legrand.ai

Issued by R3

About this certificate

This digital certificate with serial number 03:cc:f6:18:f4:af:6a:ac:ac:17:c4:c0:2b:25:63:a9:e3:56 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legrand.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:f6:18:f4:af:6a:ac:ac:17:c4:c0:2b:25:63:a9:e3:56
Serial Number (int): 331081580312045766516968906054262793560918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:1f:98:3a:12:3c:fd:f0:f8:cc:3c:de:ed:ae:f7:8e:10:1e:4f:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:90:cc:f9:de:cf:5b:4a:46:8e:e8:ee:1a:86:3c:d4:04:70:e2:69
Fingerprint (sha256): 5d:32:10:fc:ad:dc:2f:36:07:e0:b0:f5:74:1d:74:ee:d6:a7:e3:ce:26:3f:57:d9:35:89:7c:ed:5d:6f:85:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate legrand.ai

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legrand.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carsofbrighton.com
cyrela.com
endlessproductive.com.the-i-team.com
endoftheworldshow.com.accessyoursoftware.com.lagreenscreenstudios.com
graftoncounty.com
instagram.allyskinbar.com.coloha.com
legrand.ai
llanocounty.com
optionsschein.com
orgblogs.com
quebecsvaccinepassport.com
readstown.com
webstoregenerator.com
willacycounty.com

Other certificates including the domain name legrand.ai

(limited to 100 certificates)
legrand.ai
tcta.club
isupportlife.org
legrand.ai

Certificate

The complete raw certificate details for legrand.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x64nD3yqcM3KVNSa6YN
kNEUPTDU8co+bIHH4nChIp1FoaqcbxZ2JY7zGqbPZKXf3lghIPTy1M9G7mcl0Kkh
vYEdCoMzJAVNdINd4sjsNZPCgXDilQc5aGjQGpn6aeyd6XPoXD2+WmibnYFn99Iq
zAI/Bgddm7sizBk/dRd54n3aGX10gVSqIJDiuevGcmTDeRcTDQqRbHw5wO9TMU7y
LguJ12VKY6RnW9gEQ5RuatPRZKVtCNCrzr4xVKBg6f12Ej66T6tRuzK7ptw0+6IX
FpuKexxrJYf/siUDyJTjYDTI/xVmZfKGgSjcz52ceKcW9NxigPj7nSUL9LMvCxAB
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331081580312045766516968906054262793560918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 17:36:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 17:36:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legrand.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27156384723526073778129121658119288622595781144865423446883771853557122771642675887170569502711642737889425434165865007220684154831294611400280529345236663858648185591989866701543244455200369548365042020891437244285683753079403267789473479226574730039440246722844449220378483057795038870322495948985410567187095899750247371723841292406615634343850160125558225930651383129215181692637081309331237708150353991603111219097037726508332863183076846698266105145266774012466684185508853655651228527610130336200262687621987740797873731978884490776472612780033863737896755675674993598763831854848422794912001125755983143895447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							121f983a123cfdf0f8cc3cdeedaef78e101e4f60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (349 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsofbrighton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyrela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endlessproductive.com.the-i-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endoftheworldshow.com.accessyoursoftware.com.lagreenscreenstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graftoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagram.allyskinbar.com.coloha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legrand.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llanocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optionsschein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quebecsvaccinepassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readstown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstoregenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willacycounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5f514e930000040300483046022100d48d9dc79068f3461de618a238dd96fd827ed2764e821fe6442be5cd32c41e25022100d6b3166a30c9835edb8e7e6f7e8d4a6b1044260f2e93991848d0d1143384492200770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c5f51500a0000040300483046022100ae9bb856ae7c19da54e68e91685680b181c05891afd4d2608ca58240412bfd47022100b83132c759d2d178f41051dcac700ef6c1f95bc9cabfa35b66e4c152db88f568
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a5941b7d5a8a75ea0c5f7a7679a797d4d6ee2fa50677bd5d2014cf980e6d45d464fe1eca8caf76a15308769134d5e503ad9c885a4e08c7eb33cade32de6d87cd0c87a0e1c0d94ff5c1c6fddea1d0dcca67e09830e10791b46f46900ec9961a5e9cb5512ad8821c9fe0a76a2026b2f7ebfb18119e497ace15fa47d8a904e9bab353e862f764857a7a2539d501377cffb18f694308df94c2ea35d1682a461780c9c6eefdd62a55e50ee3c5f32e7f6733b7693e30ccdee127d20eadff6578af8aaf40ab53caea6217240dbbc896014818892f1473905184307ea143b4d50ce292e5877a29c5e435d5d91085e3289f74916a39e36477b6f01c9b54f0e9952f4733aa