bplmarine.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:63:0e:ab:01:0e:c0:19:68:f4:dd:bf:15:68:96:8d:2d:df was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bplmarine.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:63:0e:ab:01:0e:c0:19:68:f4:dd:bf:15:68:96:8d:2d:dfSerial Number (int): 295044309216608501820016574712210766245343
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ff:7b:38:41:0a:87:b9:ea:e1:ac:05:47:42:8d:2d:32:10:a0:3a:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 64:5d:9f:0f:9f:3f:ef:eb:4d:fe:fc:84:82:b3:2d:a4:f1:b7:23:4e
Fingerprint (sha256): ed:af:1e:9c:17:eb:ce:2f:70:89:99:92:ee:4c:81:60:7b:4b:48:e1:52:a4:a1:af:14:bd:c1:10:27:8d:50:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bplmarine.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bplmarine.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
barbican.info.tm
bplmarine.com
www.bplmarine.com
bplmarine.com
www.bplmarine.com
Other certificates including the domain name bplmarine.com
(limited to 100 certificates)
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
abig.talknroll.org
abig.talknroll.org
bplmarine.com
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
abig.talknroll.org
abig.talknroll.org
bplmarine.com
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
aazn.rancochile.cl
bplmarine.com
bplmarine.com
bplmarine.com
aazn.rancochile.cl
aazn.rancochile.cl
bplmarine.com
bplmarine.com
Certificate
The complete raw certificate details for bplmarine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISA2MOqwEOwBlo9N2/FWiWjS3fMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTcwNzU0NTRaFw0x ODEyMTYwNzU0NTRaMBgxFjAUBgNVBAMTDWJwbG1hcmluZS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8/58ja/5Ka++98qdIIJhWcXD7PorpUA/ bbQYi3AxZLZPufYZgipS1HWDh1DhD9P+NVidT4lQcKzmJwWaxQ/mitgf9NJsB2Fr vtnfgaDRIU/6RwUECCVW5jkW8nayzyg3QR1czsZwRY3OAGblksXgg/oVNqW3iX0y 83hlsMuXkPkn58wrndygvybrXtLkOGwK3aYThBmOw7KKDuttGn8F7YYvTUmy+2Bb 0OlyCYDpp4WqlSc++AYEI4YOi9/2sn1LsSNxmN/erHnR+E1DZM923dBaOEMp5MrX zC7M/LUO9Ltfwu/F6fd7wEZ8CLJoo1GAHSPtstgbYjf7Mrp5XYYFAgMBAAGjggM6 MIIDNjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFP97OEEKh7nq4awFR0KNLTIQoDrm MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wPQYDVR0RBDYwNIIQYmFyYmljYW4uaW5mby50bYINYnBsbWFyaW5lLmNvbYIR d3d3LmJwbG1hcmluZS5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5 IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB1AKRQEmkFWhVUXmIRqze8ED9irlV2pF5LFxRFPhsiEGolAAAB Zea9XfEAAAQDAEYwRAIgAydwpk/bBRoXn68/JRSuGkQfg/OoBuXVa8g5MmXwECQC IDcE2QkTWmBQ3AzmfSmXbipBDCM9JHMGzLt4nm7iTXpWAHcA23Sv7ssp7LH+yj5x bSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFl5r1f6wAABAMASDBGAiEAxapmI3tBBAlE bE546C6F/vEzRJq9weEnHINrc4EyuCsCIQDBnUnorx/PCoQ7mpGJ7bih9V88wrEU 0QLVWQJIT1b3ODANBgkqhkiG9w0BAQsFAAOCAQEAlqf7/Y3ogHI7zCbXel4yWHA1 /sHKHpncPUcarxPmZAvO4ab8LRjiEfb5yh8inV6lfOtXYa43jyvPZRyc1zDv5Dam yF+dJU1F4GZY+fL70EppxQtwVfm2Y6uxX/j4TdnO7bgGBFqC4GhJaw+uWzOF3uFA CRphNt2WSivnQD+jr9qk9CP7E3ivuoeL6PBFwucFZ8H8jG/Xh4x5HkKjVC0xSiuO zeuYm8AqudBTLLQrEgiNy47dAaVBi3CvAXbiuPTfh3/My/uxnI85mTa67Y1HyVIh s+m4hSh8whojnET1nT1T9Lxhh5JvVir/98bUhlqDkf5VPslfqTLjMEfVbxOIkg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/P+fI2v+SmvvvfKnSCC YVnFw+z6K6VAP220GItwMWS2T7n2GYIqUtR1g4dQ4Q/T/jVYnU+JUHCs5icFmsUP 5orYH/TSbAdha77Z34Gg0SFP+kcFBAglVuY5FvJ2ss8oN0EdXM7GcEWNzgBm5ZLF 4IP6FTalt4l9MvN4ZbDLl5D5J+fMK53coL8m617S5DhsCt2mE4QZjsOyig7rbRp/ Be2GL01JsvtgW9DpcgmA6aeFqpUnPvgGBCOGDovf9rJ9S7EjcZjf3qx50fhNQ2TP dt3QWjhDKeTK18wuzPy1DvS7X8Lvxen3e8BGfAiyaKNRgB0j7bLYG2I3+zK6eV2G BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295044309216608501820016574712210766245343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 07:54:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-16 07:54:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bplmarine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22212021338182472187682968554112259113276338319397660699399151639406044715956006027304027945998084519256008180969821257235799018450345520732872556803214860562049996675369451787232757297676296087328310220721597502336636016286482770790942804033062740892196063544399263337816717243086085131025073011832828140422301572143662235321163822694394931887619303508707699571002161361749054147237701840555512683110150772367042998256524693612355381369581204139818630569555688042054710702117042303002513176939704828825350938246316638173411936311610022604588846956356675647749706752037368568284060367876342542054629350353270279603717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff7b38410a87b9eae1ac0547428d2d3210a03ae6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbican.info.tm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bplmarine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bplmarine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165e6bd5df100000403004630440220032770a64fdb051a179faf3f2514ae1a441f83f3a806e5d56bc8393265f0102402203704d909135a6050dc0ce67d29976e2a410c233d247306ccbb789e6ee24d7a56007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165e6bd5feb0000040300483046022100c5aa66237b410409446c4e78e82e85fef133449abdc1e1271c836b738132b82b022100c19d49e8af1fcf0a843b9a9189edb8a1f55f3cc2b114d102d55902484f56f738 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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