lucasworld.com

Issued by R3

About this certificate

This digital certificate with serial number 03:74:d6:65:b0:dd:a0:23:34:36:6c:3a:09:e1:dc:f0:b9:bf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucasworld.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:d6:65:b0:dd:a0:23:34:36:6c:3a:09:e1:dc:f0:b9:bf
Serial Number (int): 301094595158453360034903544052391154334143
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:18:af:8f:95:02:74:28:2b:20:a4:73:d1:bd:77:e6:4c:9b:3e:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:ec:4a:06:31:69:76:a6:07:5e:e9:b7:13:d2:40:76:89:86:55:bc
Fingerprint (sha256): 1e:b9:54:36:2f:bb:b6:11:b7:cb:75:78:a1:73:a7:d9:9c:41:55:07:30:0a:97:86:49:36:8c:cd:34:1d:51:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucasworld.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucasworld.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lucasworld.com
www.lucasworld.com

Other certificates including the domain name lucasworld.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lucasworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkB/MnFoirZyWDAEohJNG
g4KACCRDYHyg0DtTVMmnt45sRJISGnKZ7BdrBnrB5uEbXEH772bMbKmzGCQ2w+KI
xX9PWrvPiuy73MJ+iVNbnikKuy8ybviYdmB47OHpeeD0fyeihuo1K4LxToRJwzV0
v+tE1GahNMys792nogNVbq8U93gTGDJO3BF5N5X18mJImRCVPGJzdsRuRFiWOCAy
iJdGWYJr5sys2qNQGEEyAALkIGSpLrH90jcu/MxrfhEKxzk87zaRMy0Nc4RvEkAK
dyWJqIGRaQe9Liroodb9FEvgXqAPuPpVCMkbUkDlAfHFoW7VUP/w3mb2K1weeKD+
VS7/sZB2fRDZZMLRPAx7XGXqaGje6PoKWA6yVJYL1QNd6/eDAhB0yPkjg3nBIIzM
Cq6/vupNbzbz1FAG8kY1M56AEhKzAS3eLXY314Ey5LXoP9ng75uG8mP/kbmy8t2Y
+PkaAXKd/Gb9B2TkMOlgZTRdk6UoHyMn9MhMt0b7cOrIKLo2GDqTcsUrNJjfQdFG
G6fHCzBXK/5/zW2cL58QQCdaOCna8bSoiNdlEHZ9w04674sdayIg/330Np5rblhO
KxrxV8nU8f8VJLG2ZoLVAqWs7H9OYNtqvu1hh079pDNHH1ooHhvS7B0AmVduFThd
tExQGAnCHpdatOHwqcmEk70CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301094595158453360034903544052391154334143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 15:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 15:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucasworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 587975502300601392798939832113468185539993441585033437423593904892347230584862961411930608464793401908371789945305443274192890944643696442856430262781237343780773786262569439582575045416828697035418439124332372542115655358135624466485470030751883275599038380082944572560676699426257891009554921667739784578277876955246139435858023186778873926759753570719189222149185562186509592690975270267838640842865299679773032429500540703238614082926857789346820781606908778021961397974150893747496465090727985261477301851086858743979800135244383447540076014873997989799121845047123861898438823900025940477953912514072196539704049236485360247757791497575805067045049793797006869271175369132384170783753891291905234465724045853205556581033593072137985790759065472161546873493355885586893624337406778866210161908907063376586332056663443713535491522219100887950568897477945918066460797526627527464215028596148573444409153822692253317006549563779652942263329757937082810657043143102608377722013115218855371347082884920327533602006117526341454063496416634498375558935439770231727924836430192851514815061243389664661842419389598876277151845829014979872867360813652025080910757789178841893501869915353088619098760487604634656568564663349052037595960253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3418af8f950274282b20a473d1bd77e64c9b3e89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucasworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucasworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9a64f12d0000040300473045022047dc67853972f2b91c58ed81ede0c8035fe9d4796ae40eeea0eb76aae2d4365d022100fc297ee46a41808db5071f260b6392e180b57a6910df237f23744a4dae4de57600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9a64f18900000403004730450221008f3f8b633e3aa1b8142c5b1f2748fb9a026a3c53a47e6a9c840193e320b01bfe0220239f047f39537bc25c6eadb4bf0c72e6539b6ab8802f3bf591d6704d0d193391
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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