOJ8fc0MeR7PiW7i4wS4n3y0r+ V4sKSHDtNyYpPhFIS7ajl1ilZVQxKHeIoX7vfCQLG3ZwLnxLZaDAI66yCZ0TkNfE Hc27XHZB4qlIpEE1ydy/ypA+U8pbmMGu4e3ErS1r5lL0twNYf2foKvT4aS03yV0f DFQqhTjaH76OpG52pJ9w9gABMoOTNe6SqGeaBN+Lf/dSe9cCAwEAAaOCApkwggKV MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUHQy5uWTQeUfy9m8EzLIcsPN9lFcwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgaEGA1UdEQSBmTCBloIRYmFiYW9zb2Z0d2Fy ZS5jb22CEWJhYmFvc29mdHdhcmUuZGV2ghFiaWtpbmdpbnN0eWxlLmNvbYIWbWFp bC5iYWJhb3NvZnR3YXJlLmRldoIVd3d3LmJhYmFvc29mdHdhcmUuY29tghV3d3cu YmFiYW9zb2Z0d2FyZS5kZXaCFXd3dy5iaWtpbmdpbnN0eWxlLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiunTue4AAAQDAEcwRQIhALOVDERO /WDvBE71ZwRr74rmyI5ApAQNrJNMeDLR86uKAiAIIhH5mCGJI+1MaNRFNnr8QkYO YC3hDEvBot2WJO/EQwB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1u AAABiunTuc4AAAQDAEcwRQIhAL3Lt2eZ+kwxPzwtV1BN5cUz65wqdOEGJWh43AAk G1O7AiB8nHjUHjDvbHEH5KuRRiCuC9r4/fsfQvwPp/ZUYKo21TANBgkqhkiG9w0B AQsFAAOCAQEAeBNO16mk81UjcYYofighSlnESLkpU7myZhbQ5wzy5B/oR6PqteH3 BC7/AsG0zrwfnWwXPqYkz16Oy78sH/E4PnK/6frYg+Imr2bYpx3o3NP8ZAMRWCdy 46uoXxy8LU0/JN58GJHljRnfKq9Wd4oVFPZ9v0ZOz1Qz+RfUuhx59s84f0D3M7xq qZMUF2BfUVsRwcySG398adZqPUVyAywyvIvH1jO2XHMfpivG5j8faYl9OW16bIxY htZyfi2QBK15KcNwT3SOGZodjqeo4lk6hplZ3MRBl+m4U5rJwszbxMGoQon1t8FC eVt2df17803fmsFWPXwphA3XkQ8M31qQSQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAywdWAgBNGB+o8yVltAIf NINXsJzTipvhaEMupLFwXhJ/p1BTEGxDoHyZa50PpSS6vVPqM/dW8tpZYy3DsQ5+ ZangDaSuhWbN25cdEkeuXx8nLBuEpn1L1acwfphqIdraEkyJbXZRPnPi8fzwTF5z 90mWYvWZtay3wcx0QqKo6TUgngHGeRBxUi6pOJwPinyKJyRj9JgIHPzDUZpHXZ/D q5jU0aLoTOQhCbYEzmzjhamzkh1dPeeKi4LAlYx4/dPxc0R9yZFVuXsjKmNb3ou0 UCNY3guv97ecKSyTa3QfuwT/CHLm6lkk8HItzRqta5efBlW3OirQXoDeZK8iCOWy GR9o279svvEwQm9M1xxegs86oyEWkGHzTrqhwAm5hgbT4al38aqxrc+4YdLWTx7I xi/SppXbDIYR1ltnqCzUkdHoz7DZsucG8bgcLorqREuCjmhw80KWzDoucyxXXUQy DkT//bXozAdY0ANOJ8fc0MeR7PiW7i4wS4n3y0r+V4sKSHDtNyYpPhFIS7ajl1il ZVQxKHeIoX7vfCQLG3ZwLnxLZaDAI66yCZ0TkNfEHc27XHZB4qlIpEE1ydy/ypA+ U8pbmMGu4e3ErS1r5lL0twNYf2foKvT4aS03yV0fDFQqhTjaH76OpG52pJ9w9gAB MoOTNe6SqGeaBN+Lf/dSe9cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279660300412348483950547743975590405854691 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 05:01:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 05:01:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'babaosoftware.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828284652599020648552290104945953069130538005247105938228578165525129112628886247270782408070196840480010350963363778833222417997400679368829672231230575793830130142296491995238257037380675279996890097348990349977130884939395169330034552634301122585442814384648132440596210918148802283552845310502820549467275921432325911982965856182347498038996072588008067496125055537715619969061310050120868732034827491733179750647830105095833399749830546873416135522489735008044014879778584861506604752430701671939518919376317714180590687290716884578587533914981252727558431887941588070723234405202487152871489667483119873687845123167956775379279836556457385791904840189822058533832448890962685201350911597157899526403310440133699620682525090415378893133767029242008998427415669539572980354917640772030143507624111734507802844614503986535709230768175501089095372794489080757633331669084791757351359974909139577632507821893638573073264424370620194637188062898535276955524337993964024652932274053134861422568406875272379482632335659625022087245537251481179946045515827073627274358510465979823593738985604349505934172667163281712273904117884234192394056803981992207150160339753531919139418866990363277289487806397766992152039934329402702603320720343 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d0cb9b964d07947f2f66f04ccb21cb0f37d9457 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babaosoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babaosoftware.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikinginstyle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.babaosoftware.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babaosoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babaosoftware.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikinginstyle.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae9d3b9ee0000040300473045022100b3950c444efd60ef044ef567046bef8ae6c88e40a4040dac934c7832d1f3ab8a0220082211f998218923ed4c68d445367afc42460e602de10c4bc1a2dd9624efc443007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae9d3b9ce0000040300473045022100bdcbb76799fa4c313f3c2d57504de5c533eb9c2a74e106256878dc00241b53bb02207c9c78d41e30ef6c7107e4ab914620ae0bdaf8fdfb1f42fc0fa7f65460aa36d5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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