barbacci.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7c:2d:42:04:96:12:5a:71:e7:48:51:f3:1c:ff:93:78:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barbacci.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7c:2d:42:04:96:12:5a:71:e7:48:51:f3:1c:ff:93:78:09
Serial Number (int): 390704315269659883431998907183670150526985
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:02:a9:ee:75:a8:96:ca:56:d1:50:34:40:f6:c5:dc:ed:ce:ac:97
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:0e:57:3c:37:4b:6a:f3:1f:7e:ad:e7:9c:e3:24:8b:b9:4f:27:f5
Fingerprint (sha256): df:6b:f0:4a:45:e4:1e:bc:1b:da:1c:40:be:c0:58:ef:cc:ec:25:d1:f3:f9:54:29:dd:13:61:f6:65:33:52:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barbacci.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barbacci.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barbacci.com

Other certificates including the domain name barbacci.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for barbacci.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390704315269659883431998907183670150526985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 14:51:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 14:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barbacci.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933731072978581498168848191669618401705827985874767731526991244164587516809155271913972980220827558542379482069954862956938309314075575657302405130129035768393001109943327119979121440052803822744722040887119912174609292658916521167779680738898864139165488841134685170387767071775260438743514331734571645585632831079206265810068905717491965723857392252370338243246592460875559740681271360343846810318591937402064177307219520830848962971211536224042997981161185506630778743278173670826828640043207857947531414476116654999928127074041508262662081514489386874135519749045306402378892444621781510811455292618850095589945740981688980386584495417684309527479185144628486261513878614216404829547316208725785012558765982463365097094805609535619822031873874790447132725167037784937830422918773729089123052422000016290130312623675623337040018471002029521870321892578815940403044748547101668255132375533038135409788397478028089904325572822813678672924077176583425568804011893208665429370694427118325701753337049371305313195543030806168174798271249988682926829725050505041908157455570365058170294746491983292238196635307174926615555584759091176788666519429228828947618825923309079930802358382532481227340733690297972619891064457922229615306378651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e02a9ee75a896ca56d1503440f6c5dcedceac97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbacci.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d415143a70000040300473045022100fbb1c506f0e65384f5ba013660a1bddb3fc1455c568577ea837f20c01544b1dd0220247d6f1862722df17aa2f05553bd67b4a283e82e76a92a8e4d63dc38ba5717c5007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d415143ab00000403004730450220545e7a57615ecc8edd71c198e6672a05689e5efc836d935c3d93239895d26b25022100fe18bb3e0642373a2f2ceaac938cf9e6ee77c5a3b48c8734c32916d0fcf83a16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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