lakeoswegojewelers.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2b:9c:5d:91:5a:6a:27:85:87:c0:b7:83:3b:f3:40:b4:47 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lakeoswegojewelers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:9c:5d:91:5a:6a:27:85:87:c0:b7:83:3b:f3:40:b4:47
Serial Number (int): 276176844971944164829442222652202533565511
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:dc:40:8f:3f:ad:37:c8:36:2f:f5:24:19:b5:db:b8:5d:bd:64:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:7d:37:3c:1b:54:4e:ce:b6:e6:c2:1a:33:06:14:04:28:82:5c:a2
Fingerprint (sha256): 56:45:63:6b:00:ce:28:cc:74:a2:66:bc:14:88:45:9d:a8:ce:f3:c2:a1:67:41:a9:e5:fc:65:8e:27:3a:b1:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lakeoswegojewelers.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lakeoswegojewelers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

framedbydesign-us.lakeoswegojewelers.com
framedbydesign.us
lakeoswegojewelers.com
lakeoswegojewelers.lakeoswegojewelers.com
lojewelers.lakeoswegojewelers.com
mail.framedbydesign.us
mail.lakeoswegojewelers.com
mail.lojewelers.com
nwshuttlebus.lakeoswegojewelers.com
nyepdx.lakeoswegojewelers.com
popvideoclub.lakeoswegojewelers.com
savethistree-org.lakeoswegojewelers.com
tastelo.lakeoswegojewelers.com
www.framedbydesign-us.lakeoswegojewelers.com
www.framedbydesign.us
www.lakeoswegojewelers.com
www.lakeoswegojewelers.lakeoswegojewelers.com
www.lojewelers.lakeoswegojewelers.com
www.nwshuttlebus.lakeoswegojewelers.com
www.nyepdx.lakeoswegojewelers.com
www.popvideoclub.lakeoswegojewelers.com
www.savethistree-org.lakeoswegojewelers.com
www.tastelo.lakeoswegojewelers.com

Other certificates including the domain name lakeoswegojewelers.com

(limited to 100 certificates)
lakeoswegojewelers.com
partyrawk.com
framedbydesign.us
framedbydesign.us
partyrawk.com
partyrawk.com
framedbydesign.us
lakeoswegojewelers.com
lakeoswegojewelers.com
framedbydesign.us
lakeoswegojewelers.com
partyrawk.com
lakeoswegojewelers.com
partyrawk.com
partyrawk.com
framedbydesign.us
partyrawk.com
partyrawk.com
lakeoswegojewelers.com
lakeoswegojewelers.com
lakeoswegojewelers.com
partyrawk.com
partyrawk.com

Certificate

The complete raw certificate details for lakeoswegojewelers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LaW8MdVMIIGvj2UU2Gd
Q+w+V2LJqDe63GYgEBJRPgizWM13RHLHPsTHeICDloFQEXQjexn73mOJIvguSR7b
jA03tyABQJYnntr9FFEcjLTi0XPuY9DXZ2YKEzoT7tsTSDK6+VOnR4QbV2G9Cxul
wHgiejTajbQOxlX5kocIHSCsweC0dD52sfrbM2RhtaoYNRfJxCRYYJNH+IdJ+STF
XUG/h6e8CZYrGul78XVRiftrIWc1oJG+W6KSaZKGPSHk7bmm0MBRVe7aM+ItRMGr
fSmZs9TdEHtyYaXyEroMbtVt9fBQ8axSQZT2cJs/Ft4xhX5qBhZ/wAic/WMEcMC2
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276176844971944164829442222652202533565511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 09:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 09:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lakeoswegojewelers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27357512165867788178962847645939039237585517622284366802699735130082538017269968330685060311502331308133272973865760936624046868798010036595079179057000119982388019525808549137657978804116117225987830411554612391680385755057083575429341774069743979020841131683360773408036506914124051126089382683858514636427680065029920186825400145568788687376556264881510803891963349000459215425407991937527525775042217275663894178528917135396292461536961825013110710286782271344184225847693721351098955800985113763689440205299365174112087365408069559248326139060549417546622389600134207115918801828729608532724454640599518188451457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1dc408f3fad37c8362ff52419b5dbb85dbd6453
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framedbydesign-us.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framedbydesign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeoswegojewelers.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojewelers.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.framedbydesign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwshuttlebus.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyepdx.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popvideoclub.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savethistree-org.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastelo.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.framedbydesign-us.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.framedbydesign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeoswegojewelers.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojewelers.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwshuttlebus.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyepdx.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popvideoclub.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savethistree-org.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastelo.lakeoswegojewelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f2c8fdcc0000040300473045022100e08467d588cb1e6e3cbae8ab8b25657591c0b48153128a92c5b1ca7832b17690022069c26e981a08f41dc6234f7c154f2c1251ec62f19b3892af69042e4b39407851007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166f2c8ffa40000040300473045022100c15b4618a74bda27cdab71fc41f25fc34d7a70571ab1d4f5534eca46480f6a81022048a60964f2651bbd13aa91f82e585b5b326cbff98c38b33b537d1ed715b9190d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080d6ca13d22074b88f6b5bcc517597acc350568515637241c54b8a51a723cb3349c5183630e34f7ef34c5b29bb206ece7c41a4c85445f914d7ff06626c2edc7d1add43929f20ed35552f6f8d93367123c4287d46588d90e83c12bb9a900ecef2fdff5bcfcf5f98a421cbe0ea01418b2100922320241d208049103879cd55d49761196944e07bbe21a36d4cb2f8c508b05e174ee96b55c36da72d49975fbe7e8c359ed645370abea635daaba5209b2bdf537c9fe346eb357f73f041afab3b34d0a01d5a35e3d0c3beee03921d3df5ead46c98d74190c90156227f239756094fd60c6ef208b428ad3a3f4d4385ae393f68a6729a6fa845b2e10e595b1429379031