www.granseola.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:bf:35:19:19:87:fc:51:a3:86:ea:86:da:da:39:79:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.granseola.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:bf:35:19:19:87:fc:51:a3:86:ea:86:da:da:39:79:07
Serial Number (int): 319439018419851729671543340672643403184391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:4e:10:ac:d2:34:31:19:f9:cd:f0:39:43:4f:e2:4f:62:0d:66:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:a5:b4:56:6b:b1:74:04:ff:36:ce:f1:cb:ce:d9:d7:e6:b1:a7:da
Fingerprint (sha256): 32:d4:17:1e:56:05:ac:b5:c0:8c:ef:2d:bf:fb:c2:ee:73:f7:e4:05:24:c5:76:da:d5:5f:fc:9f:49:ca:4a:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.granseola.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.granseola.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.granseola.com

Other certificates including the domain name granseola.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.granseola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319439018419851729671543340672643403184391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 21:12:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 21:12:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.granseola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783421726060025164976007883265244108086336464497749466634548770033756539239399621511601977137825561949934856125936173799241613456016028601426061669929584468427688048100012771905545016741083853542859514909460866832711678974659360376203326885789223569301397554370568229904399342835097947992765269933587179729039456303983130996065843679005004852007525185958212613422228975686602458453689378792061013199843418778932829796131519081988214502720697178989682588862203751111193608791313285163192216225006617237657098220471421914494395048194034853318061752996282968950394418832332154170451172451622234534184605256868471329129889488258023096422804787650559195030717911602958215510506443385431665623577714591101865682419141757724694293085341766315594489934300848177346097920173309258009948560496122357192638632866434733354787174788387097209903675810098762693127920556089767791742365510620898133023925526879642593708413615714292636933281336471805405782855278512619906824297101371135936754116696844095911524113012964835556340001782569662859794445225092071241168637705816226381735060276084090296719207708086279990117170723812610632053245700043718693222773056000418567723744607074882666781933024564022504553417695083324357074248255181153192228968471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd4e10acd2343119f9cdf039434fe24f620d66dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granseola.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afb5a06c000000403004630440220576af5a69a8dccfa25d42410e49f971312c18a762830ed3c6062d6ab769697cd02202fe8f04d09d6dc319a42ce27d8f1997cd8e11162c60f275bdb114af7cd025cbd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afb5a08bc000004030047304502210098e43a1bbbb7d331415459f0d9c8a859e5a74da1f3da7291c795b93e7ae1834c022008bc99b2b00d2a6324558dace8bd12bc15337da7ec44a48c9bca2a62852f3adc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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