bakerywest.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:7b:53:22:53:38:2e:6f:12:44:fd:df:ef:e7:78:72:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bakerywest.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:7b:53:22:53:38:2e:6f:12:44:fd:df:ef:e7:78:72:af
Serial Number (int): 270688408402462132804941273606769402737327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:a1:90:7c:e5:5e:0f:bc:4c:d0:af:b7:05:e4:38:a6:77:74:3b:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:2c:18:56:f3:4f:3d:9c:78:b2:26:25:5e:62:09:71:1b:28:49:f7
Fingerprint (sha256): f1:74:5a:76:30:1f:e7:27:2e:20:84:33:33:e2:29:2b:22:9c:d9:e4:b2:09:ea:b6:56:40:73:be:ad:30:9e:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bakerywest.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bakerywest.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bakerywest.com

Other certificates including the domain name bakerywest.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bakerywest.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270688408402462132804941273606769402737327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 11:24:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 11:24:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bakerywest.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794274406760108143249923563352769924333273291705710104796779570265939290123588955549684205759031586495906224224413928247642922393206806330108717431827706980241593106110356438039831380102237764105074763160487575681218498469736741954616860060047859463336790973138702917756022080913116057597942100597803192062973653933643158206276917013386615305136601432353913670349809539276762628662826785941745103075070050342493121219668309523198673674925131787960033186245308509400421280166225045931026356244118702876194621099598471294140373330171127810129669663739849144411631395520360443879156817563969257012008257159574049918847547104601999305491137526996809721495395419473850114283006345486228862107376399300736289142319692893552403758288170788349968960791212351829842236752079610391965461834713701786344513366586151935864454666453473043101158588661462300769964089936630149157837803329876992930686929223556074796999167474807157265570665325953177212126331723975131386679328737550681491473885151110778743628795181581962307034773021230877149836389376004061161939946066176362734812482644628152594945378589138320564403116889442634298124449642815515119409781170012248349244270236450659388237572703731548644061654100617871392502734303121965001205468833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3a1907ce55e0fbc4cd0afb705e438a677743bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerywest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016efa1129930000040300483046022100cc292bcfb29e3de545931fa7b80695aca74df7b4a39796fae796b74b5deeb4f9022100e8ca2e0e49453172495c4f2ac0afa609dccfad478040a5fed707d22f5112f20900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016efa1129e60000040300483046022100d2a3391b936096951ca525e8543bad55cac3f945ca34a23341b4527c4831ed57022100f1b047060f97400748b97f9961bc81b7ca65bc84d271fdfe524861b0968e53ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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