lubrishop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:96:dd:e9:1e:f4:ef:1c:bd:40:2b:53:2e:b5:d1:66:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lubrishop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:96:dd:e9:1e:f4:ef:1c:bd:40:2b:53:2e:b5:d1:66:d4
Serial Number (int): 295225348545681207338239015973914999350996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:6f:86:44:05:ce:30:e4:d8:f0:cf:36:37:6d:d2:cf:62:88:84:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:ae:e7:87:a2:dc:b5:41:c6:c7:4b:03:c1:3d:da:18:5f:05:a0:17
Fingerprint (sha256): 03:ac:fb:0d:9a:25:61:c8:33:db:46:d7:a4:8f:ce:34:97:0c:80:44:44:c3:b4:42:15:85:3c:7c:ef:5d:97:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lubrishop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lubrishop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lubrishop.com

Other certificates including the domain name lubrishop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lubrishop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295225348545681207338239015973914999350996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 21:39:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 21:39:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lubrishop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733779114772381704126447888452624093156670068911231372586264418998671128987913732193567582680012384404596277376599178617745851721071390980416660075209249433794028838041495342991305566552708049636932658597693933939704918012629954862333909446892341245506746071811167560161594075986509071349478672430478490168341384355155566502068826859035292142509484887740731890814932856933718338003497076824938469041420057300971768569784864567158643503840993840345154247884765460691769080447340764928787423244014327449369648869571227926253702739084479872679566056188712483942874333483314294146381440247970740815558299524192302229301815739353962617602271203632378943312891552352759106479640791281469462722789700289234569349477450412594189133212571611780142164814955526519352491320250737405947038734068672797543006042979172828542621088100260198866974407805564818945608654158093337874678550214049457394962407536442614588527968427023646982900054303970368202538693765448896580846009516483586355197253115821650071712221732470889286015996730388819613528968948413658874805100366823356308774144559875951747468324234026003080346045536314735329157216877441118416422124525511375083087520710737122735340772453179275712225088109668483236821169050520593462805247173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b66f864405ce30e4d8f0cf36376dd2cf6288841b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lubrishop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc220b34c0000040300463044022045acd9d951e07712655577fa6e49f9778730ffd3ffdf03c8c3a78974d11ca93d0220527e0492c9c6cc89c72a05584f0f23711a01a995356ab4cfc6e30f4cb56c363a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc220b34500000403004730450220651556ab3e84ec128dfa5d897df98e8b5ac72b664d8f7d978a9a8ba636057261022100c83a141b139933b413c7c3d1cf376975b3519d51e309706b2c75b44c27314736
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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