lucasworld.com

Issued by R3

About this certificate

This digital certificate with serial number 03:de:d6:22:fe:8b:89:90:18:63:87:55:6c:0d:1c:07:7e:5b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucasworld.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:d6:22:fe:8b:89:90:18:63:87:55:6c:0d:1c:07:7e:5b
Serial Number (int): 337164179743707568573525000565887037046363
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:02:71:30:de:11:0c:40:c5:c8:b0:d2:96:88:0b:31:4d:cd:b8:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:22:6b:57:8f:9c:ca:b6:06:98:26:23:35:32:6c:68:1e:47:60:58
Fingerprint (sha256): 0a:92:f7:02:c3:00:06:5e:52:12:f1:d9:31:b2:7f:a1:78:d8:6d:a6:82:6c:2e:b8:85:8a:63:38:f9:f8:fa:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucasworld.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucasworld.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lucasworld.com
www.lucasworld.com

Other certificates including the domain name lucasworld.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lucasworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgISA97WIv6LiZAYY4dVbA0cB35bMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMzExODAyMTFaFw0yNDA0MzAxODAyMTBaMBkxFzAVBgNVBAMT
Dmx1Y2Fzd29ybGQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
tMZ7HL46AXc8cJCvSQY+o2NgFdB8SuCZ9WfHk4pOU5rwHwXX1MyXxS5ciQrY8KK+
4I6ZK9WPW/6qH8TfFwejFEQMQrS9w4GnhGYtE1hsn48JFpWStkHLXs42+nDhM7Gn
+gRQSPCiJ14ZKcFfmgSOQwmi34re6a2x7F2HACPCf0htREEU2wU/vqegHF5wNmh7
BCkAzF2DJ7KUY92kbFiD5WQM9F4TB2N75YhBd7MYD3vwK3w/aybWUDY0shfEt9cg
twAIZvQGzpYpxs0X5ttCjCTWylef0RI6JpkRSMST3YPUG+lP0duI0AjG/jpbNcce
OMri69BmYJLvrbOiGKD7VMKsswamdUYcK3sHKJSk4NvPM/NG1f6fUfALN8bIdSJ0
gliwysRbDfcYsl1QFZZrw2MOgTT1CV6UaQCt3mMvq/KoPseB64Fnm6O0SocKI1l/
K5BlsiJYCSqosab1MfbtUgQs/46lnQUK86NYQP5q0sE1Vyoqd/iezR0StblnSNNZ
24SZ5ltAPrb65BnqOzB0+pHoc8SldAlnIKsXPbacwcJSef9B5FOBQKwAfuJv+456
yUwI3gWhcNdQfpOYIlngB57GcV+hP1HaN9amzkVWAe4m4+B3WtYU6baCdpfcIkqi
SFodZEDfETrHbTaAgdu/kb6TWBmc5Jllj1GfW3iIyA0CAwEAAaOCAiIwggIeMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUdAJxMN4RDEDFyLDSlogLMU3NuIEwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wLQYDVR0RBCYwJIIObHVjYXN3b3JsZC5jb22CEnd3
dy5sdWNhc3dvcmxkLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB
1nkCBAIEgfMEgfAA7gB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABjWDmcD4AAAQDAEYwRAIgWoUai7afzlNUn2PNo6z907bGgrDMn7UGJZnEtu8W
0sQCIEqBnwB9Ex6Jay5kYfA7/UCRvj7mTBQrZavGupPnSQH0AHUAouK/1h7eLy8H
oNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNYOZxMQAABAMARjBEAiAEMtmEBD/d
T0EDsk62r3Iy9cWovzIt+8Z3tzfx0Htq6gIgIsopnk35C3kmaFEqbSTaWG+j57s2
9FJYvyPZlOzxGdEwDQYJKoZIhvcNAQELBQADggEBAAlnQLq7SmDCSkxL3BDF1hoo
P77XDbJ7WWfd0dyyrcdEmpkB0LncNMoSejwec6gXw9nNHXa1uzo7AOFz6rE5DBYh
50X1FX5fGgnU8TpKPHoiAO5uC8CVFciaX2O3hsywgYc1hobdEy5O337APsGpemIM
OuDCgKyQ9F6NBXbPXEdnGwNeC8qwYo0hGPe9x3VX97U6g7aY7idC5NLVjfqRxQyD
D3vL7yqqBbl8qWum2cSg3kh6Amz9TjOxutXRpzhXNjB+VCFqmr0vL75qIsx9ApDx
34teoL2OnWIcAFY42Uc6UuHKUR0p0KCzZR25Kv7Uh1Sp0S4Anf5MFeUvY4X5sAQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337164179743707568573525000565887037046363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 18:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 18:02:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucasworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737498945744491493208314252266082527219800098446781245811982104482887620612284792405093262837932580645919230699782371593824600002275889875177932247918183143858449380211626593078580104727391715483450547861270721842127230277217076091490395848716492572492531307004995946936312033816138499621374021502030526343412290500763106022524522686177510459542036829600247915862896655340750443481336713731623738934325773646759279380596118464390163539582428790049502326949807608206168543425196271401375360453783809342175455848469302909220783428374149185207274490819191204574737934889119339833823225605216954344267450900552591185679006601663020754604656526711991506272469487488560630868614378494386877810176881969659357566952624397362218590224258910570063143410771246938049660008588342305989538156396351005713371719253428227784843655471540114269050612494357733150175525763024164447989408336450297585460606563049104877791958384353685857814623229802424811303551276902520277057426870403689674301962305807298717191175931773190168421909453760329105431092002428600506050766158050822227108885876593111083883251080676627086171660412673231084575796918330520288758234835619778080638754024969916930324700006859410974385726756149763103820413834744866300536342541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74027130de110c40c5c8b0d296880b314dcdb881
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucasworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucasworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d60e6703e000004030046304402205a851a8bb69fce53549f63cda3acfdd3b6c682b0cc9fb5062599c4b6ef16d2c402204a819f007d131e896b2e6461f03bfd4091be3ee64c142b65abc6ba93e74901f4007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d60e67131000004030046304402200432d984043fdd4f4103b24eb6af7232f5c5a8bf322dfbc677b737f1d07b6aea022022ca299e4df90b792668512a6d24da586fa3e7bb36f45258bf23d994ecf119d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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