www.lemongrove.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:1c:87:f2:e7:18:b1:5d:ac:5a:07:02:1a:e2:cf:d5:a1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lemongrove.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:1c:87:f2:e7:18:b1:5d:ac:5a:07:02:1a:e2:cf:d5:a1
Serial Number (int): 336577185155418491898413143658725632890273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:94:3a:90:ee:2c:79:c4:06:ec:e2:d1:c4:ab:a3:49:f8:96:2c:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:e2:76:87:66:1c:8a:e7:0d:32:7c:48:4e:87:98:e7:13:30:a6:f1
Fingerprint (sha256): 3a:67:83:f6:b2:8d:9a:63:0a:76:df:95:0e:e1:d6:5d:ee:66:66:48:0f:bd:98:73:4b:35:45:6f:6b:6a:dd:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lemongrove.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lemongrove.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lemongrove.net

Other certificates including the domain name lemongrove.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lemongrove.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336577185155418491898413143658725632890273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:30:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:30:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lemongrove.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918020591505417913149076407103981050271966474190680282581817010692228023803011085494765200385304678668150425335149346546941140230747695838207104283596453182104305278189324148158175245467970987598257955953232922014647251235042127221829984838966061227714911333189607301546038684326724505415059020593641878151435607288415388613411357488987637943338803891475045887944324549270199121604241665812373059681675557335208628524404095908333407276001010899954692602634347523011450405875547037320079727144534620829126157291520437965343194148232738299838677193370074336867799090039536033064725955133668056789241372020986750254436812448237880219157169352353109476746214028436168012759226420781841031411417871350343494254410744874519100240545351105543381820943834867796829602726297649581559565038299268031664284161874284131482562800658663089538545069242769893207385776482218764221193085440110171077771273912415163559415401750646625899516021696087233760701801912077137023963285822305867608993028263315909458486699249523326621211180329502452859422180679190981146420931268889648084759305094896553604181661490849796895839226708876403830279355666061684261816574200934587151392705232905416965451013731911013514280581377999706620613779366554059552150706739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2943a90ee2c79c406ece2d1c4aba349f8962c6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemongrove.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc43df53b0000040300463044022024b5cd6cd6f89f1797919f4c6e11bef8b4148fc51ed3447f22a910fe591e25460220314095e4c5fd56a978aa2599c01abdfbae4c76f4adefad37734217ded62fedaf007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc43df554000004030047304502210097d17c5b6725ab36afdf1ff6497f33f734c0ac7ada41d3a0edf38f80f8fc2f7002200a8ee375e736eaf2522fda3daa13f84ebeb8e8e5c089450f111c71c4c4f8ef67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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