bergtoys.com

Issued by R3

About this certificate

This digital certificate with serial number 04:56:27:33:e3:d6:42:d4:62:04:ef:71:45:a9:ee:c5:f9:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bergtoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:27:33:e3:d6:42:d4:62:04:ef:71:45:a9:ee:c5:f9:e6
Serial Number (int): 377765536602299581012384795282655418907110
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:2e:77:88:0a:74:83:e3:aa:0c:14:85:82:7a:ce:7e:6b:bc:54:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:99:b3:f2:06:09:53:a2:73:d1:65:04:29:04:89:46:69:d3:d3:04
Fingerprint (sha256): f8:32:3a:74:75:f5:57:5b:6d:5b:b4:79:00:26:03:cb:37:fa:53:2e:6a:78:bb:36:23:0a:ab:32:ee:e4:50:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bergtoys.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergtoys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergtoys.com
www.bergtoys.com

Other certificates including the domain name bergtoys.com

(limited to 100 certificates)
helpdesk.matisa.ch
www.bergtoys.com
bergtoys.com
bergtoys.com
e.bergtoys.com
itservicedesk.poundland.co.uk
bergtoys.com
www.bergtoys.com
www.bergtoys.com
support.sodra.com
bergtoys.com
e.bergtoys.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
bergtoys.com
configurator.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
e.bergtoys.com
itservicedesk.poundland.co.uk
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.bergtoys.com
helpdesk.matisa.ch
magento.bergtoys.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
e.bergtoys.com
bergtoys.com
helpdesk.matisa.ch
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
configurator.bergtoys.com
helpdesk.acrotec.ch
configurator.bergtoys.com
bergtoys.com
bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
support.sodra.com
e.bergtoys.com
e.bergtoys.com
servicedesk.ecm.software
bergtoys.com
support.sodra.com
itservicedesk.poundland.co.uk
www.bergtoys.com
e.bergtoys.com
e.bergtoys.com
e.bergtoys.com
www.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
e.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
www.bergtoys.com
configurator.bergtoys.com
support.sodra.com
e.bergtoys.com
magento.bergtoys.com
e.bergtoys.com
bergtoys.com
www.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
*.bergtoys.com
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for bergtoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgISBFYnM+PWQtRiBO9xRanuxfnmMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMDkwODAwNDFaFw0yMzA0MDkwODAwNDBaMBcxFTATBgNVBAMT
DGJlcmd0b3lzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL/P
DGvaMKrKi0pPfeBD636GRVgUf10s7x47rx3PxLfswk0PDIyyyIg5/hMQdEXNAvNP
Zwh0SQvqcOGbvFL0jVhHZ6HjWXxatIq9f5miaD0W7vEtOGhzcxPAdTAJgCc4SvuY
JpRn973ZaFr3uLotr+El9apD06daY6Q07KNqazj8VWZJEOyaQE27XzsAoo/zePjH
pLmgYEy63CavPXhPPjdo/CJ4/vjBCPzMt9DcPqmHGcgP+BHSNcTojON1OjXK+0GI
lAPAkbcCVmlg55TF4wQv0oeO7Z/WcN27D/XXZzPHsN/fj4mMJnyJeXOnahaMuCBi
c9Z3ai6DYUE9ObWhBh6UQMSJij5fZqWaBVn+n1jQ5yKZyckGZj7qmfwtRdYkc0KE
BO+OpI+7cel3S9vFO5enEmEW4Z6Elk01g2OF86EopCcryhhESnhuNryU9fLbmj/S
v7Beg9L4T3lV/GVP2eYFQgGjMHVzZweHigIcClepnc/gk4Bp9wTHCoEgpyvq/u7u
LJaC5Sif3PVHctrnFd59I9CUa6/DP4QJwkK1yAUa2JRt8w05tVsmkz681IezYbmI
ULMQ0+NoeayUw664xXyKb9LdHXsqObzoi8Pt7zPoR6wj5XVXRecWMdgUg5IOBrxG
sPd9vP7NwvjYod4oO7jMx+++OCUknMxnR7//G+ktAgMBAAGjggJYMIICVDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFC8ud4gKdIPjqgwUhYJ6zn5rvFTRMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDGJlcmd0b3lzLmNvbYIQd3d3LmJl
cmd0b3lzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej
UutSAAABhZXCrKcAAAQDAEYwRAIgTYrqr5WAt++aDnu+HY2AACFCga9Dp8ZQ/pZs
xXpWFrgCICgnmcrYtNUcH4a22OSLoYw1jPWeyF/2QRZYw/04nlDBAHYA6D7Q2j71
BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGFlcKskQAABAMARzBFAiEAq+zD
XEdJE9iIiZgXusdQknXl0eItfko+18HzmavG2y0CIFMeQeTh3RvxJ2uPDl1eUbdn
jncZEgMwg3P3yJERHRl3MA0GCSqGSIb3DQEBCwUAA4IBAQCQgSQOq5VVMOibQLkQ
D8e2Rk2Wn+vBJRPAF50xVWWZ6uwaSemK+Bp3El8QWMsrQJtuhklQc25QdIb+jAA6
ZWACjG0bllq1dkPJMkYKjCKofMdrUhSpnBH/rgJAklGdtuBQ69LJhYWjim0LcwB+
AxomEgCWpEB5DC+SvG497K8UEsg20btE6VSVTInoa9ACH8ZjjnsPqzRA4QOaPk2E
rc3RAk1pzXQZ+btwFFYqn3JcKAs70bGGJ3D4mOaxa4L+oJmg8Lw1ygenE6L8Ysjh
KDn/R2AkUnEdJfaPja7OuAslPRcouXaI8hKJXi+uH7jeR/1bwU8pmAXl9NkY0yRc
U/Pt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377765536602299581012384795282655418907110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 08:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 08:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergtoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782511564918594404340821666114756890706098153297154191217764107277126361773923074737326931734085111060856511332959603371215311404469014864245831832679081311987986444746432171421778868873716319121456942443755413262162186547700242900757562462891795487739527653194407236460856178356101736583516741201991050367615162982218531925756258463018173299690733527153653906451922109475077753173361102209812869353202877295949907079580371963292754629364321146694550123488544379648413936781821033159348608592204419259187233589763236409369590671150280658188763851054106249544537756243926821396860166448040217092956677437157240869114804939445641391569078113630015678254218022315246152248737029227942147778147062723534566930757984752655493932753554057533851550381671232573183162023216926350165020629670891754418999300895268418752640828677322204313984304989437611321126349096538792214285070914319795319672720418882912139597655715843837824927637376016446431446572943579801238232964871952721920741705924556648677864283884194017429662466366779140344673088173144234846483598842999819166271744479735677755629686028795991235804272530137404860446747155548564425940572764679545972893437898488790255702851542518561735514524614670135725515300757957440455269148973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f2e77880a7483e3aa0c1485827ace7e6bbc54d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergtoys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018595c2aca7000004030046304402204d8aeaaf9580b7ef9a0e7bbe1d8d8000214281af43a7c650fe966cc57a5616b80220282799cad8b4d51c1f86b6d8e48ba18c358cf59ec85ff6411658c3fd389e50c1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018595c2ac910000040300473045022100abecc35c474913d888899817bac7509275e5d1e22d7e4a3ed7c1f399abc6db2d0220531e41e4e1dd1bf1276b8f0e5d5e51b7678e77191203308373f7c891111d1977
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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