discoverbahia.com.galleypublishing.org

Issued by R3

About this certificate

This digital certificate with serial number 03:83:fb:b1:b7:6f:3a:c3:16:30:33:16:e1:74:57:8b:51:5e was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=discoverbahia.com.galleypublishing.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:fb:b1:b7:6f:3a:c3:16:30:33:16:e1:74:57:8b:51:5e
Serial Number (int): 306248406845903122685387557189351205720414
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:ab:68:65:6d:90:2f:80:12:e8:1d:46:2b:f3:ac:a2:8f:c0:b0:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:97:59:4f:89:04:32:ec:07:93:f8:77:e1:f0:b9:8c:38:31:fd:05
Fingerprint (sha256): ff:90:ca:42:b4:2a:d6:58:6d:4b:ef:92:fb:f8:b6:b0:03:49:7e:43:f4:21:f7:95:fa:1b:ca:fb:03:27:0e:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate discoverbahia.com.galleypublishing.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discoverbahia.com.galleypublishing.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canibuild.co.nz
discoverbahia.com.galleypublishing.org
www.enerpac.co.in.whn.co.in.organicrates.com

Other certificates including the domain name galleypublishing.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for discoverbahia.com.galleypublishing.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISA4P7sbdvOsMWMDMW4XRXi1FeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjQwODU3NDhaFw0yNDAyMjIwODU3NDdaMDExLzAtBgNVBAMT
JmRpc2NvdmVyYmFoaWEuY29tLmdhbGxleXB1Ymxpc2hpbmcub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W7OkKKkkKbaD+YJuRZjpUDVbsgzTqsx
t7lIQwYlLookNpviAFjtgTKU3+S2VLTyaJDiM1LVvmtZz6NU8fsipLlG4UQlyHLg
BOGnuh1+YLyShxmc+NP6U6LG+697dfijNuV2d5SGz/5tpK4LD+kiJJuN1tte+K7r
sDN2ptWRDQlhhQrNwsenB6tm/MJdJFV7iZtvlhH6MbQVl2a9uTDdJpoYhkH4WxeD
p5ogkjIqUyjq8MRi5jFZEa3KcTcgGBnipY8aqziBcAP98NRvre3cWPyDXE22qxvE
sp50g8OOTgZAhvxOSuPzjLiMfYLDfJc41HSKf0b00VgFWtDKwNH6PQIDAQABo4IC
ZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS0q2hlbZAvgBLoHUYr86yij8Cw
KzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzBwBgNVHREEaTBngg9jYW5pYnVpbGQu
Y28ubnqCJmRpc2NvdmVyYmFoaWEuY29tLmdhbGxleXB1Ymxpc2hpbmcub3Jngix3
d3cuZW5lcnBhYy5jby5pbi53aG4uY28uaW4ub3JnYW5pY3JhdGVzLmNvbTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjADDmswAAAQDAEYwRAIgKj3W
DHQJVurYQhwSPP5vyJUX3dZ8EFyzi6BBpQb60C4CICVShKxwV/eAUIF3xluErGxR
zAxkWYTZLuKaiG9Fkg+MAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGMAMObTAAABAMARzBFAiBh2p8v+EPB0AdD3opriWvt8Ph9PAK/S/yjCHxY
Q994qwIhAIGKsTQmneIKB2/yowMJ/cEbLZOhb67cAUSKwV3cXACLMA0GCSqGSIb3
DQEBCwUAA4IBAQBhbpgAjYFnPXDSaj/z6rpG3t/x5Yzxw69hM+f44nJR/AW+Q8x6
BErp4q8AvYr6gEbzHXo2YmKjjlToJ/nbFKf/wy3DPs1+3XcGYqL1mFDnWqWT08XW
GFf4vQUe5cDVADCCKQGApgfPnCK18Q1Hy9pJw6oMcou55XICNiC8mw2la7hVbw51
QZZjboZXxOhvlJhrdO3gEP/tNyA3OZpmsKkRkOxhF5ehIPc+4cNdhgqem2yNaZwc
bjcOe12rK8fQNbaKnv0UZsVx7sdDgFIiDuCHwBIDtvZ5/GIWZeEIn7gE7hOpWRNo
dOJ43GyJph3NVYWv+0j8k+sy2Rzttl7HAY+G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W7OkKKkkKbaD+YJuRZj
pUDVbsgzTqsxt7lIQwYlLookNpviAFjtgTKU3+S2VLTyaJDiM1LVvmtZz6NU8fsi
pLlG4UQlyHLgBOGnuh1+YLyShxmc+NP6U6LG+697dfijNuV2d5SGz/5tpK4LD+ki
JJuN1tte+K7rsDN2ptWRDQlhhQrNwsenB6tm/MJdJFV7iZtvlhH6MbQVl2a9uTDd
JpoYhkH4WxeDp5ogkjIqUyjq8MRi5jFZEa3KcTcgGBnipY8aqziBcAP98NRvre3c
WPyDXE22qxvEsp50g8OOTgZAhvxOSuPzjLiMfYLDfJc41HSKf0b00VgFWtDKwNH6
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306248406845903122685387557189351205720414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 08:57:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 08:57:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discoverbahia.com.galleypublishing.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27448353093787728353870447785382875153966509236082018437939542569842214110345717680570267774443111848892132962768210313146214333318091237488471095437895958446773581602635716717746035454873588875723474750238736326302317379762235419909521945027164290601589678400858552154456933438874427292717278429248966792901569102116536239494703675114432787098208696324533946473608707013686211359679046584435278776106998793660388822723798688853934213144424690922749205075271802627173993631614531340008335723501364277500845816234386662696117239696909922846063384122665179376572123770706886504729260152026320503590838959716600799951421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4ab68656d902f8012e81d462bf3aca28fc0b02b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverbahia.com.galleypublishing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enerpac.co.in.whn.co.in.organicrates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c00c39acc000004030046304402202a3dd60c740956ead8421c123cfe6fc89517ddd67c105cb38ba041a506fad02e0220255284ac7057f780508177c65b84ac6c51cc0c645984d92ee29a886f45920f8c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c00c39b4c0000040300473045022061da9f2ff843c1d00743de8a6b896bedf0f87d3c02bf4bfca3087c5843df78ab022100818ab134269de20a076ff2a30309fdc11b2d93a16faedc01448ac15ddc5c008b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00616e98008d81673d70d26a3ff3eaba46dedff1e58cf1c3af6133e7f8e27251fc05be43cc7a044ae9e2af00bd8afa8046f31d7a366262a38e54e827f9db14a7ffc32dc33ecd7edd770662a2f59850e75aa593d3c5d61857f8bd051ee5c0d5003082290180a607cf9c22b5f10d47cbda49c3aa0c728bb9e572023620bc9b0da56bb8556f0e754196636e8657c4e86f94986b74ede010ffed372037399a66b0a91190ec611797a120f73ee1c35d860a9e9b6c8d699c1c6e370e7b5dab2bc7d035b68a9efd1466c571eec7438052220ee087c01203b6f679fc621665e1089fb804ee13a959136874e278dc6c89a61dcd5585affb48fc93eb32d91cedb65ec7018f86