lemongrove.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:09:75:16:8d:85:37:97:f5:32:80:e5:b3:bc:c9:b8:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lemongrove.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:09:75:16:8d:85:37:97:f5:32:80:e5:b3:bc:c9:b8:1d
Serial Number (int): 344718608699030587215761918658702782085149
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:b6:f0:43:3f:c7:26:26:ee:af:9e:44:8c:ac:de:28:8c:4b:59:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:23:ee:9b:99:8e:c7:f7:1d:c3:70:ac:67:ee:de:74:7a:48:3c:d5
Fingerprint (sha256): 66:4f:ce:f1:01:07:dc:30:3c:d4:ec:8e:61:f9:c3:87:46:4f:61:a1:b9:9d:f7:d8:c3:c2:03:3f:06:25:12:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lemongrove.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lemongrove.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lemongrove.net

Other certificates including the domain name lemongrove.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for lemongrove.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISA/UJdRaNhTeX9TKA5bO8ybgdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIyMzU4MzlaFw0y
MDA1MjIyMzU4MzlaMBkxFzAVBgNVBAMTDmxlbW9uZ3JvdmUubmV0MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqJMypQWsETUlTz6JDWpxi3ywcqAobZTQ
rp8LADZizSpRvqVPIYch/SffAKwr2ZXobZrV+zsfWO2aKEIvUt7yOKtMMVKHp88Z
rBF0tkR9sGJL1iZ031WvEdptGeBOTMOJ+3omm2ItHw/l+LdeEK4lNopMsgehvlep
M8c1ORLIS5MGUv5CIu+CNGpgMNMPz0A3Vv0mVYNlXLQttpd6XmUyNP5cnhPvdb51
eHiDu/EnwiFJMrtTqmLV4mAUzbMKYRjqbpwwI5vyNY5AWadmnMXIto6giiOMBVGJ
7wK7UkajhhGXFnA6OnLJ386/S2phnKVZLIYF2yJ7jX9tBRrsKYut+cZFbQMQVHbo
II4BQavZp6fwr5GZiLmIkZks9xk82jIMCalUHq1e/6SCk9Qp9HTrIm5DGlfjnRT2
7SeN9qN8E75dpL2o2eS+Lb+rqbZvTh8sqr8UFt6RDPS17etxCxRSYWk0yPcbvfWc
Jl6d3SqwIrgdMAs/GSyv0nPq+xjPVi/t5RmMO1tQDAYG3vWlqtFlJDQkVuKtHa6c
hgCqArZUZP9dx3VChzA1hdal+zjAIue+T8EL9PBU++RRRgc2oCgGZAnSYwEl14Qv
9QTCBzYwug2N39j3eP7KRZIGY8x62EO8h4xvrsQY4Qxc/+myx3gRrMSCGnwYgxA6
icTQPEfKBv8CAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUr7bw
Qz/HJibur55EjKzeKIxLWQAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5sZW1vbmdyb3ZlLm5ldDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcG+Np+gA
AAQDAEcwRQIhAII/nNfe0EMC3iMBYUBOEkUrsRrf80DyYm2qT7NrkFg9AiBt9cJS
e4B1of3msJ20B2LU8d6YEnY3Gq87LL+hYQCt+QB2ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABcG+Np8sAAAQDAEcwRQIgfKjYxbZKmKXxYPpCZXUM
H21Q2y2Cm9v78GfCgQ39xBsCIQD8FuHwZGN561Eg/7kmC4zahLf1C04o/0Uonhl5
zhfXJDANBgkqhkiG9w0BAQsFAAOCAQEAieOIcJdIOs/WDXVe9GdTJIEoX0oq2VUj
RldzL4SyxCmfKFbInwk55BCdz+zgLForT+0CgjXamhwoZ8kCDOJCPlsSn4Py8A41
N+KroCBc6XQJl+DJpzsjRPwRb/gaFCVAPnBU2oczO018pe/PEhS4IGrl9gYg1sAQ
Ai4dHFsZ89pymuZbQWRbqHs5Zalt+meCrDHolDyOjfdpzKLCNvj5lfwsrUV6KV0W
vxE0hpU3EMzHjZoHJJqAVl+Y7xomZK3AHyteyqd4KF/HdydVLumsOTEVnbZmppVw
42cyjwTwlY8UlgvOQyvGRHcaiqO/BidL7ThMOvCeB9KxVB48v37h9w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqJMypQWsETUlTz6JDWpx
i3ywcqAobZTQrp8LADZizSpRvqVPIYch/SffAKwr2ZXobZrV+zsfWO2aKEIvUt7y
OKtMMVKHp88ZrBF0tkR9sGJL1iZ031WvEdptGeBOTMOJ+3omm2ItHw/l+LdeEK4l
NopMsgehvlepM8c1ORLIS5MGUv5CIu+CNGpgMNMPz0A3Vv0mVYNlXLQttpd6XmUy
NP5cnhPvdb51eHiDu/EnwiFJMrtTqmLV4mAUzbMKYRjqbpwwI5vyNY5AWadmnMXI
to6giiOMBVGJ7wK7UkajhhGXFnA6OnLJ386/S2phnKVZLIYF2yJ7jX9tBRrsKYut
+cZFbQMQVHboII4BQavZp6fwr5GZiLmIkZks9xk82jIMCalUHq1e/6SCk9Qp9HTr
Im5DGlfjnRT27SeN9qN8E75dpL2o2eS+Lb+rqbZvTh8sqr8UFt6RDPS17etxCxRS
YWk0yPcbvfWcJl6d3SqwIrgdMAs/GSyv0nPq+xjPVi/t5RmMO1tQDAYG3vWlqtFl
JDQkVuKtHa6chgCqArZUZP9dx3VChzA1hdal+zjAIue+T8EL9PBU++RRRgc2oCgG
ZAnSYwEl14Qv9QTCBzYwug2N39j3eP7KRZIGY8x62EO8h4xvrsQY4Qxc/+myx3gR
rMSCGnwYgxA6icTQPEfKBv8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344718608699030587215761918658702782085149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 23:58:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 23:58:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lemongrove.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687725964193713091149439686927194704289553800938348486357042099559216342877540726792235251109615482300271935553821673093871884933688111469112000519430487855626655009340452706378699524253779121654360218627757031389771504320674574923894653609390594691000730373718187825086269464232871282303354327091106538830119473114826171241265676727357175435497931485493168900105669610585113583832530041461633981245104036061123894084054426876892755595849777149537034633806238854934114103772446351532790975518723873166003545163534074112612595649443272215716958440227514441947236464119549566541410334285675905898046922570532781805904178507310044161792557101510890676332483865582420109744856079646254232241409067994916179520336337298570309398845747527324102163900457790412217072866720111500123015440869309113860191095968333509450568488368343002326176104813495107363747080188728317444206998009290207939854011627362038456892939708264983376419451815179381615271616303607117785502587392868527790004995250620065637874473924970090524060262379709851699367056945995550158044707889526185317220042297949462702149523872348405833124105431127686645053247888315829719324998142241367614533459141680428555660395498660477583224505950090851887753067691452164746783622911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb6f0433fc72626eeaf9e448cacde288c4b5900
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemongrove.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706f8da7e80000040300473045022100823f9cd7ded04302de230161404e12452bb11adff340f2626daa4fb36b90583d02206df5c2527b8075a1fde6b09db40762d4f1de981276371aaf3b2cbfa16100adf9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706f8da7cb000004030047304502207ca8d8c5b64a98a5f160fa4265750c1f6d50db2d829bdbfbf067c2810dfdc41b022100fc16e1f0646379eb5120ffb9260b8cda84b7f50b4e28ff45289e1979ce17d724
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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