liljegrens.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:dc:d3:31:d7:57:b1:dc:3b:19:2e:b6:b2:6e:92:6c:d7 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liljegrens.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:dc:d3:31:d7:57:b1:dc:3b:19:2e:b6:b2:6e:92:6c:d7
Serial Number (int): 263331796374494530333091039919362372955351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:09:ef:58:a5:c9:4f:c7:7c:13:0e:6e:46:40:44:f8:63:0a:27:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:62:38:76:3d:ee:4f:8d:a4:5b:72:e8:c5:4b:98:1d:cc:13:cc:e3
Fingerprint (sha256): 17:9e:c7:ba:b2:82:43:31:11:9b:5f:76:00:23:2f:ca:9f:75:6a:85:a2:da:72:57:2b:de:d1:84:ae:ee:29:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liljegrens.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liljegrens.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b108476.web05.cust.bluerange.se
liljegrens.com
www.liljegrens.com

Other certificates including the domain name liljegrens.com

(limited to 100 certificates)
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
u384635.web03.cust.bluerange.se
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
liljegrens.com
u384635.web03.cust.bluerange.se
liljegrens.com
liljegrens.com
www.liljegrens.com
liljegrens.com

Certificate

The complete raw certificate details for liljegrens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263331796374494530333091039919362372955351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 17:30:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 17:30:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liljegrens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757529955151342139524898338590374350733590344487431889502181809080210532333069964165551667011188805136389624401229882791434972294850448611971383889643481359724663910125276905256616592844422080510825531709639318436353344229370584751980197934129208182498383744244274664718713090085009344743384384756632160324832698118533103391700862894735209627355641162859296048131065203872478567892533333680887709758173960043846903844611542810111127898200677154487992493186302023533998961196385393525160377262849583243002927234602149058841143224410083752238021164378515109508422642487301880020193809045459497168858265694012675326077327070578235319550243313612202594402669794649932818268847608835640488652735110943069834750212485779261873650570588020746357945463874442240528108589075375325910339038316379236467254719138389184604839725822861341637925619366339004679488642443407861801288093831124716939264860069652655160295281412730246868399718714735363077318070327554123379147952495867943907132957162029712442497221932765378576975744234280513094584646311748158734622341433628073109062850510854878334163916783506097006909364578387680807576214573550234847869512430914852726333237430563226723632831695325796659816097656794040387060731652511513984410655771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d509ef58a5c94fc77c130e6e464044f8630a2777
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b108476.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liljegrens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liljegrens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017108a9510200000403004730450220769ea71e0279e2672933a66ce85039378b0ff383741c7ac047c5e69e4076f78a022100be1b7a468431f81240029808f3043c4914ac75dafd97787eeb83f7540e1e93a9007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017108a9510c00000403004730450221008513e2292ec67e4626189ed6e8aa17e2a3d679d79862c5ff3c94cd25d80b1bfc02202ff3063d24d0a8a43ebd1feb38b1f5847225d38f3a7fa4485f76268a5a978bf1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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