lightningguide.net

Issued by R3

About this certificate

This digital certificate with serial number 03:83:c8:39:c2:69:55:74:40:14:d6:11:ea:a4:28:a4:73:86 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightningguide.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:c8:39:c2:69:55:74:40:14:d6:11:ea:a4:28:a4:73:86
Serial Number (int): 306179993365134465249596882205742175908742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:22:55:d7:19:89:dc:4e:a7:65:75:54:29:3f:54:ad:2f:d0:be:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:50:08:11:5f:5b:18:ed:b5:df:7f:94:02:bb:0f:b2:86:0a:06:53
Fingerprint (sha256): 03:d0:16:86:87:78:a0:18:16:11:48:62:38:b9:c4:58:54:00:21:6a:c7:17:54:9e:af:47:20:63:b9:5b:80:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lightningguide.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightningguide.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lightningguide.it.uc3m.es
lightningguide.net

Other certificates including the domain name lightningguide.net

(limited to 100 certificates)
lightningguide.net
lightningguide.net

Certificate

The complete raw certificate details for lightningguide.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA486JfC1cVBuE8uww6eQ4
hHyQB8MluCWC8Zh6Y80t2eJTgcag1Uj5ccOKsUBaCZicSNS8qWgxOE7a6ISImAtU
GiZlcCyWDRWFJlUK+Q8nlq/SYhjRqeBE4BSNfzBr6tXjM4is680+u/dkU3YK4hbj
kgNQXbY7r7wxsXNY9MdLYmqwEIJdFINFu0JKEsOwmsrq+3IdtFjZBxes8Z7B7JEo
wzN1y6/9MoyNoAVZ2t4l4tIchVLeRKdHy2J1TTgoRDtdldlxjqRaJt67YhRUK3YZ
N1A3TdsrSml4Ko3dmYvuWS+d5b1lUFuOlI56V1Y75Z2/GbIhqsQ4l8yv2uLnZVbX
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306179993365134465249596882205742175908742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 19:23:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 19:23:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightningguide.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28757942443062596476218861072075997726585629199347690511016497150947568333585301236222651584127105952703019082421966843010126160448218284621726091703777320979610238838873932801176298954665618419901559402621894959322470500509492432002290732514309740525109397903231617404253132301513004721595787833958848440310289889570583969492565070410484887564165070705084032032917496028411539890077476593767281884156339099335396279847681968747418869184812275688441083441326611935968447660800617568695962076850922858621841677560251991756090701135267921475552233931336465273318900521717864011685102148015357658551897990210751426910161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							642255d71989dc4ea7657554293f54ad2fd0be0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningguide.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningguide.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896aabafde000004030047304502205375e61ff56184f470af741084ff48a5bd8de65ce3c26c4cdfc2ed397e7b3c400221009cf81afb258ca29aa5e0354e895ae20300f4fd5de7c50dcf9abe922cbec5d8b70075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001896aabb0030000040300463044022063639d470a2c02a0b1b7952f148c36680c48be7a6f3ad0c4ca13b3d726d35e3b022053d06d67cbf19472671e2473260a9455defacb6b697510252b775b07a03e643a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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