grana.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:d5:c7:11:46:f8:d5:3f:ee:30:e5:f2:63:d9:d3:4f:09 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grana.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:d5:c7:11:46:f8:d5:3f:ee:30:e5:f2:63:d9:d3:4f:09
Serial Number (int): 330017772726990351331251692404826610814729
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:d0:74:ac:02:07:a3:c4:8d:66:6c:8e:d2:82:e6:be:9a:7c:63:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:ec:e0:31:97:f0:3c:e5:9d:f9:d3:7f:0b:92:1b:62:39:cb:b7:d8
Fingerprint (sha256): 61:93:a2:02:8a:dd:50:73:15:91:59:b1:84:71:cb:d0:14:82:74:9c:9c:63:c1:f7:95:cc:34:69:ab:81:48:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grana.me

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grana.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grana.me
www.grana.me

Other certificates including the domain name grana.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for grana.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApjFfA3FKxSX0GVzf/lb9
h8ovq/Wu3auuSGGC8ew/LSE3dPBgBSre6T0g5ZL4tmrXAF5th85XEzPzhh0HBR1S
U1XiTUUPB8ke8gbj9NsqfsEsbA9o5Y1kUEz1/Rq6Lzzcey5h3LeVg73QuvSA9UIu
33L1LsFX/BMXL5c/D6V688b7V2yZYfW+cmfZLt25Zv+NwwmHdBsr+m9hYIWrEfi3
0AEbVqIHzXpf59RckTN80QcaOhnmycNmhwqJQ8DAkc3HTt/iHEcL6oJmU+iFOZtw
lDvVBRZXiKEEEcuZZqrYpMYI8bxRoQK19DUVpJ1kGoQJ5aY/hAx6xD/RJFY/yJLj
K5I2ml38VvuXdyhSDGxOObz+enGSgcftn7HljWOrcG6MuzGHYqY8Tf6OjMB56G1R
mRp5EseCtdwaRGA/DkhH5LUwWc3754SVNWvbpH3SYFDMkTmxMJWvsvvbvzQHWfNL
THV9eOlTA0B505R2rToYBQLN+qjEjQDVxjwt1M7zbXcA19JDJrQZgXnLKqi9jWHB
WrLY8aAkL7k3BZhJy8oxUJ77L/bqlNdMLy6PsGbOexZKDeztyYsY+UzAKjFZS7eL
tYQPxKfCKphrdm6SyOX92lSoCI67ZtUAFkLZnwTAKVzN/WNRsVOzdMkrwa1NhpX4
qv0n6E4k/j5Y8g78G03NfdMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330017772726990351331251692404826610814729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-04 11:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-03 11:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grana.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678007699291532045842709965238866404386170453609609370556067289205066123465192463759516830052229645719944792579233966498555392041450666575876176931297067286204146303825855364961628775348677194239356279832214979345203140486373500426124054546933338083943248420665891155218633120638537942386094296423745923307066568256476214823399005689256362560881987414223317339529007011429510349017008578833738255209020372032224655101834740968306937853504104810519163356000920497269075528510738431654521380430558962401922319485031142994883533964285427412599132251482595269996485845571000863824609516680877583735679447247098849870363785133498199032462605577757773392300770077039351269949265868486275896516159320232203610369835378908986209838944632148702827317898349209802976931368151029458785328212068606750568535594152131443706721301763024710000589388269877190069983338856506180375620247031876550908242443843335936478124920408753643700764739052578956894161409189598525119468454319638006300737955809210496608588166503325888958257003849512274368004186469183283462234241900623804821587331090981794581392395404614746426439924746925541730816658829955723328765305314601725296761927964249943127772150963525543119524368900073263233374689210342083174490537427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d074ac0207a3c48d666c8ed282e6be9a7c6363
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grana.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grana.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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