lucecounty.com

Issued by R3

About this certificate

This digital certificate with serial number 04:62:92:24:69:c4:55:12:12:84:36:18:50:16:df:c0:4d:ee was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucecounty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:62:92:24:69:c4:55:12:12:84:36:18:50:16:df:c0:4d:ee
Serial Number (int): 381991072040572517287307129406995403132398
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:12:48:e3:c6:54:19:ff:1c:29:04:c5:20:5c:4c:2f:6b:21:2d:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:04:3e:9f:fc:a2:bd:88:77:9b:85:7b:b8:a3:f8:c5:05:7e:01:8d
Fingerprint (sha256): 44:0e:74:2e:0b:c5:54:09:44:eb:59:46:09:c2:b5:a8:19:28:c6:a2:80:94:23:2c:4a:3b:14:67:ba:99:0f:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucecounty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucecounty.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lucecounty.com
www.lucecounty.com

Other certificates including the domain name lucecounty.com

(limited to 100 certificates)
fluvannacounty.com
lucecounty.com
lucecounty.com
www.lucecounty.com
lucecounty.com
lucecounty.com

Certificate

The complete raw certificate details for lucecounty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381991072040572517287307129406995403132398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 07:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 07:07:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucecounty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697926458791421939709290370859506663715944584613997420290474802148976038014230534290764968870895521028340118902394144800299396298852206400016899324391019394728767154674242803995243046028636148911742468927346321232674307290129575775809981508839804079989330495506592151206921535897718349549447659297161983628274881999373684944616532748957768956265347008700195492717475125565102017551641667801956488597401940758547867731348289241767471534621288550207315344579634843045481648189850645067636428676317396143236786214199702387210260582519787307262817897946558193398681585512926515142946418201997633958473371036040946829917033190754515639673063660319482000183064088746494670389068000860410849966900010417301000426211954581115403765665365478469527851529051704184877649242656636066675183174884864813373309307969967187870749848937605842979781721809392812875703360141371298436907584529858600360752022602963981750322971430698196845225393593302802483456926324962963246857731904771826609825810726540682657907015247170107477593360395666056606494131237704595613309830229860652894050686021943084514566064680925905229530425766535403786343185792596817703519767282212141417993948823697836172741190552705611485643354263583770480893112045799069723260078927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							331248e3c65419ff1c2904c5205c4c2f6b212db4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucecounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b092da85c000004030046304402203e36bb6d4a6d0bbf0df3cf26d1bc57c0e5fd12c92a4398ec432abedb66f7215b02200468cbd19781d286dd651c1ca425e1683c1e55e3d24c3db3a5d4ff806e244b3400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b092da895000004030047304502210092d6191893138454ee784facc6b531c006fecfaba04fae0ab54da32d1385f93902201295ad882f1da0c518ff3c24a9fa67f77a7422df924b7edd53324ffbd1dd19c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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