www.liftcondos.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2c:a6:42:d9:db:32:fb:72:92:9e:15:7e:d8:44:22:40:69 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.liftcondos.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2c:a6:42:d9:db:32:fb:72:92:9e:15:7e:d8:44:22:40:69Serial Number (int): 363642566829104868127372153008992433619049
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dc:8e:0a:c3:64:c6:14:e6:95:e0:1f:91:68:e7:99:0c:2f:b9:d8:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1b:e5:e6:b8:f4:cc:ce:57:cf:d4:fe:02:35:78:ad:3c:fa:85:c3:64
Fingerprint (sha256): 0d:a3:23:f4:a1:f6:c2:67:d9:97:ec:74:43:af:2e:0a:7f:c9:b9:62:f4:ed:8a:c1:59:e5:96:3d:94:8c:0e:be
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.liftcondos.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.liftcondos.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.liftcondos.com
Other certificates including the domain name liftcondos.com
(limited to 100 certificates)
www.liftcondos.com
www.liftcondos.com
www.blandforddentist.com
liftcondos.com
mobilecasino.com.de
89093.com
www.avoidingmistakes.com
jinqiaolamp.com
liftcondos.com
www.liftcondos.com
www.nuwipes.com
liftcondos.com
accounting.bible
www.cartilagepiercings.com
www.metricsocket.com
www.liftcondos.com
liftcondos.com
www.liftcondos.com
www.blandforddentist.com
liftcondos.com
mobilecasino.com.de
89093.com
www.avoidingmistakes.com
jinqiaolamp.com
liftcondos.com
www.liftcondos.com
www.nuwipes.com
liftcondos.com
accounting.bible
www.cartilagepiercings.com
www.metricsocket.com
www.liftcondos.com
liftcondos.com
Certificate
The complete raw certificate details for www.liftcondos.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISBCymQtnbMvtykp4VfthEIkBpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjExMjI0MzRaFw0y MDA1MjExMjI0MzRaMB0xGzAZBgNVBAMTEnd3dy5saWZ0Y29uZG9zLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL+IJbOpzFPYkO2lsLkkUtH91kzR Sy3VTJ009NY3k2ebuEi8742trml05jMSYP1OEDcuGDmHJV9T6DIwav7zZ+jzx2YV ld1u0FGsa61Fed1dhddvpNEKAo1zu+qJjiGCeabkbYq9XWOVIfgXIE58T6SAbfju d6NVr8n5MQ3z809J2zvu/Q1FkHOmw7kCEKioQwhxRM/mmu7aw5/iksQSxP+lvr7X l1JNgF5vA2Tuho4ITMstprTEgNBhBikBeTbYSwMUJXPs6W+aQP4C/sBMU/zQHQkd Z9rUSv2qU7/0LWGkue/WSZTAE1RLzFWyCOvUFYiWpWE9IL6Pt8Qmmte2Z0RabZwL biVrAvg9X94EGwv4IHNbZP9C+WgpDV/6843ooGk6gkeRu2IokGJ+RULXxxGGJLY5 jY0Osi7lceS4k+AextSMCtzw1tVTMDqv6xQTFZsCzniRhvWdEE/KeNuvOAEbt2Ur g6wNK7yTQONdT2LxFvR9vNKR/yKueESDRrbBF1CmEM+lhq8/jQ0g2lMLbjpct+gl lxYIevAAGXktzJthUahe4UObPfHOF41uAgvS0s/yVL0VeW3Y7d0EQVEbqBGFAIIM 8lhEjc3A2sUES9jvEiCeTQruMrR4iNjFYNzL4U5/eK7HZZQ/3QVLMrinrcuGXmve n+f1oFlkgejrhgzHAgMBAAGjggJpMIICZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FNyOCsNkxhTmleAfkWjnmQwvudjzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LmxpZnRjb25k b3MuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHW eQIEAgSB9wSB9ADyAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFwZ+vYpQAABAMASDBGAiEAm1X51Vs+n6ci7Xk0fft+xritt25TS2CsqwQjBF3l a/oCIQCeUfvll0AEhu1CF3wTl+SljOES7s5fJLSGVkaBR/GZDgB3AG9Tdqwx8DEZ 2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcGfr2NoAAAQDAEgwRgIhALkYaDcP HtgDzeqQczf/+0oKKsJYQ04T4dF3nyJAZ2eKAiEA+8+x+2nyakVKLXFWfhdSXJh7 yKyH5oNTq7POBoQpb2AwDQYJKoZIhvcNAQELBQADggEBADQ6Zf92PSrIeN/AOaTt lbCU8xTLiw+ilJQy9JZ3INenGDrsCWIccG/EGMbvg5TEr/FYjSxGwh3s8mjBwFM6 cKhOh9wuGWQn+F8JofE9nuhEE2o9jaiSIr+pZPh9EOfnI4CM1HiUunwgQITAn1Gt C0SeH7z5XSNX2beoSzzBe5hhIaoqkcgYxjNagplBt/kGVwy1ksucQZ3E0GRb2gG/ DV1qY2ZrEPPkmiLSFiSte2yDc3bxDF9l5RJnx2OBjeNZNSVB29b6W6twzeginoBS blJrz7nTD+nBmbOodwGw9eXOAyQSv0xJ8Iv6p+rVJqH8Zux5rQCkVB0f7CfbLbiT 3So= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv4gls6nMU9iQ7aWwuSRS 0f3WTNFLLdVMnTT01jeTZ5u4SLzvja2uaXTmMxJg/U4QNy4YOYclX1PoMjBq/vNn 6PPHZhWV3W7QUaxrrUV53V2F12+k0QoCjXO76omOIYJ5puRtir1dY5Uh+BcgTnxP pIBt+O53o1WvyfkxDfPzT0nbO+79DUWQc6bDuQIQqKhDCHFEz+aa7trDn+KSxBLE /6W+vteXUk2AXm8DZO6GjghMyy2mtMSA0GEGKQF5NthLAxQlc+zpb5pA/gL+wExT /NAdCR1n2tRK/apTv/QtYaS579ZJlMATVEvMVbII69QViJalYT0gvo+3xCaa17Zn RFptnAtuJWsC+D1f3gQbC/ggc1tk/0L5aCkNX/rzjeigaTqCR5G7YiiQYn5FQtfH EYYktjmNjQ6yLuVx5LiT4B7G1IwK3PDW1VMwOq/rFBMVmwLOeJGG9Z0QT8p42684 ARu3ZSuDrA0rvJNA411PYvEW9H280pH/Iq54RINGtsEXUKYQz6WGrz+NDSDaUwtu Oly36CWXFgh68AAZeS3Mm2FRqF7hQ5s98c4XjW4CC9LSz/JUvRV5bdjt3QRBURuo EYUAggzyWESNzcDaxQRL2O8SIJ5NCu4ytHiI2MVg3MvhTn94rsdllD/dBUsyuKet y4Zea96f5/WgWWSB6OuGDMcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 363642566829104868127372153008992433619049 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 12:24:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 12:24:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liftcondos.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781381674856778625049314976708337195329190837278369906331462341511443441090988761547212480449891039400343964524934302131435414684828763178114439592406743880399736696243008768247532476213783907018559562288977380593186044735838853788774544121280132614855967998260452650606041891103597081098965259602611371135238452517796085392652023459576560176165941198117324040325969076084436675131891080753828819567443624582021762700024555189329612188801878249629078720747305103596078429067376662908910116110319871525783741676729779805423828823541134180441867614192341281990675319243723298985466232474769921076389236977590048260354143806671943976362655412605812492123069716169149486724268325731849096418551687506422554348648953586433608868399866189325483482019639895007120739748628989008814915203991969448027158876530301925690806915518240697445400182806707311080500514162663607975292462210323735726752694065179312382169428230525291457069649057976827977353907045322235154034486849782061017860484458719141260936095149923765314131888819189909903234665060623643211443450396980846264752217404264976381661951857967852560321617999206955842268477986547862700345683307697546470459786693466567787971005750746826155480881594230381668945969192380447351667821767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc8e0ac364c614e695e01f9168e7990c2fb9d8f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftcondos.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017067ebd8a500000403004830460221009b55f9d55b3e9fa722ed79347dfb7ec6b8adb76e534b60acab0423045de56bfa0221009e51fbe597400486ed42177c1397e4a58ce112eece5f24b48656468147f1990e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017067ebd8da0000040300483046022100b91868370f1ed803cdea907337fffb4a0a2ac258434e13e1d1779f224067678a022100fbcfb1fb69f26a454a2d71567e17525c987bc8ac87e68353abb3ce0684296f60 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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