www.bagaria.com

Issued by R3

About this certificate

This digital certificate with serial number 04:db:2a:40:b5:e7:ec:5c:81:8d:74:07:66:36:b0:4c:42:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bagaria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:2a:40:b5:e7:ec:5c:81:8d:74:07:66:36:b0:4c:42:1d
Serial Number (int): 423027145655039416877640101554844576006685
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:0a:75:7b:df:6f:a6:2c:4a:5a:dd:bd:40:13:3f:ab:12:d8:68:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:93:2b:7c:de:29:ff:89:32:a1:ff:68:31:97:88:bd:69:ae:a4:50
Fingerprint (sha256): d8:8c:c8:24:2d:bf:d4:16:9f:10:8d:0f:3a:8e:3f:7d:28:63:eb:d1:0d:9a:9d:c2:29:b3:d0:5c:90:9d:91:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bagaria.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bagaria.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bagaria.com

Other certificates including the domain name bagaria.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bagaria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423027145655039416877640101554844576006685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 17:10:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 17:10:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bagaria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786757184423016447144266962726670491524629905680084592748329380352389055438236873305231901610031383389198284530439238206705888875040959165046998771671073928093722787858878843500184276380032565532510959630981299750891553993845011798101316028064858674313165979369214239043324186966765927833798006065081923120839662593057083795724468819184293583394166225915536657636372458411213055061095459897039733041763992849697638056704391756220013111312201134901829835517722011892210915020409335850768749418238553054664704660690199326768484864073360416895344566394074489143929331898841229482282979985278598061661744251546394759908348163949987624973279717988891385283584668069498161494301822619800574945257411314358019992164369198677318307567489652382264794340733461333620247975591050645790844574348445233055180961690047845524037621741418682532839671096033719246200227689274502473804956165488482516225357537545389746819210436645428617518185454625194927464588361928197007170064435218995296356408050301592790018140655373307639902332981782421112745928959210734569532925088281096121596414703866406403402320356319624786624955078566263419077522239631226258251030787500481181502525630502054146540475706789310276901361818808535301265634072337005788918917241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							380a757bdf6fa62c4a5addbd40133fab12d868e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bagaria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc11251690000040300473045022075ba24e783e179dcf2f5ea543e4cd7ed574449c197de7f05d1315985feca5919022100bd7bb0bad26fbe536c9490f0da6ebd0be4c1088ce8fb98fdc1e887a36cdd943f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cc1125178000004030047304502205e3afab633786b5064f8b157a57bf849e2611c5fa30a5da4df6f60cebffc5c7c022100dab2407c3a277ff778b831eed13b0b0eb2bb19b1bd465ae875a6f7e8e2c8167a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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