growthneeds.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e1:f8:27:dd:ad:44:d9:bc:86:d1:27:8a:90:fc:8f:cc:ad was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=growthneeds.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:f8:27:dd:ad:44:d9:bc:86:d1:27:8a:90:fc:8f:cc:ad
Serial Number (int): 425342531822924585590361977110218411068589
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d7:9c:e4:92:b0:82:b9:57:bb:dc:2d:aa:70:d0:35:1c:e1:68:4a:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:ce:4d:a0:bb:77:11:7f:5c:2f:5c:e7:3f:15:9e:02:5a:9a:62:ec
Fingerprint (sha256): 35:2a:2f:2c:fe:e9:18:25:d6:60:14:2b:da:75:c6:14:04:e6:d7:5e:47:ea:4e:33:cc:94:51:c5:a7:bc:65:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate growthneeds.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for growthneeds.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

growthneeds.com
www.growthneeds.com

Other certificates including the domain name growthneeds.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for growthneeds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425342531822924585590361977110218411068589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 17:34:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 17:34:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'growthneeds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867072360712946897614271963427533826335214404169370269727525064708573243313827040258612353658008571787007444218475205062679374668018040287054799052001089119148743470025295231585760186248775169491311233601959068390219091717120923970443389951882497087338578149353824876311639319790425655695006851700270366307444504255473508661966189469260322526232989404729068631350028616517093962687203211146554649973082435950362322361505886393364959905405908719483102997670057001544481881871034314599224756039898755834541718541700349861301750804545283963161809907907838278584246453679571189091058645513001051193651367262848534898155684637316105246693661812837797944312195189688016788724424710934356286774743959353316279440254841113855415636863757813244186071294395770751267375600152217568320179934385687142144641605806012901736827657245362741547496371872664011851591563522965874197659212580397036616608300752936733906795253328109725999496067913211720197016661917028360766376279178005869730252889786872254898859280387449018513065753929319116119032309769820046745140744988653492195543035070780124089230783318583187712708373148972724542367538026119612623812139760877179447923790279748532116786698840785830624336479961115545782438127228420435081627807961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d79ce492b082b957bbdc2daa70d0351ce1684ac3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growthneeds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf8688a180000040300483046022100f61e3718eaf94ffa03c7cfce1fcab061b433f7c0a32c94b09c751c6e8876cf88022100f8521bbfe51cfe717859d89fec92b36cce2ff57ded4a4d65638beb87ba6b942d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cf8688b050000040300463044022074648ef5069102e47e59678da36484a9c985ea4c6cafa9234ddec7f1db07a7da0220514c169b69efdbb01b62b9ed207c36a892bec527ab0bfb62a9560337661d95e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00568ecc9717dcfeb11cc42661d1e1ee42ed303e52dde1773aefc993f9868717c5f7800e58404ea8ae95f07464d5b445b3726eaca79037bf63e85ae60d93a1132f0274dfb582a578caef2251cadb4257f0febfdb7a3456b5b2e957aa3c7f307d03743471013ef96aa9cbeb038af72fd488131936eb116fb184602f6de8485e8b048fd1907f7ab21dc9ca0ab2cc07b73da725431669f920ebab57264fcf4289a298acbf2107861adcbd35b4954c24ee0b85bd90aa3f9008c109173594da6d4c9081f7ba053e72314e6dec0100f4360bba275f76477ce71b845054690fd7e691c78e6c4446e621167920e2f5e066ead7d107c35b4d1a02339a273d49640370e898ac