lemongrove.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6e:98:e1:5d:29:3f:d9:ec:8c:5b:12:79:78:01:a6:07:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lemongrove.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:98:e1:5d:29:3f:d9:ec:8c:5b:12:79:78:01:a6:07:04
Serial Number (int): 386083416900028903928643987813471053285124
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:da:99:35:b8:b2:43:f7:dd:05:72:42:8e:c1:8c:cd:86:8c:73:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:07:d2:16:75:86:f4:2f:2d:1b:82:6f:37:a9:6b:ef:d0:05:2e:1b
Fingerprint (sha256): 42:7f:a1:76:22:72:95:24:c9:ce:7a:55:b4:4e:57:8e:e4:d6:51:81:d2:fb:d3:bb:e7:33:26:a3:2e:c9:13:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lemongrove.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lemongrove.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lemongrove.net

Other certificates including the domain name lemongrove.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for lemongrove.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISBG6Y4V0pP9nsjFsSeXgBpgcEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwNzMxMDFaFw0y
MDAxMTEwNzMxMDFaMBkxFzAVBgNVBAMTDmxlbW9uZ3JvdmUubmV0MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArNNJX3ESvtYT2tQv47AN3wjSP7KP0t4S
JGFHyptFZxg6U3gX8Qb0ePVpjCFDRQ+ftp/0ep/Yjo5dpRtnAUsLU+XWXXdOelTz
mSgT+hbj2Mw2TRrbGE4XaiBfZNYRxHI5mqRlS9o1+h0By8Ee/fuTL0KD4TAcg/p9
JkXDKZ9PTmHL2cEySnMzt5xQOvdIkEO044VQktoIxt9XKffLDDdpIlMqfTDyrGR5
8K0DaAQ93J5szCrzZYRI0qNoeJHRcFyUv8PALw5tCwbkoFzsInnePFhNF45zB0+l
l13BMN0vfNH8Uy2bRMS4k6LcAEpDQ5CsaMuDMmIApFAwinItqoLnxj9zfoetTZ36
vez8kXiIgxGVnyA6bCov2IIogTkcYNpj+O52OBH3cr5kzewlvLM5NvpUhXUT7SbP
i6s8FQN8VsLXxUhYiqjeT12iEdWchJV4NU8PAestNGq4KKzRroLSD4H2upnaS+8K
wvqqWAcbsmEYgE40tSkjutsDS0mGrkAEI4ERBsIaU2+29DeLL/UKCKwuueeqSqTQ
oyNpZcyHSf1mBOGX8DknbzA1wXZr/gqyGsohj4mRgF1tcvkcwBuOQJ234x0/YIrR
vhlkysZ/u0hMl0iuhZdRQG0kcfMF2gd+a9w3n6aWXeQVGIJTYh7VLIRjyd09txvw
arL3jUnW5MkCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZNqZ
NbiyQ/fdBXJCjsGMzYaMc5wwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5sZW1vbmdyb3ZlLm5ldDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbcQ+A20A
AAQDAEcwRQIhAJS7PlcD/fEAohYQLeYZEP9+S9WuvvXlJkRmQ0+xY3/cAiB8bnte
TqEFbXmsKj0qzV6nO5jPU6C6lIS9nDJ8IAj4pAB2AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABbcQ+A54AAAQDAEcwRQIhAOmhukMcFsUSuCIM67x2
yZVfNGygIhm+SblO9RzqXyuJAiAQgKi7iMyypPLYik7tMTT7ahsnVRf7UDkEXFwV
botVljANBgkqhkiG9w0BAQsFAAOCAQEALbALRxGD1dTgPWvnjDIJDlc9TjRZ2wvT
h3pyqxd8yCvsmaGyPloCU7ByNSXHcwb+eWEEpQr/gzFQZJHc6zZ7ibFZOjSxRnHb
TakJVnlYaabEEPYlbqsXlNWUT8ZYgjkBP9r3qyvULyWzOX0kNm8SAc2tqpUPbW93
1u3PwKeE1wyjCJQWMg0wC8Bck5ZQfWHjdEM6tEXq/Rrt6ipnD0KfDgU1qqsviGr/
KDwdNtMHqRPFsJbztrc5NUmeBajGRKRlTWIwRkZd96Xv6E2YeKWtnMT8Z9LcSYWC
IgljNI1It+rpGSEFLuVhfDD/L97p5qwlBkLwnQkLqpdc6jSr3PetDw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArNNJX3ESvtYT2tQv47AN
3wjSP7KP0t4SJGFHyptFZxg6U3gX8Qb0ePVpjCFDRQ+ftp/0ep/Yjo5dpRtnAUsL
U+XWXXdOelTzmSgT+hbj2Mw2TRrbGE4XaiBfZNYRxHI5mqRlS9o1+h0By8Ee/fuT
L0KD4TAcg/p9JkXDKZ9PTmHL2cEySnMzt5xQOvdIkEO044VQktoIxt9XKffLDDdp
IlMqfTDyrGR58K0DaAQ93J5szCrzZYRI0qNoeJHRcFyUv8PALw5tCwbkoFzsInne
PFhNF45zB0+ll13BMN0vfNH8Uy2bRMS4k6LcAEpDQ5CsaMuDMmIApFAwinItqoLn
xj9zfoetTZ36vez8kXiIgxGVnyA6bCov2IIogTkcYNpj+O52OBH3cr5kzewlvLM5
NvpUhXUT7SbPi6s8FQN8VsLXxUhYiqjeT12iEdWchJV4NU8PAestNGq4KKzRroLS
D4H2upnaS+8KwvqqWAcbsmEYgE40tSkjutsDS0mGrkAEI4ERBsIaU2+29DeLL/UK
CKwuueeqSqTQoyNpZcyHSf1mBOGX8DknbzA1wXZr/gqyGsohj4mRgF1tcvkcwBuO
QJ234x0/YIrRvhlkysZ/u0hMl0iuhZdRQG0kcfMF2gd+a9w3n6aWXeQVGIJTYh7V
LIRjyd09txvwarL3jUnW5MkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386083416900028903928643987813471053285124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:31:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:31:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lemongrove.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705065866323064336210526486667309459253747140608182354858212460406326574376513509885137394034956676863977292413464298764221030505273324030248606102156185058399716656365718807682879872865517229868997720461750750026902398214539245332031190184607731355663629053346778080403462945935148344222980648957854234663850503464503469018155096019782703441190219670418045972663300755795598444093654073706213452127790828911005724849076390100610674998272737432939497388446115431980653556846614480136534019059546097628958532451840356943510769854006436023572327837914162210836977193894533583584027632088877653128655071602040036835960333066562547160594206139995066589434057930769650609333252866456816005990912773825653747305518414883644489265485247253505320259045675013524309014955505906084923289296151398618204171927982137322644133879669013742975951078993184185049554361830494605714461944860812700252130826056971837669051871741628432285712782618396450315811034910178752647063925470160798686758515602236485073800730236748242379022980619309276900075342286640023517513340431315493289131573173328005362991520442719598227355504548017626773192966650900323164507478529008308087322729619162325466290032106730619726252734465739580929786125354216726097976288457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64da9935b8b243f7dd0572428ec18ccd868c739c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemongrove.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc43e036d000004030047304502210094bb3e5703fdf100a216102de61910ff7e4bd5aebef5e5264466434fb1637fdc02207c6e7b5e4ea1056d79ac2a3d2acd5ea73b98cf53a0ba9484bd9c327c2008f8a40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc43e039e0000040300473045022100e9a1ba431c16c512b8220cebbc76c9955f346ca02219be49b94ef51cea5f2b8902201080a8bb88ccb2a4f2d88a4eed3134fb6a1b275517fb5039045c5c156e8b5596
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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