gemstateorganics.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:c3:39:70:e6:e4:e9:95:c0:c8:fd:46:64:e1:80:fe:38 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gemstateorganics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:c3:39:70:e6:e4:e9:95:c0:c8:fd:46:64:e1:80:fe:38
Serial Number (int): 269422849944484517636332368725553455365688
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:54:99:db:09:95:3f:59:fc:4e:44:65:a5:d2:0d:8b:71:a9:8d:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:77:2b:6f:a2:b2:8c:ac:6a:6d:fa:8d:b8:5c:66:83:4f:68:0d:e4
Fingerprint (sha256): 27:f7:ae:3c:b1:35:69:61:d1:2a:23:e3:b6:f9:74:f9:08:05:bd:cd:c7:40:2a:a8:f0:ce:ef:2d:b9:ea:01:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gemstateorganics.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemstateorganics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gemstateorganics.4kcod.com
gemstateorganics.com
mail.gemstateorganics.com
www.gemstateorganics.4kcod.com
www.gemstateorganics.com

Other certificates including the domain name gemstateorganics.com

(limited to 100 certificates)
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com
crexin.4kcod.com
gemstateorganics.com
gemstateorganics.com
gemstateorganics.com

Certificate

The complete raw certificate details for gemstateorganics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTT9a/Fo+BCvGofXwSdH
/5lWMJEsDtGSPkAJtM8xF8Ld4GPe7r6dAxXgZSf7SnKovfrJt53+YKfYHrXqzQSC
m5RG2JjIt1YNw4H1xPup8KZsaq4JyTOsgtSF0XrzHR1ClEYuEzdu8dOnZrvbtUCT
x5aBEWO4UlLenfXLQ3l/X9AP7uXby8LSStIZARp99BCMb/1Tl8ueHUovjckjl09w
DwpTwfEMmBSQCBQjQ2lw4Dh4t3bxlKp4ezJFEhzmUeW9iIEm2iyp07SzAgKaGQl8
1XZK41+LdQA4kwxteshChk8I7yhvA1uGVwFbrH96Yx3Mu7g1FGkWhcDHt8Etmifx
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269422849944484517636332368725553455365688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 07:58:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 07:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemstateorganics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20855450626948892422491937277560129154181592863357384937031482974951585237039472745894331678016671764070718460312330999480409509452221222473263728197885634693876848321946602021891062811520443953244309350556150083457451292751839536782748778291708046506005117188075346413853153448540069357566318264021778103141916643813709744087117121806352695326945216164568036551050726844234217582194232189258998034747775854461374623574473061245240863573253899500736780422042468540162823170693188002356576561238813183652557307987627023213757600674590399646136982798778593513831634475684055013210434257706027450062519845952947856339303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							705499db09953f59fc4e4465a5d20d8b71a98def
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemstateorganics.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemstateorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gemstateorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemstateorganics.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemstateorganics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a255e7e950000040300473045022100fbf38b08b7426c4e5569a1f8d94703246f9a400f7a57caa5ae0b0204328f1ca90220257231301703ad8cf66c540a55d9a0a942c512a7dee83d072bb513e7773a32cf00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a255e7e9c000004030046304402206063769563873d70bf180c8b810e6099ceace24bdbb29600fdb83229335db4ab022060ec0dde1c24ca184db2234d792eb4eaacc4f9b2ac60622ff0c621fadad082de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009425b6e6ff7042d4159abf6d216499b97e456a40454a04a4f48d93b2542cbe2af37b658b6386165a8451a47e1b89bcd1682736126bcd1cd3afe181888fc8b774f7d0102718f60e9f92de49b8874990ff2c6f687dc29a865c85bcfa758d7cabd02e3fafc0395fa8a02f2a5660603cfae2e6188d53750c514f2e6de6aa21d3684bc8a23cc20d237a8378cbfa8d897d67d9b26ef3711979b798b832400b544403eedd24e3af584909c2fb44d121be2f614959f2b19a2766c92cd4238e5f881133734eacfd69637c19c512ee4e2698d04b41b84d13cac1e30e3a3140a6d7f009fcdf71109d2fa033a641e4317a88bcb77b62c98c1c4824890a3bcc3f4916ce46bbb5